Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-L27RhZ-3cqouWKjWkV5Q7Ufmg.roa
File: 1-L27RhZ-3cqouWKjWkV5Q7Ufmg.roa (raw, json)
Hash identifier: 0q0jFFooToWFFGb3gRbHD35AvM7KhknFcXHCVTtr37M=
Subject key identifier: D7:E2:F6:ED:18:59:FB:77:2A:A2:E5:8A:8D:69:15:E5:0E:D4:7E:68
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019CB99617E2B17435FF2F537D9218FE2E35
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-L27RhZ-3cqouWKjWkV5Q7Ufmg.roa
Signing time: Wed 04 Mar 2026 16:02:27 +0000
ROA not before: Wed 04 Mar 2026 16:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 89.106.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:96:17:e2:b1:74:35:ff:2f:53:7d:92:18:fe:2e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 4 16:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7e2f6ed1859fb772aa2e58a8d6915e50ed47e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:a0:a9:81:23:19:1c:da:20:23:aa:08:0a:
6a:e7:52:d5:59:fb:ee:b3:20:80:38:00:4b:a9:5f:
c2:eb:d7:40:8f:8a:fe:03:5c:79:ff:9b:21:b5:ee:
80:6e:30:91:f7:36:f5:e3:50:82:03:6d:1d:20:6a:
70:e9:84:8c:08:dc:c3:99:92:ba:b6:37:55:5d:9c:
69:ec:38:0e:51:2b:35:59:ca:98:28:7d:1c:fb:22:
b2:2e:9c:b0:c3:34:6f:18:1f:61:48:b0:d0:f3:0b:
00:a7:ce:9a:a0:7b:0b:b7:fd:47:9c:0f:fd:d8:6c:
ee:dc:52:be:84:1f:82:38:be:1a:94:07:3f:6e:fe:
51:70:28:1f:10:b0:e5:e2:b7:5a:c9:dc:af:99:6a:
96:9b:79:7b:a4:c1:27:bf:27:6e:06:f2:46:cc:d8:
51:17:c2:d6:e6:de:50:4b:fd:60:f7:9e:e6:03:d4:
2f:cd:ce:3b:93:8e:2e:d5:69:04:48:60:ca:31:02:
c5:66:8e:50:81:62:ce:24:45:ed:06:ca:af:17:60:
83:08:be:07:db:2a:de:9d:b6:f8:36:2a:59:51:8a:
94:d7:3b:6f:84:90:de:35:03:63:f0:ec:19:4e:f6:
3a:1a:72:77:65:32:2a:d1:f9:e7:48:77:63:76:dc:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:F6:ED:18:59:FB:77:2A:A2:E5:8A:8D:69:15:E5:0E:D4:7E:68
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-L27RhZ-3cqouWKjWkV5Q7Ufmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.3.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b1:a2:db:78:99:7c:7a:ae:d5:e2:01:85:10:24:b0:5f:09:
b6:00:d6:5f:2a:35:13:1a:44:31:ba:0a:4d:34:7b:ae:44:a7:
42:0e:aa:f9:6a:2f:66:62:14:a4:ff:a7:53:90:dc:f8:a2:59:
94:d7:02:7a:54:0b:11:6b:52:f1:3e:b7:d4:c7:3a:10:d4:63:
78:cf:9b:67:b0:c0:89:34:cd:e4:08:e3:49:dd:29:b5:23:a3:
cf:74:cd:e8:3e:bd:09:fd:da:80:37:c2:b8:f9:d1:19:58:c9:
33:c3:b4:b3:8f:1a:90:6a:f8:28:4f:8d:ea:72:34:b5:c4:f8:
7d:99:ca:1d:49:88:67:03:25:63:27:a3:72:14:ac:39:bf:e6:
f5:52:01:19:aa:4f:44:29:97:61:a7:ca:2a:b5:33:95:c6:ae:
47:fa:73:f3:a1:54:98:f6:78:17:0b:d1:35:b5:4a:8b:db:55:
2b:72:44:dc:8c:6b:d4:39:92:56:10:b4:ae:97:d5:8a:1e:a8:
fa:ed:0a:73:5c:ed:41:a7:33:4c:e0:70:69:54:b5:d1:a6:a8:
d2:3c:b7:05:78:ec:7e:87:63:6c:8b:dc:6c:66:56:2e:50:80:
50:c4:50:27:1d:48:67:45:e8:a6:6e:70:1e:bc:c0:9c:d4:a9:
8e:28:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:01:32 2026 by rpki-client