Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0dT210HGvVuhv9kW7hdWQLMcBXA.roa
File: 0dT210HGvVuhv9kW7hdWQLMcBXA.roa (raw, json)
Hash identifier: dD+J09CvSGyu/tYpFXPoCsjmTAIwBXM6Jn/wJgc3kKU=
Subject key identifier: D1:D4:F6:D7:41:C6:BD:5B:A1:BF:D9:16:EE:17:56:40:B3:1C:05:70
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FBE37CF9A05E8496FA943422F43850A03
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0dT210HGvVuhv9kW7hdWQLMcBXA.roa
Signing time: Sat 01 Aug 2026 16:45:56 +0000
ROA not before: Sat 01 Aug 2026 16:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 189.12.50.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:37:cf:9a:05:e8:49:6f:a9:43:42:2f:43:85:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 1 16:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1d4f6d741c6bd5ba1bfd916ee175640b31c0570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:d5:e2:6c:be:6b:22:6e:f9:3c:73:70:4a:
00:c5:e7:ff:f4:30:e4:b1:eb:40:0d:f9:02:68:a3:
b1:1d:6f:98:39:bd:6d:6c:31:64:07:ae:88:2d:64:
07:4c:db:30:ed:13:e2:6c:a7:26:a8:72:e2:c3:f6:
26:52:59:ab:fd:ac:75:ca:96:b2:63:ea:24:50:dd:
c0:66:ac:4b:1c:65:63:9f:1e:88:85:8e:6c:94:19:
64:5c:4e:ba:a3:91:78:2f:d2:82:8c:78:33:6b:fa:
4b:71:b3:a7:26:94:a5:59:22:64:c4:77:36:94:e6:
db:ff:db:ce:7d:43:ba:6d:92:34:4f:7b:97:4f:68:
18:96:49:84:1e:e9:44:db:f3:3f:c2:32:03:79:4b:
0e:0b:c0:86:c6:04:9a:2e:13:72:76:9f:e0:47:0a:
97:e6:ed:50:9a:4c:ac:68:53:62:8f:9d:f6:2e:12:
e8:3d:17:a7:cd:ff:bd:24:2b:97:ec:69:b2:09:ea:
47:03:6b:e0:bc:5b:2b:65:84:f1:bb:a9:47:ae:2f:
04:2f:81:53:1a:02:d9:f2:fa:42:15:7b:dc:5d:39:
27:d1:19:78:0d:2e:02:f6:2f:4c:94:e6:dd:e7:4d:
42:5a:c7:10:a8:8d:44:1b:31:58:83:3f:18:c9:29:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:F6:D7:41:C6:BD:5B:A1:BF:D9:16:EE:17:56:40:B3:1C:05:70
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0dT210HGvVuhv9kW7hdWQLMcBXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.50.0/24
189.12.53.0/24
191.44.24.0/24
191.44.27.0/24
191.44.30.0/24
201.14.208.0/24
201.14.213.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9f:88:91:f1:43:0d:df:a9:bf:e3:f4:f4:9e:f8:a3:24:70:
ae:2a:c4:2e:e1:ae:73:f2:ef:20:f1:c6:30:85:26:cc:39:f4:
a1:91:0e:df:83:f4:cb:40:e1:28:d1:8f:62:2c:11:fd:0e:2e:
1c:d3:4d:34:ea:2f:c5:26:ad:a4:5b:35:3b:97:2f:86:1c:fa:
25:95:16:45:c4:a3:8e:63:c2:c8:ce:9e:13:42:be:9f:6d:8e:
3e:64:4f:6d:a7:2a:eb:72:4a:86:82:21:1c:a1:4e:3f:ca:5b:
ef:94:7c:f9:e6:75:d6:83:b5:ef:50:26:6f:b2:d9:dc:30:13:
40:cd:b8:4a:b3:41:ed:fe:8b:61:ec:36:8d:65:dc:9f:ef:ee:
2f:c6:0e:82:52:85:31:5b:f3:2d:7a:f7:d4:58:7f:ce:fb:6e:
44:5e:53:e3:84:4a:11:f0:f9:e1:21:5a:64:03:85:b5:6e:98:
e9:cc:29:1a:e7:06:b1:0e:f1:58:59:45:08:23:0d:fb:8e:0a:
2a:88:12:b4:26:61:1e:c7:3d:3e:15:f2:05:6e:21:81:8a:05:
11:f2:1a:8b:fa:ee:3f:6b:d7:1e:ff:db:85:2c:3a:77:f9:fd:
67:98:9e:1d:07:f9:fd:19:52:9f:25:89:90:cd:41:46:db:c8:
43:ec:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:23 2026 by rpki-client