Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l7zD9sGdDhMAyaHTz-T-YFSNbg8.roa
File: l7zD9sGdDhMAyaHTz-T-YFSNbg8.roa (raw, json)
Hash identifier: dXKCaNMuGJdSznhsmCxqJml0KBACZWuc8u1aSQbuPxk=
Subject key identifier: 97:BC:C3:F6:C1:9D:0E:13:00:C9:A1:D3:CF:E4:FE:60:54:8D:6E:0F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F8BDBE295E9304F09C1EEE4E7D01D302
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l7zD9sGdDhMAyaHTz-T-YFSNbg8.roa
Signing time: Thu 01 Oct 2026 18:32:59 +0000
ROA not before: Thu 01 Oct 2026 18:32:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210699
IP address blocks: 200.102.179.0/24 maxlen: 24
200.181.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:bd:be:29:5e:93:04:f0:9c:1e:ee:4e:7d:01:d3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 1 18:32:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97bcc3f6c19d0e1300c9a1d3cfe4fe60548d6e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:04:ea:9b:3d:d3:ff:55:44:a6:ff:fc:0e:
60:5a:3f:c5:a2:b4:e7:fb:df:d5:d7:be:c4:7a:09:
71:fc:5b:cc:ad:fb:a3:a2:af:9d:de:13:a7:24:23:
0b:5c:17:56:6a:5d:9b:3d:e0:e5:81:4e:19:57:34:
c9:be:42:5f:df:81:c0:4b:23:73:92:2c:d5:85:16:
ad:15:30:e9:44:d4:bb:44:de:c4:9a:a1:57:88:5d:
87:35:ca:f1:68:4f:bc:09:c5:ec:e0:c1:05:be:49:
fa:74:97:95:78:4f:91:6f:6e:24:3e:a7:74:6f:f7:
7a:97:72:00:0b:e7:b3:d8:4a:8d:b4:bb:f7:5a:42:
15:a1:9e:ed:aa:9b:72:d7:b2:1c:ee:98:cc:72:7b:
f5:92:d7:d3:fe:b0:85:88:b9:23:4b:c1:f6:0e:d1:
00:4f:82:7a:b1:62:41:02:27:6d:e3:38:4d:4f:a5:
c3:df:16:1f:52:f8:c3:08:9b:e0:ae:d4:79:8b:ee:
3a:d6:3f:aa:8e:ba:96:d1:cf:8c:0f:75:07:91:c7:
3e:85:bf:2b:d2:9d:59:d4:b7:ba:d3:1f:d6:50:91:
c3:c2:ad:97:c9:b4:65:a3:9c:38:b9:66:39:ef:22:
07:54:17:15:2e:59:9d:6a:10:1b:cd:22:a4:92:8f:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BC:C3:F6:C1:9D:0E:13:00:C9:A1:D3:CF:E4:FE:60:54:8D:6E:0F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l7zD9sGdDhMAyaHTz-T-YFSNbg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.179.0/24
200.181.82.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ba:86:60:73:38:28:a9:a8:13:d7:a6:42:c5:3d:31:a6:d8:
5f:8d:a2:9d:01:44:3c:0d:1e:1f:fa:d4:3f:fc:99:7f:3b:40:
76:a1:e1:fd:e5:8e:96:0f:89:b3:ca:09:58:87:e3:92:38:9b:
80:4b:65:a1:f4:0d:ab:cc:64:13:70:2d:64:14:07:fa:f6:cd:
f7:22:4c:8f:27:c3:0f:5e:ca:9c:92:b1:4e:6d:62:f0:be:69:
ba:2d:f8:6d:16:fa:72:5b:59:e9:ba:f3:14:f0:ef:62:f4:62:
e5:b0:9c:94:ce:43:f7:80:b1:ed:e9:4a:3b:d0:1f:65:72:f6:
3d:4e:8b:6c:82:00:a3:08:18:c2:08:70:9c:11:9f:a7:89:a7:
29:aa:a0:9f:ba:0f:cf:ce:3f:91:15:3e:cd:c1:7a:5c:41:d3:
29:c5:77:ce:b4:27:ff:a6:5b:ec:6c:b7:34:d6:cc:00:f9:36:
85:45:4a:4a:23:00:61:81:0b:10:6a:b1:5e:71:03:3f:f4:1a:
6d:d4:9e:76:93:e3:38:c5:84:05:2c:69:05:1c:d5:ba:8a:7f:
5b:f7:a5:2c:5b:ac:61:92:ea:86:2b:59:0a:cc:2e:93:4c:f1:
02:37:83:91:68:96:06:0c:5b:66:ee:1c:ea:2b:30:cd:01:d3:
a0:7d:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:15 2026 by rpki-client