Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/189z9-4ZTksCjg4QQoyb1RJHEz4.roa
File: 189z9-4ZTksCjg4QQoyb1RJHEz4.roa (raw, json)
Hash identifier: 6yT+O7cU/wCjRHAYzwSzuJSP+olUxsuwuoUvfBTpF08=
Subject key identifier: D7:CF:73:F7:EE:19:4E:4B:02:8E:0E:10:42:8C:9B:D5:12:47:13:3E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A062BF52F54B47A139BB82F2353F857572
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/189z9-4ZTksCjg4QQoyb1RJHEz4.roa
Signing time: Wed 02 Sep 2026 15:31:40 +0000
ROA not before: Wed 02 Sep 2026 15:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 191.219.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:bf:52:f5:4b:47:a1:39:bb:82:f2:35:3f:85:75:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 2 15:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7cf73f7ee194e4b028e0e10428c9bd51247133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:6c:18:bb:30:68:6b:2e:55:54:bc:a2:86:
0e:62:55:e3:5e:56:d5:f4:8d:a9:bc:63:c0:46:da:
91:9f:5f:2e:e8:13:0a:28:5a:2e:9b:d6:04:80:e3:
45:cc:8f:68:e2:d3:cf:29:9a:99:59:54:24:b9:bc:
59:8d:54:bb:8f:9f:5c:3a:06:bc:8e:9d:6b:f7:b9:
2a:da:9f:0b:fe:a1:ae:f1:d9:d9:82:f0:cf:76:43:
04:4c:48:b4:04:9e:e3:c6:c6:44:e3:eb:3e:ac:fc:
01:87:af:cc:dc:c1:18:4b:f8:23:d6:9f:6c:d7:0a:
aa:69:57:b7:42:80:17:80:fb:fd:9f:81:0c:2f:24:
18:84:69:b8:42:c5:85:10:e9:4a:88:df:3e:f8:30:
93:53:46:37:67:b7:74:ba:7b:8c:59:45:d0:5d:33:
82:0f:68:55:fc:49:c3:d2:56:4c:6d:c5:eb:c6:db:
22:87:b0:73:37:28:2b:5a:d1:91:c3:5f:a3:db:a6:
01:76:4c:37:75:2d:fe:02:67:5a:5e:15:23:bf:24:
72:42:22:7a:32:bd:db:7a:c1:f5:1c:b8:2c:8a:e6:
91:07:7b:f0:af:e5:96:88:2b:f0:58:12:b1:1e:fc:
49:f9:fd:3d:93:ed:52:44:d8:bb:95:3b:29:17:f3:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:73:F7:EE:19:4E:4B:02:8E:0E:10:42:8C:9B:D5:12:47:13:3E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/189z9-4ZTksCjg4QQoyb1RJHEz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.28.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d4:b6:f6:17:81:75:9b:75:4b:fe:c9:48:d6:f0:73:21:85:
29:d1:96:e8:2b:98:b4:1d:8a:cb:62:38:5f:de:32:c3:7b:d0:
6d:28:ca:87:a2:f9:13:3f:50:71:44:8a:5b:8a:aa:38:0d:7c:
af:1a:5f:db:a9:7b:3d:6c:c8:1c:98:9e:66:ef:8f:d8:d1:6f:
df:07:2a:94:14:47:75:af:27:75:a4:6b:2a:da:7a:b6:fc:9e:
30:cd:d4:d0:7a:18:ce:04:2b:53:f9:93:ed:bb:d7:ae:51:7f:
15:45:6b:5b:3e:57:52:d1:6f:2f:d0:b1:b1:e0:55:01:79:1a:
79:6d:be:d2:8c:91:8c:f6:c5:49:37:6b:ad:96:f6:2f:8b:a9:
3e:a7:02:1f:0f:f3:ee:33:4f:cd:6e:33:0c:08:0c:e6:02:d0:
bc:3e:29:07:57:25:96:53:c8:a0:ae:58:e1:90:55:b5:76:9e:
78:70:7b:2b:4c:fa:75:e1:67:c7:fa:8b:a0:e6:a5:93:df:7b:
16:22:ba:1c:98:0c:92:dd:71:4e:41:a3:76:c5:7b:a5:9a:5d:
c0:25:65:8c:dd:80:91:b5:60:13:ef:a5:26:ea:db:2d:2e:d3:
34:ac:f3:33:4c:01:6a:c1:4e:76:8c:15:f5:9b:9c:a0:dd:c6:
21:d8:21:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBiv1L1S0ehObuC8jU/hXVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwOTAyMTUzMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2NmNzNmN2VlMTk0ZTRiMDI4ZTBlMTA0MjhjOWJkNTEyNDcxMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXtsGLswaGsuVVS8ooYOYlXjXlbV
9I2pvGPARtqRn18u6BMKKFoum9YEgONFzI9o4tPPKZqZWVQkubxZjVS7j59cOga8
jp1r97kq2p8L/qGu8dnZgvDPdkMETEi0BJ7jxsZE4+s+rPwBh6/M3MEYS/gj1p9s
1wqqaVe3QoAXgPv9n4EMLyQYhGm4QsWFEOlKiN8++DCTU0Y3Z7d0unuMWUXQXTOC
D2hV/EnD0lZMbcXrxtsih7BzNygrWtGRw1+j26YBdkw3dS3+AmdaXhUjvyRyQiJ6
Mr3besH1HLgsiuaRB3vwr+WWiCvwWBKxHvxJ+f09k+1SRNi7lTspF/NOYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfPc/fuGU5LAo4OEEKMm9USRxM+MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvMTg5ejktNFpUa3NDamc0UVFveWIxUkpIRXo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv9scMA0G
CSqGSIb3DQEBCwUAA4IBAQBV1Lb2F4F1m3VL/slI1vBzIYUp0ZboK5i0HYrLYjhf
3jLDe9BtKMqHovkTP1BxRIpbiqo4DXyvGl/bqXs9bMgcmJ5m74/Y0W/fByqUFEd1
ryd1pGsq2nq2/J4wzdTQehjOBCtT+ZPtu9euUX8VRWtbPldS0W8v0LGx4FUBeRp5
bb7SjJGM9sVJN2utlvYvi6k+pwIfD/PuM0/NbjMMCAzmAtC8PikHVyWWU8igrljh
kFW1dp54cHsrTPp14WfH+oug5qWT33sWIrocmAyS3XFOQaN2xXulml3AJWWM3YCR
tWAT76Um6tstLtM0rPMzTAFqwU52jBX1m5yg3cYh2CEm
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:34 2026 by rpki-client