Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1U4GA586cmh_9jf4SWQFDFuP_2Y.roa
File: 1U4GA586cmh_9jf4SWQFDFuP_2Y.roa (raw, json)
Hash identifier: 2DXNYPCEuCem1a71BpDIM4J25Bif03GP5pCgMp9WLPQ=
Subject key identifier: D5:4E:06:03:9F:3A:72:68:7F:F6:37:F8:49:64:05:0C:5B:8F:FF:66
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F47837121179903D7FBCB143F0BFCAD9C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1U4GA586cmh_9jf4SWQFDFuP_2Y.roa
Signing time: Thu 09 Jul 2026 15:33:44 +0000
ROA not before: Thu 09 Jul 2026 15:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212609
IP address blocks: 14.102.224.0/23 maxlen: 23
45.151.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:83:71:21:17:99:03:d7:fb:cb:14:3f:0b:fc:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 9 15:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d54e06039f3a72687ff637f84964050c5b8fff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:51:af:5e:e2:c5:a2:30:c1:82:31:a4:cb:
62:88:af:5b:b7:6e:1b:45:25:0f:b4:31:53:0d:3d:
3b:dd:c0:0b:70:83:90:ac:d8:eb:34:52:58:37:63:
3b:3b:0e:cc:d3:c2:8d:ac:d2:10:c3:5f:10:cf:e8:
d5:17:6b:ce:18:29:2c:11:a3:20:b2:32:4a:10:91:
0c:89:a3:b4:33:98:3c:5b:12:09:75:85:07:76:58:
e3:f0:5d:0b:51:86:14:2f:79:57:63:30:36:b6:a7:
c2:5e:9a:53:5a:79:9f:1f:cc:6c:cf:53:fe:76:c8:
ff:34:1f:49:bf:49:92:b5:97:d3:4c:4a:90:5c:e9:
d2:79:df:12:d1:bb:55:8f:e1:16:ed:57:06:ba:dc:
bb:eb:4f:01:78:5c:6f:9e:3c:bf:65:0b:47:82:22:
13:f9:1c:68:4b:bc:ba:fd:2a:65:27:e9:08:b2:f3:
e4:3f:37:8a:77:55:3a:16:11:da:aa:04:4f:87:37:
e3:0d:f3:4c:10:73:96:7f:3c:6e:76:fa:8c:28:1f:
02:c8:35:14:29:c4:f3:c1:ca:9f:9a:33:b7:3b:97:
3b:47:47:ee:ef:7b:cb:8f:6f:95:1a:0e:0d:24:1b:
21:96:4e:04:c7:a7:c4:9b:08:42:ac:58:2e:2e:f9:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4E:06:03:9F:3A:72:68:7F:F6:37:F8:49:64:05:0C:5B:8F:FF:66
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1U4GA586cmh_9jf4SWQFDFuP_2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/23
45.151.140.0/24
Signature Algorithm: sha256WithRSAEncryption
66:45:ce:6f:6c:91:be:ed:af:b3:55:9d:e0:18:57:83:b7:25:
9c:41:f2:b3:67:bb:9b:f3:09:76:87:e0:4c:a7:d3:e3:fe:ae:
c5:1b:a8:ec:d8:91:f5:cb:60:87:8e:8e:09:56:f3:12:8e:63:
f8:f8:3a:6b:ee:f1:1a:fb:69:19:ee:ed:d1:11:47:6b:49:b0:
24:92:8d:f0:01:96:76:47:05:41:b1:38:5f:f2:31:7b:ee:90:
11:65:8e:c8:55:a6:5a:78:e6:fe:04:80:24:e3:cb:1e:f5:48:
2e:a3:96:9e:27:3e:ba:a0:29:8b:73:bd:68:42:ac:9b:bf:95:
47:44:72:7f:34:e8:ab:76:e8:3a:e7:6f:12:63:ca:d3:ce:f5:
9a:f3:98:00:d1:eb:2e:98:1c:f4:0d:32:0d:43:3a:d3:3b:c5:
f3:b7:2b:0c:d9:02:c9:c3:a9:eb:7d:ea:6b:98:70:62:95:f7:
f3:ba:72:21:b1:86:8e:06:95:df:b0:43:bb:16:6e:56:b5:8d:
44:85:96:4e:5a:3e:c6:71:e9:52:78:c3:ad:b4:45:e8:d1:7a:
c0:0c:31:e9:93:1d:70:8c:f5:86:ba:be:a1:cd:fd:cc:83:4a:
0f:26:f3:83:84:0d:2a:ec:a5:27:44:cb:c9:29:41:40:02:5d:
f9:09:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:36 2026 by rpki-client