Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-JbEWigfM_iYpbj45ria1PfuC24.roa
File: 1-JbEWigfM_iYpbj45ria1PfuC24.roa (raw, json)
Hash identifier: j7hua22/GsZzoHX6S8KTlNuM+KGZYyep0yVT3eivoq8=
Subject key identifier: F8:96:C4:5A:28:1F:33:F8:98:A5:B8:F8:E6:B8:9A:D4:F7:EE:0B:6E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F1ECDFD6B43AF9EC6BDE382732827183D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-JbEWigfM_iYpbj45ria1PfuC24.roa
Signing time: Wed 01 Jul 2026 17:50:44 +0000
ROA not before: Wed 01 Jul 2026 17:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136709
IP address blocks: 189.73.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:cd:fd:6b:43:af:9e:c6:bd:e3:82:73:28:27:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 1 17:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f896c45a281f33f898a5b8f8e6b89ad4f7ee0b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:56:29:00:7a:bf:15:1e:06:c8:8c:ec:9e:
2b:88:72:16:67:7a:6e:24:3d:ef:4e:71:d7:62:3d:
ef:4f:ef:5d:b5:79:04:b3:91:6e:9a:87:d4:81:cf:
d0:5e:e0:1d:41:d3:8c:3c:1c:84:03:35:e6:64:de:
10:7a:42:5b:ca:a3:ff:37:bd:db:b6:55:1b:1c:08:
f7:f8:9c:9e:de:65:89:9c:bf:98:88:60:88:0d:1a:
c9:84:24:61:71:d3:6d:07:5d:b2:88:6f:11:d9:e8:
23:a2:ae:dc:68:12:b1:69:d2:20:76:6b:7e:1a:b6:
ab:66:b8:38:fc:c1:de:bb:27:ef:9b:41:9f:76:34:
65:e5:ed:c3:7e:2c:7d:a1:19:4a:fc:b8:45:f7:11:
18:d4:b5:ae:1b:2b:2e:8e:74:4a:25:34:98:98:31:
3e:a9:53:54:ac:57:b3:75:e5:95:b9:26:95:1f:46:
17:5d:f9:05:2e:ad:67:21:44:78:fa:65:f4:15:c3:
0c:c0:f9:47:0a:6b:79:ed:ec:3a:40:96:5a:e5:c0:
6d:45:39:18:b2:4f:5e:a5:16:20:d9:d9:4b:f1:da:
58:ae:c0:2a:2c:38:4d:f2:90:fd:99:00:35:04:77:
b3:0f:29:64:79:1b:ca:4f:06:c2:4b:20:50:64:75:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:C4:5A:28:1F:33:F8:98:A5:B8:F8:E6:B8:9A:D4:F7:EE:0B:6E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-JbEWigfM_iYpbj45ria1PfuC24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fd:1a:65:00:84:93:da:fb:bc:7f:bc:e2:af:4b:57:a4:3f:
95:13:b0:75:9b:44:81:66:87:9f:37:1c:59:9f:10:21:61:3a:
75:2c:a6:17:53:0b:aa:73:01:14:30:a1:9a:6f:c1:a7:fe:45:
c1:36:5d:88:4f:c6:a0:45:10:6a:c7:32:ef:9b:66:84:1c:5c:
ba:2e:9c:8f:50:1e:23:de:56:81:d3:3c:ef:44:66:67:c5:91:
86:e0:0b:fc:96:9c:d2:87:35:35:e6:62:c8:dc:29:e8:7f:3b:
8f:b0:84:56:fb:c3:b3:4f:42:90:78:d6:e0:88:ad:3c:ce:d7:
b0:82:82:a6:8b:0d:3b:d0:65:31:e6:f8:a7:5a:e9:da:9a:d1:
11:dc:29:b6:95:3b:86:6c:ec:42:35:9b:7d:78:3c:f9:2d:c2:
88:7e:86:c5:bc:51:9e:9b:fd:3f:47:dc:d9:ac:8c:a7:73:7a:
50:69:17:9a:77:71:c4:ce:17:cc:4a:8f:8b:d1:5b:e2:13:fc:
2a:c1:0c:d0:d1:b6:8e:58:dd:2f:fb:a2:91:81:09:7c:2f:0c:
0a:ec:08:f4:f9:c8:9f:6f:34:8b:87:bf:03:72:8f:bb:2d:5a:
6d:aa:d1:d2:cd:39:50:9f:fd:ae:e2:65:02:e2:93:fe:3d:68:
5e:c6:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:36 2026 by rpki-client