Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1FE5hexggW6jL8ZcDeONtuFbD0o.roa
File: 1FE5hexggW6jL8ZcDeONtuFbD0o.roa (raw, json)
Hash identifier: UOuMq95XUUUWTNQK65Juu5GhoqaK4IRrEA64203aJrM=
Subject key identifier: D4:51:39:85:EC:60:81:6E:A3:2F:C6:5C:0D:E3:8D:B6:E1:5B:0F:4A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0A1061E7840574D81B794859E7958525D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1FE5hexggW6jL8ZcDeONtuFbD0o.roa
Signing time: Mon 14 Sep 2026 17:45:27 +0000
ROA not before: Mon 14 Sep 2026 17:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 43.242.136.0/24 maxlen: 24
189.12.54.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
191.217.173.0/24 maxlen: 24
191.219.30.0/24 maxlen: 24
191.222.248.0/24 maxlen: 24
191.222.250.0/24 maxlen: 24
200.102.186.0/24 maxlen: 24
200.181.93.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:06:1e:78:40:57:4d:81:b7:94:85:9e:79:58:52:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 14 17:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4513985ec60816ea32fc65c0de38db6e15b0f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:85:53:f7:5d:47:e7:ac:d2:18:a8:fe:d4:
81:80:12:2a:7d:ca:0a:66:1e:52:40:7c:2d:83:f8:
11:66:83:63:80:c2:2c:f6:5b:00:77:61:4e:07:fb:
1b:93:47:3d:83:32:b9:b7:b9:cf:a2:52:8e:97:6b:
1c:1a:b4:8a:98:cc:3f:96:df:56:6c:e3:1f:82:cb:
d5:5b:a9:9c:bf:73:f7:08:e1:72:01:2a:87:c0:de:
4e:2f:3f:68:d1:05:15:ab:81:28:88:57:9c:31:2a:
06:90:1b:a8:cd:05:29:41:4e:12:e4:29:2b:88:78:
76:3b:c7:fd:23:ce:60:55:41:79:f7:19:93:49:4f:
fd:72:1e:c5:73:a2:09:95:cd:4b:8c:75:eb:62:68:
55:49:10:57:83:f9:b4:ff:40:cc:db:85:12:57:65:
a9:99:df:15:a8:ba:1a:9f:93:2e:cd:63:0a:3d:33:
da:cd:f8:ce:13:88:82:8d:88:07:37:a7:be:55:4d:
a7:5e:cf:08:e3:1b:e5:d4:de:b5:6f:2c:b6:97:05:
f7:2b:5f:18:5f:19:8c:4a:36:ea:8d:03:fd:7a:26:
cc:2a:c7:e4:83:e1:ba:6c:3b:80:e7:57:54:fc:01:
6b:34:14:66:92:c5:71:0c:b9:49:3b:3d:70:24:64:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:51:39:85:EC:60:81:6E:A3:2F:C6:5C:0D:E3:8D:B6:E1:5B:0F:4A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1FE5hexggW6jL8ZcDeONtuFbD0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.242.136.0/24
189.12.54.0/24
189.31.211.0/24
191.217.173.0/24
191.219.30.0/24
191.222.248.0/24
191.222.250.0/24
200.102.186.0/24
200.181.93.0/24
201.11.224.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f8:52:6a:50:c8:77:bb:76:be:bf:fc:e4:04:15:88:9c:8c:
03:e1:a3:b3:b6:b9:e3:a4:35:b9:ad:72:58:56:8b:81:15:3d:
f1:e7:ca:87:dd:1d:9a:54:a2:a4:61:fe:a1:d8:1b:e6:d8:a5:
95:d4:66:e1:52:49:b1:0b:8f:eb:5d:01:3a:5a:94:19:7c:f3:
6b:f1:2f:22:0f:d6:3b:3e:7e:1f:5e:c1:ab:bc:7c:3e:04:7c:
8e:1e:84:38:f7:b7:a2:01:fd:9f:1a:77:d9:6e:fc:87:4e:22:
a6:b6:b3:5a:d4:bb:c3:8c:9b:37:52:1b:8e:ce:c5:bc:5d:aa:
09:9f:0d:30:83:cf:f4:e7:07:ec:f3:83:18:01:66:1f:51:32:
1e:cb:04:27:56:76:e2:b3:3f:22:00:22:ff:f3:64:71:db:65:
7d:18:0b:a9:b9:09:05:00:10:0b:02:44:24:a8:7f:7f:4a:4b:
c7:ac:ef:43:56:e1:5f:d8:5b:6b:aa:42:01:22:54:4b:a2:30:
a8:ba:62:0a:57:dd:91:23:83:01:3a:58:5c:00:cb:81:a7:03:
07:10:89:c8:79:7f:24:e7:91:45:90:e4:30:90:85:0b:5f:26:
1a:55:d3:17:4c:ad:9e:23:55:d5:a9:05:36:1d:a2:73:91:73:
61:81:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:48:11 2026 by rpki-client