Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cgV_EiC27TlbOhn_pKhC5Yx6i68.roa
File: cgV_EiC27TlbOhn_pKhC5Yx6i68.roa (raw, json)
Hash identifier: omXqkNSVgoUmncU4iXkXqdvrWjxbaSF0RXYxlBWFXOU=
Subject key identifier: 72:05:7F:12:20:B6:ED:39:5B:3A:19:FF:A4:A8:42:E5:8C:7A:8B:AF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0E024AB590D4701ECE4A888675572A75A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cgV_EiC27TlbOhn_pKhC5Yx6i68.roa
Signing time: Sat 26 Sep 2026 23:54:54 +0000
ROA not before: Sat 26 Sep 2026 23:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 200.181.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:24:ab:59:0d:47:01:ec:e4:a8:88:67:55:72:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 26 23:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72057f1220b6ed395b3a19ffa4a842e58c7a8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:be:79:6c:dd:05:e5:38:cf:88:5e:d0:68:
f3:ee:54:39:e6:c1:3a:ef:e3:b1:cc:13:af:21:61:
07:38:12:ff:30:5e:e0:66:6b:07:fd:35:a8:db:94:
7e:1b:4a:0d:5c:52:bd:59:88:31:18:e0:13:28:44:
06:41:73:31:53:7c:aa:56:50:26:10:8b:10:e5:34:
d2:82:ee:f5:3d:ff:2c:1a:7a:0c:70:5f:22:31:23:
68:cd:82:e6:4c:9c:c1:e9:12:73:c6:cc:87:8f:a8:
fb:d8:e2:69:3f:99:f0:38:09:ce:bd:db:0d:6f:bd:
82:cd:f8:5c:7b:56:fb:32:3d:8d:6c:4d:08:ef:b8:
cf:fd:19:9b:e8:68:d2:82:38:af:0f:1a:9d:c4:f1:
0e:fa:f9:c0:c6:b8:cc:82:20:fd:de:49:94:34:4e:
1d:81:33:c8:46:1c:5b:30:06:b9:64:ed:79:22:04:
78:36:e3:65:06:cc:0a:b8:e7:74:a6:d1:74:c3:6d:
e8:34:6c:94:f8:c0:05:c0:87:56:91:ff:d9:0c:13:
e9:fe:da:60:8d:09:46:9e:c2:61:2a:28:c5:aa:26:
e7:26:2e:aa:8e:19:16:06:89:1c:ea:4a:94:e4:19:
f6:c3:ed:e5:1f:3d:ba:d2:51:3d:cc:df:ae:cf:f2:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:05:7F:12:20:B6:ED:39:5B:3A:19:FF:A4:A8:42:E5:8C:7A:8B:AF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cgV_EiC27TlbOhn_pKhC5Yx6i68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.181.81.0/24
Signature Algorithm: sha256WithRSAEncryption
36:63:8a:55:e6:36:ef:08:0e:02:91:fb:8f:a7:27:b5:2f:3e:
46:04:50:ab:b7:c0:ae:cb:6f:3a:72:5b:31:43:f2:b6:02:40:
cc:e6:ea:56:13:c9:f4:85:98:af:a8:21:85:1e:20:8b:da:c3:
03:fe:12:e6:00:3b:8d:b2:6e:b1:04:c6:08:27:e9:ad:8a:72:
6e:b8:c7:d4:90:1d:4f:3a:02:1e:9f:17:fc:25:5c:fd:71:af:
d9:98:80:be:cf:ac:82:da:fd:11:79:4d:3f:99:b9:70:b7:4b:
6b:2d:aa:b3:eb:bb:24:d6:ae:a5:d3:fe:06:58:81:4a:f0:b8:
5d:06:75:bd:9e:ce:aa:a4:de:09:d3:b3:c4:34:b9:8c:ce:8a:
8f:66:55:89:35:e0:03:5a:1e:ae:23:17:93:82:4b:f1:f1:3f:
29:0a:d5:70:28:0d:6e:1b:7b:09:3e:c1:73:27:7d:c2:15:11:
44:a5:e4:8f:23:f0:53:b2:4b:bd:49:92:81:08:c8:91:08:8c:
7f:21:0f:75:0a:f9:9a:4d:14:19:d7:7b:76:c0:6b:c6:00:e8:
18:f4:71:47:85:7a:f7:3c:31:38:30:aa:a0:f2:47:fc:f6:89:
0d:d2:a7:26:d1:39:fa:86:dd:a9:0e:40:65:8f:ac:92:aa:34:
8c:6a:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:21 2026 by rpki-client