Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/20yV1nNhdy2QmNadV2iOrBdDAdM.roa
File: 20yV1nNhdy2QmNadV2iOrBdDAdM.roa (raw, json)
Hash identifier: yTHzeYWVXHwhjyPuFjo6cI0fzhcMvOHDKL/Ip/m/MZ4=
Subject key identifier: DB:4C:95:D6:73:61:77:2D:90:98:D6:9D:57:68:8E:AC:17:43:01:D3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2E6FC2A95B8BB67B8C43B77E9043CE82
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/20yV1nNhdy2QmNadV2iOrBdDAdM.roa
Signing time: Sat 04 Jul 2026 18:41:44 +0000
ROA not before: Sat 04 Jul 2026 18:41:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136258
IP address blocks: 94.229.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:6f:c2:a9:5b:8b:b6:7b:8c:43:b7:7e:90:43:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 4 18:41:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db4c95d67361772d9098d69d57688eac174301d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:d5:5b:8b:50:57:99:09:67:e1:06:8f:06:
38:34:ff:6e:ef:5a:74:3c:c5:84:05:f8:4a:d6:c2:
50:6c:d0:09:9b:a8:42:6c:53:68:3b:d0:6e:1c:16:
fe:ec:39:9b:e4:fe:75:94:4a:70:cb:9d:b0:7d:46:
2e:84:17:d2:8c:35:84:ea:a3:6f:b8:59:7c:9b:43:
73:f6:6d:46:ca:41:23:c7:eb:a9:5f:18:4f:91:1a:
37:0d:19:e8:dd:7c:39:b2:c9:82:73:97:61:05:eb:
ce:01:fd:76:86:b6:fc:29:c1:70:9a:c0:e8:26:44:
a0:17:6d:ad:3b:79:6b:e4:6e:9f:16:a1:7e:56:1f:
7a:7a:cf:c3:ad:f8:bd:1d:96:37:ff:88:6d:1c:7f:
44:a1:4a:6d:ff:08:52:78:70:8b:a8:ad:b1:11:f8:
80:71:a7:a7:0f:e4:c5:65:15:48:84:fc:bd:38:c1:
5b:64:fd:89:4d:4b:f5:9a:26:c9:44:a3:cb:3e:a7:
ad:a6:1b:e4:e4:e2:35:70:84:b3:f3:ed:10:3d:a2:
8d:3b:06:93:7c:11:11:6a:98:d1:96:e4:c6:f0:c5:
91:b9:b6:66:68:ce:c9:fc:8c:d3:fb:5e:65:d7:50:
0a:ce:fb:16:fb:7b:73:47:cf:4e:58:97:ed:e0:aa:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:95:D6:73:61:77:2D:90:98:D6:9D:57:68:8E:AC:17:43:01:D3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/20yV1nNhdy2QmNadV2iOrBdDAdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.208.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3c:d6:f9:ca:9d:bc:bc:cd:ff:3e:3c:b2:bb:dc:ee:bb:7d:
e2:71:c6:55:8b:54:e0:98:d8:92:98:3a:92:6b:70:64:1f:95:
ec:36:f0:64:d2:cd:01:83:bd:3d:44:ce:1f:75:d1:30:59:54:
3b:26:87:01:c7:4e:c5:07:ed:42:8c:15:06:ad:0b:06:c1:e9:
b9:16:0a:cd:ce:b9:e8:5c:e7:56:9f:9e:8e:26:ba:e1:86:2d:
c2:61:6c:82:bf:69:1c:8b:9e:7a:53:4e:e8:8c:26:d6:5d:03:
7c:64:8d:78:0e:92:77:a2:11:4d:a3:79:60:c3:be:95:9c:e3:
28:78:14:00:8f:03:19:d4:22:0b:a4:f4:4e:b3:ac:72:c4:8c:
1a:0b:d3:e2:20:85:f4:b7:11:ac:09:16:b9:7d:d4:c2:34:e8:
a8:b4:dd:56:81:7e:66:7c:fc:b9:a2:52:6e:7b:08:37:b3:25:
a1:23:66:b6:85:7e:a0:05:ff:71:9c:dc:a5:ad:fb:f0:51:a9:
fa:03:6d:12:36:4a:e2:d8:d1:2d:10:cd:c6:b6:c8:df:fe:25:
65:71:cd:95:e9:86:6d:f1:d5:2f:f0:37:06:25:ee:65:07:55:
80:04:0f:64:6b:a5:db:ad:d3:55:5f:57:f3:fd:4c:ed:bf:85:
74:d3:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:56 2026 by rpki-client