Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EHarbYIcrwkFiYk6G4chbyvg6Y8.roa
File: EHarbYIcrwkFiYk6G4chbyvg6Y8.roa (raw, json)
Hash identifier: 5ES6/P1a4BTm3Xd8Z23AUh9FtN6sRjApD4LC7Uo+Ouc=
Subject key identifier: 10:76:AB:6D:82:1C:AF:09:05:89:89:3A:1B:87:21:6F:2B:E0:E9:8F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EEF24EB4617EBB265E9182E5AD1AD6C13
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EHarbYIcrwkFiYk6G4chbyvg6Y8.roa
Signing time: Mon 22 Jun 2026 11:43:54 +0000
ROA not before: Mon 22 Jun 2026 11:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.227.114.0/24 maxlen: 24
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:24:eb:46:17:eb:b2:65:e9:18:2e:5a:d1:ad:6c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 22 11:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1076ab6d821caf090589893a1b87216f2be0e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:44:8b:29:32:a6:8d:0e:6a:06:d0:1b:7a:
63:6e:7e:bd:d9:bf:40:7a:b4:74:d1:e6:ba:21:8e:
c1:b0:50:f0:e8:ec:2b:c0:b0:c6:63:a3:a1:9d:fc:
ac:af:96:59:37:bc:6c:3e:4c:7b:37:8d:36:29:7c:
c3:13:1b:ab:6d:0c:5f:91:a1:3d:d8:cb:bd:05:59:
44:f3:fa:84:9b:c3:f7:f9:e4:a2:09:ab:0b:14:f8:
03:14:49:09:a6:58:24:c1:0a:22:3e:a8:07:20:96:
c6:59:f2:36:9f:c7:4c:c3:fa:10:3a:0a:c6:34:bf:
b7:1d:a2:78:35:77:34:f3:76:9d:3c:07:ff:3f:b4:
f8:c6:d4:b6:cc:44:1c:b7:72:bf:46:98:75:8e:bd:
0a:2a:44:c3:1f:d1:76:bb:b5:56:3e:27:13:88:8d:
83:c6:11:7f:f6:29:f3:1f:e5:eb:02:a0:db:b4:3f:
2f:2d:8f:bd:c0:5a:a7:3f:01:80:4c:0e:a9:be:ef:
41:02:9c:8a:fd:76:56:b1:23:6e:91:d0:bf:44:fa:
26:bf:1c:c3:0f:ff:43:79:f3:50:67:e9:36:5c:7c:
a4:dd:80:61:56:56:53:3e:45:ff:f2:ee:8e:db:07:
a0:c4:a7:2d:64:77:4a:11:da:59:53:8f:ef:4e:65:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:76:AB:6D:82:1C:AF:09:05:89:89:3A:1B:87:21:6F:2B:E0:E9:8F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EHarbYIcrwkFiYk6G4chbyvg6Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.114.0/24
IPv6:
2a13:bb40::/29
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
c0:42:26:21:21:7a:c0:e7:c7:db:4c:35:52:cf:01:4b:e3:f8:
8b:da:e0:4d:b5:e3:fb:aa:1d:48:4c:92:4a:be:7a:fe:cd:f6:
54:44:ad:b5:fa:fb:cb:08:22:d7:a5:05:28:80:50:d6:47:85:
dd:e1:21:0e:ad:cc:cf:8c:1c:5d:59:47:01:10:14:5a:b5:35:
57:5b:7a:ab:bc:4f:90:09:9d:24:53:7d:21:54:c7:58:56:a7:
ca:e4:6a:2f:7d:e4:1f:65:d6:06:be:d4:43:84:74:d1:0b:f1:
ea:19:ce:95:b7:1a:fb:f4:f7:04:28:6f:6d:75:b2:23:6e:55:
76:8c:c0:b9:cf:d3:9b:7e:41:07:45:bc:34:7c:58:3c:f1:9c:
cf:df:96:e0:9c:43:fb:20:04:57:2c:ae:22:c6:22:24:35:85:
d3:52:af:c0:11:1a:d6:da:f0:29:b4:69:1c:8a:a5:1b:a7:09:
ba:b3:bb:90:3a:45:d8:c1:db:a3:4b:35:86:7d:a5:ac:be:84:
59:c1:d2:f6:c1:70:9b:f0:bc:11:70:2a:25:4c:5c:e7:21:35:
58:d4:93:0e:8f:36:98:a9:e4:b2:8c:81:e4:d1:8e:cb:30:a8:
f7:07:9d:1b:30:99:78:b0:c4:9d:f5:bf:75:7d:11:fc:58:9d:
bc:13:a0:58
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ7vJOtGF+uyZekYLlrRrWwTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjIyMTE0MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDc2YWI2ZDgyMWNhZjA5MDU4OTg5M2ExYjg3MjE2ZjJiZTBlOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobVEiykypo0OagbQG3pjbn692b9A
erR00ea6IY7BsFDw6OwrwLDGY6Ohnfysr5ZZN7xsPkx7N402KXzDExurbQxfkaE9
2Mu9BVlE8/qEm8P3+eSiCasLFPgDFEkJplgkwQoiPqgHIJbGWfI2n8dMw/oQOgrG
NL+3HaJ4NXc083adPAf/P7T4xtS2zEQct3K/Rph1jr0KKkTDH9F2u7VWPicTiI2D
xhF/9inzH+XrAqDbtD8vLY+9wFqnPwGATA6pvu9BApyK/XZWsSNukdC/RPomvxzD
D/9DefNQZ+k2XHyk3YBhVlZTPkX/8u6O2wegxKctZHdKEdpZU4/vTmWMswIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFBB2q22CHK8JBYmJOhuHIW8r4OmPMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvRUhhcmJZSWNyd2tGaVlrNkc0Y2hieXZnNlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAW+NyMBQE
AgACMA4DBQMqE7tAAwUDKhPCQDANBgkqhkiG9w0BAQsFAAOCAQEAwEImISF6wOfH
20w1Us8BS+P4i9rgTbXj+6odSEySSr56/s32VESttfr7ywgi16UFKIBQ1keF3eEh
Dq3Mz4wcXVlHARAUWrU1V1t6q7xPkAmdJFN9IVTHWFanyuRqL33kH2XWBr7UQ4R0
0Qvx6hnOlbca+/T3BChvbXWyI25VdozAuc/Tm35BB0W8NHxYPPGcz9+W4JxD+yAE
VyyuIsYiJDWF01KvwBEa1trwKbRpHIqlG6cJurO7kDpF2MHbo0s1hn2lrL6EWcHS
9sFwm/C8EXAqJUxc5yE1WNSTDo82mKnksoyB5NGOyzCo9wedGzCZeLDEnfW/dX0R
/FidvBOgWA==
-----END CERTIFICATE-----
Generated at Tue Jun 23 03:37:01 2026 by rpki-client