Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1033S9xwWnwJ3xIrumJpUU_Wuhc.roa
File: 1033S9xwWnwJ3xIrumJpUU_Wuhc.roa (raw, json)
Hash identifier: ugfG5Du9KazDzZ+ylwbbJq2DmGP9IBTQ8Opy0fV71xM=
Subject key identifier: D7:4D:F7:4B:DC:70:5A:7C:09:DF:12:2B:BA:62:69:51:4F:D6:BA:17
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ECB7F8CD8257F690F0138232938119509
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1033S9xwWnwJ3xIrumJpUU_Wuhc.roa
Signing time: Mon 15 Jun 2026 13:36:34 +0000
ROA not before: Mon 15 Jun 2026 13:36:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 74.112.152.0/22 maxlen: 24
94.229.212.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:7f:8c:d8:25:7f:69:0f:01:38:23:29:38:11:95:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 15 13:36:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d74df74bdc705a7c09df122bba6269514fd6ba17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:32:52:4c:97:6c:6d:87:02:00:d3:33:98:
a4:d4:49:d4:63:ae:d2:24:e8:4f:9e:1f:86:32:eb:
9a:26:ef:94:36:fc:64:91:95:4d:20:dd:67:30:c1:
96:de:df:18:3e:2b:a3:e3:7d:ee:03:4e:17:fa:0a:
45:28:31:99:da:a9:9c:a3:2f:de:df:6d:67:3e:4f:
4f:15:53:75:4c:66:09:c0:f5:1f:dd:e7:be:de:ae:
57:a9:a5:7a:8f:ab:ea:47:1a:55:2f:c1:f0:b7:12:
41:e7:47:4e:fc:cb:8b:95:46:a6:fd:ad:fb:16:dd:
8f:60:7a:a2:22:00:24:68:34:58:34:62:f2:63:80:
12:21:df:f5:82:99:a7:8c:30:67:d7:2d:13:27:aa:
eb:85:92:78:cc:ed:e6:ad:9b:2c:a6:83:d4:5d:7e:
9e:66:4d:69:6b:77:d3:47:45:92:90:2d:10:44:66:
f4:b2:5f:64:81:47:52:ca:70:48:54:9d:06:a0:de:
7f:3e:ce:2c:82:3f:1f:6b:c4:6a:4e:b9:44:d6:35:
81:3c:e7:a7:7b:bf:77:a5:7a:97:2d:72:64:b6:2b:
c6:f9:5b:5a:13:d9:de:55:e2:37:87:1d:5b:dd:a8:
e9:73:71:f5:80:36:a1:6d:0a:5a:8d:09:3e:f4:b9:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:F7:4B:DC:70:5A:7C:09:DF:12:2B:BA:62:69:51:4F:D6:BA:17
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1033S9xwWnwJ3xIrumJpUU_Wuhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/22
94.229.212.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:57:06:1d:99:8b:b6:05:f1:e1:df:12:43:67:b3:d7:69:47:
93:22:de:b3:f2:7c:8f:55:2c:0d:10:67:4c:5c:14:da:76:3b:
b7:8f:7c:a5:4a:de:32:2f:f1:ab:6a:13:bb:17:ae:31:e5:31:
5f:fc:cc:4f:73:e2:1e:5f:b8:80:37:c3:d8:88:7c:ee:34:f4:
bf:b4:b4:6c:60:62:fd:68:05:2c:8a:fd:80:04:a5:5a:d1:62:
e8:28:4d:a8:1b:1d:88:e8:b8:2b:27:28:88:d4:9c:a7:b6:3e:
69:14:80:6b:d3:5d:fe:a0:51:21:07:25:f0:8a:48:40:2b:e7:
fa:74:8a:4a:8a:5a:e4:13:a0:b3:16:ad:3b:f7:11:02:80:70:
da:c4:43:35:be:96:85:5f:b0:a1:6c:fc:12:6b:4d:84:63:80:
fe:87:26:e0:8a:59:94:94:39:99:4e:23:bb:17:f4:45:64:1e:
ea:3e:a8:a6:7c:04:6a:9b:53:4b:83:60:f0:bc:95:62:23:c8:
dc:88:e5:95:22:4c:21:2f:17:d9:b2:25:7a:de:ea:8f:f0:05:
6c:0e:54:17:3c:18:a2:7b:5a:02:4d:87:17:47:ec:c4:7e:c0:
b1:42:e2:1e:68:2a:80:5d:65:08:b8:32:27:66:3a:96:e5:7a:
af:c1:10:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 20:10:38 2026 by rpki-client