Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-EEZ7tMFdafMCTWWr6iScU502pA.roa
File: 1-EEZ7tMFdafMCTWWr6iScU502pA.roa (raw, json)
Hash identifier: LRVZjLNZRuw+YmgqCmK/TnXLYQ6plT/Kh23uQk+kuxo=
Subject key identifier: F8:41:19:EE:D3:05:75:A7:CC:09:35:96:AF:A8:92:71:4E:74:DA:90
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019E780B6A78F478ECCD3E664E199397188A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-EEZ7tMFdafMCTWWr6iScU502pA.roa
Signing time: Sat 30 May 2026 08:41:14 +0000
ROA not before: Sat 30 May 2026 08:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 88.209.198.0/24 maxlen: 24
88.209.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:78:0b:6a:78:f4:78:ec:cd:3e:66:4e:19:93:97:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 30 08:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f84119eed30575a7cc093596afa892714e74da90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:79:04:c3:80:03:9d:38:52:08:88:32:58:
7a:00:e2:54:16:7a:d5:1c:c0:67:a3:ad:94:b3:35:
0b:ea:28:7b:21:f7:d5:56:55:82:4c:39:08:3e:c6:
2d:a2:66:c4:37:36:45:1a:55:d8:e1:99:93:e6:55:
00:35:f7:aa:15:f1:45:b2:9d:3d:4e:87:bf:aa:72:
55:e5:03:ee:77:74:33:e0:30:d0:b6:35:69:86:22:
ec:9c:15:45:24:6f:93:41:b3:f5:96:63:fc:cb:c5:
f3:c0:1e:aa:d7:cd:87:c5:d2:be:87:ae:5e:03:1c:
4b:ad:76:25:a5:5d:17:5c:d1:fc:8b:fb:e7:85:c8:
e8:4d:49:0a:bc:56:a1:23:49:22:7e:63:d6:75:a6:
3e:ea:1a:42:e8:82:c0:e1:01:1e:85:6f:99:86:63:
17:5d:b8:27:1e:70:ba:44:f7:9c:7e:b8:ac:f9:bc:
8c:72:23:bf:6b:3f:27:39:36:fd:c9:92:39:60:7f:
a7:a7:15:15:ac:91:9c:a6:af:3d:36:8f:e8:7f:6e:
f1:98:22:a6:09:3b:ad:34:8c:b9:13:92:63:a1:16:
33:8f:97:99:3c:ca:39:97:ee:e6:21:05:3c:38:94:
6d:e8:1c:59:13:95:87:49:a0:0d:e4:fd:39:be:61:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:41:19:EE:D3:05:75:A7:CC:09:35:96:AF:A8:92:71:4E:74:DA:90
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-EEZ7tMFdafMCTWWr6iScU502pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.198.0/24
88.209.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:12:ed:d3:4b:6b:5f:49:04:57:17:b4:3f:3d:eb:2d:bc:c8:
23:9d:3c:e4:91:9d:fb:cf:4c:88:ed:19:aa:37:24:10:f5:0f:
de:f7:62:26:23:d0:39:af:0f:c1:69:ac:7a:8b:25:81:f6:65:
9b:b0:52:a8:e3:9b:0e:c4:bc:38:67:bc:fc:11:ac:8c:28:d1:
97:9c:24:3d:03:d3:2b:2c:07:cc:cd:7a:58:8e:60:a5:79:98:
cb:7c:35:1d:7d:0a:47:53:e9:de:2f:5f:32:f0:01:e3:0e:82:
84:68:d1:7e:32:e1:4d:e4:1a:18:34:92:b9:2b:f0:7a:ec:d6:
6c:f8:82:31:00:b5:ad:8e:70:a2:e6:d5:0f:ac:7d:51:65:71:
00:1d:57:5f:36:da:b4:44:5f:06:d6:d2:00:9f:ce:5e:ee:c1:
70:ca:b2:f1:df:20:02:00:82:66:c8:04:f6:a8:1c:1e:a5:8b:
92:81:96:66:3c:fb:d8:19:7c:07:34:a8:83:07:b5:5e:1a:55:
11:bf:00:9e:27:0d:d8:02:82:3b:75:b9:a5:e0:97:56:c3:0c:
bb:17:df:df:3f:8f:7f:40:50:16:65:0d:1a:d2:89:9c:3a:60:
9b:0d:3d:85:72:d6:bd:17:bb:26:d9:a9:05:3d:8a:aa:47:d5:
c0:a0:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:06 2026 by rpki-client