Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lekDwfra0eTuiZ5tk3kfCIJuO7I.roa
File: lekDwfra0eTuiZ5tk3kfCIJuO7I.roa (raw, json)
Hash identifier: qgIIOkFACtuDLi8htpLw8q2ciKoTeW4KAdUyOsFM348=
Subject key identifier: 95:E9:03:C1:FA:DA:D1:E4:EE:89:9E:6D:93:79:1F:08:82:6E:3B:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F48741EBB2FC4A18089A906E503F9996
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lekDwfra0eTuiZ5tk3kfCIJuO7I.roa
Signing time: Wed 30 Sep 2026 22:54:59 +0000
ROA not before: Wed 30 Sep 2026 22:54:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206007
IP address blocks: 191.44.16.0/24 maxlen: 24
191.44.23.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:87:41:eb:b2:fc:4a:18:08:9a:90:6e:50:3f:99:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 30 22:54:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95e903c1fadad1e4ee899e6d93791f08826e3bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:63:fa:57:ec:b7:7f:33:d1:6a:df:be:15:
4d:1b:fe:b0:6b:e5:21:6b:e8:1f:db:d4:49:78:69:
da:dc:09:87:4e:9e:2a:05:a1:93:e2:82:17:8a:c5:
7a:15:76:39:f2:4c:93:30:92:12:14:c5:34:14:d8:
04:0d:4b:11:e5:be:10:12:a7:a7:ab:1a:ad:3e:42:
b9:60:d1:58:af:e0:5f:2b:cd:80:0c:16:f0:c2:c0:
e7:e6:06:2a:27:e9:f1:43:ea:63:93:05:a9:c5:a1:
09:e1:91:28:c7:1c:d1:4e:15:c4:e1:9a:4f:f9:2d:
0d:7b:b8:bd:e3:5e:01:19:dc:b3:e0:e0:27:db:9e:
da:d0:f6:51:8c:db:09:90:f8:31:fa:a3:44:29:05:
c6:10:ec:cd:0f:ed:c8:08:53:9f:0b:79:37:24:eb:
df:ed:a8:e0:c2:18:b5:00:28:ce:40:60:e9:e2:18:
de:ec:6f:64:d1:31:4a:ca:da:b4:ff:d5:9d:25:3d:
bc:66:d9:7b:56:8a:b5:0c:de:4e:ea:fc:3f:ba:e4:
1c:15:f4:91:c0:c9:5e:2b:2f:9e:bd:a5:f4:62:14:
81:2f:94:bf:9c:33:eb:32:58:27:da:bd:0d:fd:83:
76:54:95:0c:01:cd:4a:94:6e:33:4c:f6:76:89:96:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:03:C1:FA:DA:D1:E4:EE:89:9E:6D:93:79:1F:08:82:6E:3B:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lekDwfra0eTuiZ5tk3kfCIJuO7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.16.0/24
191.44.23.0/24
200.102.176.0/24
200.102.181.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bf:8e:7a:4e:27:a8:d2:e6:7e:22:31:54:7c:8f:65:9b:86:
f0:f3:a2:ea:47:6f:fd:3e:d9:9a:2f:fd:1d:6a:f6:e7:1f:4d:
6f:07:8c:05:f0:06:d0:a5:df:2b:16:77:86:7d:90:7b:66:18:
46:db:50:78:cc:cd:f0:8e:42:bc:f6:c1:7f:bb:30:7f:36:e0:
a5:e5:b3:7f:5c:f8:fb:33:7c:ce:44:80:a4:e3:1a:23:c0:89:
d6:d3:57:a0:5e:03:e2:7c:3b:7d:77:cf:b8:48:d5:7d:cb:53:
d7:25:58:02:53:65:bb:5b:74:95:2a:68:b6:7a:fd:1b:fc:89:
4b:c8:04:5d:44:9e:12:7e:f0:8e:3f:05:5f:9a:1d:a5:a1:f0:
df:92:55:a1:b3:7d:56:ac:41:95:55:88:97:eb:2e:f2:32:40:
1b:ef:5c:8b:31:b1:fc:09:13:fc:06:bc:bd:18:af:23:e8:d6:
e2:b7:41:4e:e8:fe:17:99:ea:50:89:d4:6f:9c:f6:9e:00:1a:
b3:50:e9:eb:64:ab:23:2d:26:e1:6d:aa:2c:15:21:e3:a9:e1:
98:6e:8d:c4:77:96:75:19:8a:18:f3:03:1c:ef:5a:52:3c:4c:
56:c7:18:73:fe:f6:d0:e1:98:4a:26:3b:06:85:0e:8a:b1:18:
03:44:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:57:24 2026 by rpki-client