Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1MK3OqFCrxraiyepexxSGdpJpuI.roa
File: 1MK3OqFCrxraiyepexxSGdpJpuI.roa (raw, json)
Hash identifier: SrCgf2I54bwarxxLWQ9bdRR3BzYSPzbUHLXad3MXWAA=
Subject key identifier: D4:C2:B7:3A:A1:42:AF:1A:DA:8B:27:A9:7B:1C:52:19:DA:49:A6:E2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F31279017F6EF049311EC3A133F90B782
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1MK3OqFCrxraiyepexxSGdpJpuI.roa
Signing time: Sun 05 Jul 2026 07:21:44 +0000
ROA not before: Sun 05 Jul 2026 07:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201724
IP address blocks: 191.217.174.0/24 maxlen: 24
191.222.46.0/24 maxlen: 24
201.11.228.0/24 maxlen: 24
201.11.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:27:90:17:f6:ef:04:93:11:ec:3a:13:3f:90:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 07:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4c2b73aa142af1ada8b27a97b1c5219da49a6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:df:5c:08:db:a3:ae:4e:86:ca:63:e3:25:
76:ab:18:62:81:06:23:66:b2:18:8a:46:e6:45:2a:
94:45:85:ab:15:b8:ed:74:f9:79:37:07:74:2b:af:
0b:56:21:17:23:ad:5c:0d:9d:e6:93:7d:75:9f:44:
9c:2d:2e:9a:a6:0c:23:79:40:91:18:c7:d0:51:74:
72:ed:a3:f1:43:70:ef:14:aa:a7:4b:72:d2:aa:0a:
f3:2e:b9:33:5d:f3:cf:90:9f:41:59:3b:b6:58:e8:
1f:88:a0:d7:98:11:92:8f:bd:0c:02:c0:a6:9d:a2:
1c:76:9e:49:71:4c:9c:8c:a7:3b:a6:b9:20:4f:97:
f7:99:87:b4:3f:a9:ee:af:d0:49:ed:81:6c:30:90:
1a:ad:7d:a0:7f:3c:86:b7:41:bd:7a:1c:dd:2a:0b:
e4:55:f7:b3:9f:c7:26:e5:c6:3c:a9:63:61:97:61:
15:f6:d6:9f:10:25:32:7e:e5:44:02:95:a9:6f:aa:
69:a4:eb:59:3b:61:fb:6c:4e:03:88:2a:d7:fb:34:
1f:d1:74:6d:af:13:0a:a6:c1:c3:e8:ca:61:e7:61:
a7:62:be:6d:b9:81:69:b9:d0:ca:52:88:1d:ec:c5:
8b:4a:da:be:ad:d6:40:ed:ad:6a:9d:69:09:2f:59:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:B7:3A:A1:42:AF:1A:DA:8B:27:A9:7B:1C:52:19:DA:49:A6:E2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1MK3OqFCrxraiyepexxSGdpJpuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.174.0/24
191.222.46.0/24
201.11.228.0/24
201.11.237.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c3:19:f0:cf:9c:75:0e:b0:ec:b6:7c:8e:52:92:21:b8:df:
d7:ed:a5:55:38:f3:40:37:a5:c4:36:6a:69:f4:10:7a:04:11:
c0:d5:bd:bd:2f:20:04:70:51:ab:35:1f:2c:51:af:f8:e0:c5:
87:d8:14:d1:9b:8c:0e:5d:3f:62:e9:bf:28:f1:35:e6:4b:ab:
b2:a3:e5:5f:61:2e:6d:0c:a4:59:4c:85:82:d3:db:03:4a:38:
d1:e3:19:a5:dd:d9:28:5f:51:fe:26:eb:5b:db:ae:a3:70:1f:
00:d5:05:ea:c1:42:cb:87:83:1d:d1:56:e8:ca:ee:a1:b7:31:
80:02:25:f5:ad:55:7e:51:df:cb:ab:7d:81:48:7b:d0:b8:c9:
d5:ad:0b:14:dd:4a:2f:a8:de:c5:a2:3e:bb:6a:da:42:fb:29:
f6:5e:46:d4:c8:e1:2d:f5:46:da:0c:36:5e:19:7e:71:d4:2f:
fd:41:95:ad:2a:63:ee:aa:44:e5:e3:38:be:b8:6d:62:c1:f6:
ef:a6:01:fb:42:6e:21:d5:06:87:29:e6:86:2a:e8:c4:f8:e7:
29:e5:12:2e:c8:ff:74:ce:74:a4:b2:82:dd:0e:9c:51:99:41:
d8:76:ee:a2:b0:5c:23:a2:1b:ca:88:79:57:19:33:82:67:1d:
fc:5f:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:03:18 2026 by rpki-client