Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/x0_x9OLAylMg44mHBV5LDtAMUQI.roa
File: x0_x9OLAylMg44mHBV5LDtAMUQI.roa (raw, json)
Hash identifier: cCV6UFwJZkVyonyARdeu9B5x1X2TFgjLUKbhfWujsek=
Subject key identifier: C7:4F:F1:F4:E2:C0:CA:53:20:E3:89:87:05:5E:4B:0E:D0:0C:51:02
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F3022930F9BB3D6A1AE99136E9C2E9DD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/x0_x9OLAylMg44mHBV5LDtAMUQI.roa
Signing time: Wed 30 Sep 2026 15:50:00 +0000
ROA not before: Wed 30 Sep 2026 15:50:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214016
IP address blocks: 191.44.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:02:29:30:f9:bb:3d:6a:1a:e9:91:36:e9:c2:e9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 30 15:50:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c74ff1f4e2c0ca5320e38987055e4b0ed00c5102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:64:99:9c:1b:96:2a:58:69:5d:41:b0:75:
2d:10:94:ce:54:68:b0:b6:a5:71:49:d2:d1:c9:3a:
cc:18:1d:dd:64:2f:2c:48:5b:9a:4d:9a:c9:f5:e8:
56:65:5b:6d:4f:92:e4:32:4d:25:0c:2e:d8:7a:2e:
c1:aa:94:51:7e:e9:cd:5d:5e:e9:58:33:88:0e:2f:
72:d9:58:b7:7b:cf:54:6e:73:04:75:2e:5d:2d:6f:
8a:fd:f4:93:51:be:48:75:83:2b:90:84:49:c6:81:
81:64:4b:94:37:3d:7c:d8:cd:17:9d:f3:db:7c:74:
88:8d:d7:5b:37:34:55:7f:e0:0a:29:5a:a0:b5:39:
db:bc:e8:f2:1f:47:c0:70:d7:55:35:80:32:a1:77:
7e:d7:6b:c4:c7:d0:2e:db:ec:9e:dd:58:4c:73:4a:
9e:10:35:3d:1f:44:a9:cb:72:52:48:ec:47:90:32:
25:6b:52:c0:8f:06:5e:c4:c4:2b:ab:33:b1:9d:d0:
0f:ce:72:09:f9:86:56:42:82:d3:56:bb:c9:56:b7:
5c:1a:41:1b:4c:cc:1e:72:c4:c7:e5:77:06:75:71:
ed:a3:ed:16:8a:a9:75:d1:e4:b7:08:a2:17:ef:08:
e3:23:df:f9:b8:29:17:34:cb:2e:9f:b8:d0:bb:f7:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4F:F1:F4:E2:C0:CA:53:20:E3:89:87:05:5E:4B:0E:D0:0C:51:02
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/x0_x9OLAylMg44mHBV5LDtAMUQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.20.0/24
Signature Algorithm: sha256WithRSAEncryption
71:31:23:05:9c:c3:fd:05:85:00:3e:20:19:df:48:37:95:41:
4f:30:09:fe:a8:7c:06:bc:5b:97:2a:88:fc:37:67:19:14:c1:
a4:61:1f:0b:cb:44:6f:04:13:e7:bc:ff:a1:ef:80:b5:6e:d3:
01:e0:23:cc:81:7f:65:e8:e0:5e:96:c3:0d:56:76:8d:cd:31:
4f:6b:84:60:29:79:9b:c0:64:5f:60:92:fa:fe:9d:c2:ea:bf:
e2:6a:23:87:94:8d:4d:20:64:4d:2d:f3:1d:cf:61:fb:20:d1:
ab:8a:a1:55:4b:84:31:ba:c6:5b:5c:08:ca:54:3e:e1:c0:01:
c9:4a:4f:1d:e9:76:e3:dd:3b:66:c2:d0:c3:f8:5e:19:5d:53:
fa:89:a2:80:8b:0b:a3:67:8e:e3:31:8b:ed:07:f2:e0:1d:e7:
36:07:45:f5:cb:4a:c7:09:f4:93:c7:c7:86:d2:77:fe:6b:bf:
ea:9b:bb:e6:36:fd:fd:de:37:9a:34:df:f0:7e:54:ff:8d:6d:
69:51:25:06:ec:e1:a0:56:c3:47:21:81:60:73:4a:5a:c4:36:
ef:07:dd:73:cd:ba:0a:6e:ed:f9:33:df:bc:61:6e:03:13:06:
3e:82:03:16:3d:7a:ac:0e:ee:62:6a:fb:0a:67:84:42:69:29:
80:c6:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:32 2026 by rpki-client