Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0Q6DDUwJoAO-iG24QYWvmUlwNcc.roa
File: 0Q6DDUwJoAO-iG24QYWvmUlwNcc.roa (raw, json)
Hash identifier: 3T8Prd5XloOOG6ObKNOb8XyEHUruK2DupDk6DY2F7E4=
Subject key identifier: D1:0E:83:0D:4C:09:A0:03:BE:88:6D:B8:41:85:AF:99:49:70:35:C7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1405ED5B5943560EA687465B7A04D8A95
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0Q6DDUwJoAO-iG24QYWvmUlwNcc.roa
Signing time: Thu 15 Oct 2026 16:21:59 +0000
ROA not before: Thu 15 Oct 2026 16:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 205.237.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:5e:d5:b5:94:35:60:ea:68:74:65:b7:a0:4d:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 15 16:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d10e830d4c09a003be886db84185af99497035c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:98:2c:3e:1f:8c:e5:78:a7:e6:06:a6:d3:
3b:5e:d1:f7:7e:05:fe:d1:31:39:ac:ad:69:04:80:
72:38:17:a5:cd:34:c2:a4:bc:a9:0e:aa:3e:6d:d1:
86:c2:ee:a4:ca:5d:f9:f3:45:59:fd:bd:0f:16:de:
fd:7c:14:6e:90:0a:52:10:7d:58:8f:8f:29:9f:a9:
c0:5b:30:26:d7:5c:4c:d3:8a:35:23:70:83:df:d0:
c1:21:ef:ab:0a:67:3b:46:14:59:75:77:8f:ad:b5:
32:b1:41:8e:e8:39:ef:87:6c:7c:8c:cc:93:fb:d1:
4d:83:c8:ce:40:e3:cb:95:a1:9c:cb:35:f9:d3:72:
1c:06:78:96:33:76:bb:e9:b1:ad:ac:a8:0c:c7:58:
a8:b3:20:62:99:04:85:4c:7c:bf:0b:be:86:c5:44:
db:c0:a8:b8:7c:f5:a4:0a:7f:9d:d1:bb:1b:71:7d:
be:5a:98:dc:00:5c:dd:74:70:33:9b:7e:82:70:7d:
b7:76:2d:d6:c0:f6:75:01:fa:2b:bd:a8:5c:3d:54:
1a:cf:6f:bb:af:49:7d:93:3c:3f:4a:93:84:e4:34:
ab:cf:90:52:b2:fc:04:1d:66:57:19:45:6e:0f:6c:
bd:43:40:5f:66:7e:21:a0:b2:b0:9a:6e:d8:6f:0f:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:83:0D:4C:09:A0:03:BE:88:6D:B8:41:85:AF:99:49:70:35:C7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0Q6DDUwJoAO-iG24QYWvmUlwNcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.237.89.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fd:0b:54:36:cb:b4:17:5c:47:a8:88:c7:e1:17:0a:37:90:
1e:22:60:44:ea:7e:d8:35:b9:15:0c:a0:e8:4f:ad:cf:44:ba:
31:11:54:cd:92:bd:f9:d4:ad:b9:78:a0:94:32:25:e9:d9:2e:
d6:2e:72:fe:e5:e0:3c:59:51:4a:3a:91:2e:8c:ac:e6:c6:28:
02:2c:eb:4a:3e:ef:84:f4:a5:8d:ac:11:af:c4:fa:9a:04:74:
ee:07:ba:6d:fc:f6:fa:dd:63:51:5c:5b:a5:d5:5b:fa:7c:18:
07:70:07:e0:ad:58:cc:1d:5f:1d:c3:62:01:31:9e:ae:f0:2c:
49:18:a8:46:e3:8a:e9:48:dd:81:60:67:26:90:5b:55:2d:76:
20:ec:c7:34:5d:22:8b:38:2d:7f:e7:5c:5e:5d:f8:60:9e:19:
ef:13:31:49:06:4e:73:fa:47:78:d8:8b:3f:62:f4:b2:52:0b:
79:c3:a6:f8:8b:19:4d:d1:8e:8e:61:9d:57:df:70:72:ed:d1:
72:3f:c2:a8:37:b0:b8:9a:03:1c:77:d1:a7:ba:d3:e2:3f:11:
46:d7:da:0c:6d:2d:e8:a0:24:94:66:e1:0d:76:56:ed:7b:e1:
c6:2c:9b:26:76:4e:dd:16:d4:06:58:71:77:94:8f:7d:49:bc:
16:f1:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:20 2026 by rpki-client