Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ee8FAMKz-KmcTmxXLcmgEJb0ckk.roa
File: ee8FAMKz-KmcTmxXLcmgEJb0ckk.roa (raw, json)
Hash identifier: nJZhzLNfcwPGGQc6XBoWHPo2IhRBDC4shOAZgrcQ3XM=
Subject key identifier: 79:EF:05:00:C2:B3:F8:A9:9C:4E:6C:57:2D:C9:A0:10:96:F4:72:49
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E68E23F79752AE80AFAD2F160618
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ee8FAMKz-KmcTmxXLcmgEJb0ckk.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215997
IP address blocks: 185.244.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e6:8e:23:f7:97:52:ae:80:af:ad:2f:16:06:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79ef0500c2b3f8a99c4e6c572dc9a01096f47249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:33:6c:6b:e4:62:ad:a7:2c:35:3a:25:00:
55:5e:6d:68:68:ed:d7:7e:be:54:1c:c1:02:9d:eb:
a1:83:bc:a8:15:de:a7:87:89:fc:6f:67:4f:32:b3:
14:a3:93:2d:c5:38:44:b7:29:e0:bd:a4:88:4e:30:
da:1c:c9:0e:e5:12:3e:f8:0a:34:65:bf:54:e7:c7:
b0:fb:d3:2e:c6:b4:3a:2a:7b:0f:3c:ec:21:20:30:
47:2f:c8:58:4a:6d:1e:60:f7:10:d3:55:d5:3b:7f:
3c:3b:9a:98:22:9e:5a:92:55:08:8d:bc:61:26:5c:
fe:39:35:79:23:c7:82:44:1b:32:ca:00:e7:d2:8b:
b0:f6:3e:72:11:d6:fd:17:06:62:f1:cf:4c:4b:ba:
18:e9:52:ae:3b:83:63:bf:b7:9a:04:88:de:34:35:
e5:26:aa:73:05:f2:3f:7b:07:20:93:0e:3e:be:ad:
71:0c:0e:11:6d:8f:c5:a5:b6:f3:90:30:5d:85:5a:
85:7c:b3:55:0a:20:65:24:d4:a3:a8:f0:da:8f:cc:
5b:d6:a0:d0:bf:ed:34:98:db:e4:fb:bc:91:59:a6:
e1:af:b1:ce:50:85:eb:9f:fc:b6:d3:07:ba:dd:18:
55:33:6b:5f:54:7b:e0:8c:1a:37:a0:8d:ab:d5:82:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EF:05:00:C2:B3:F8:A9:9C:4E:6C:57:2D:C9:A0:10:96:F4:72:49
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ee8FAMKz-KmcTmxXLcmgEJb0ckk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.174.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e1:4f:34:3f:b4:cb:a3:63:b0:49:50:fc:1f:5c:a4:a1:84:
4e:e7:a5:d3:64:32:b2:4b:c6:a4:d7:92:52:5a:5d:54:43:f4:
a4:d6:ba:e1:a5:47:d8:33:53:f1:7d:fc:60:30:c7:0f:45:6a:
21:22:27:69:7d:3c:67:33:3d:ef:6a:4f:38:00:19:c8:24:be:
d1:fe:34:b0:de:e4:c3:cf:f0:59:6d:4a:43:07:4f:02:85:ed:
53:78:b1:36:ac:4b:7d:b0:de:03:8a:3c:14:ee:8f:a1:68:0e:
39:22:b2:ac:14:18:27:d6:91:b4:fc:d7:ba:cb:ca:13:4c:ad:
6e:bc:9b:91:7f:99:15:b3:68:f6:b1:86:4e:93:96:e0:5f:99:
86:6e:49:50:74:73:bd:8a:78:26:5d:af:05:45:90:9b:44:74:
e0:ca:70:3c:83:53:15:12:be:e8:c9:99:86:02:d4:61:fd:17:
9c:44:15:d4:ff:76:04:9a:93:28:e9:bf:0c:3a:e9:0c:9a:65:
25:8b:45:0f:a6:60:10:0b:c8:0c:fe:fa:82:85:e7:cd:e0:20:
3a:dd:d4:92:31:4f:8a:42:97:05:20:ba:c0:f9:19:41:36:88:
88:13:a3:28:d4:53:18:28:b8:a6:75:93:a9:16:07:9c:97:6b:
f9:87:45:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaOaOI/eXUq6Ar60vFgYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWVmMDUwMGMyYjNmOGE5OWM0ZTZjNTcyZGM5YTAxMDk2ZjQ3MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5MzbGvkYq2nLDU6JQBVXm1oaO3X
fr5UHMECneuhg7yoFd6nh4n8b2dPMrMUo5MtxThEtyngvaSITjDaHMkO5RI++Ao0
Zb9U58ew+9MuxrQ6KnsPPOwhIDBHL8hYSm0eYPcQ01XVO388O5qYIp5aklUIjbxh
Jlz+OTV5I8eCRBsyygDn0ouw9j5yEdb9FwZi8c9MS7oY6VKuO4Njv7eaBIjeNDXl
JqpzBfI/ewcgkw4+vq1xDA4RbY/FpbbzkDBdhVqFfLNVCiBlJNSjqPDaj8xb1qDQ
v+00mNvk+7yRWabhr7HOUIXrn/y20we63RhVM2tfVHvgjBo3oI2r1YJOYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnvBQDCs/ipnE5sVy3JoBCW9HJJMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvZWU4RkFNS3otS21jVG14WExjbWdFSmIwY2trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufSuMA0G
CSqGSIb3DQEBCwUAA4IBAQBA4U80P7TLo2OwSVD8H1ykoYRO56XTZDKyS8ak15JS
Wl1UQ/Sk1rrhpUfYM1PxffxgMMcPRWohIidpfTxnMz3vak84ABnIJL7R/jSw3uTD
z/BZbUpDB08Che1TeLE2rEt9sN4DijwU7o+haA45IrKsFBgn1pG0/Ne6y8oTTK1u
vJuRf5kVs2j2sYZOk5bgX5mGbklQdHO9ingmXa8FRZCbRHTgynA8g1MVEr7oyZmG
AtRh/RecRBXU/3YEmpMo6b8MOukMmmUli0UPpmAQC8gM/vqChefN4CA63dSSMU+K
QpcFILrA+RlBNoiIE6Mo1FMYKLimdZOpFgecl2v5h0U9
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:30 2026 by rpki-client