Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2Hy4wvDiTcHkvLmvb-pmUQp81_k.roa
File: 2Hy4wvDiTcHkvLmvb-pmUQp81_k.roa (raw, json)
Hash identifier: Itlp7fRO0X04ff5J8HcFL8yHjV8zpOZXoMGkIba8++w=
Subject key identifier: D8:7C:B8:C2:F0:E2:4D:C1:E4:BC:B9:AF:6F:EA:66:51:0A:7C:D7:F9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A17DF7ACE13F0DAF681865894878D86143
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2Hy4wvDiTcHkvLmvb-pmUQp81_k.roa
Signing time: Tue 27 Oct 2026 15:25:45 +0000
ROA not before: Tue 27 Oct 2026 15:25:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 74.112.152.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
205.237.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:f7:ac:e1:3f:0d:af:68:18:65:89:48:78:d8:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 27 15:25:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d87cb8c2f0e24dc1e4bcb9af6fea66510a7cd7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:6a:67:21:ac:02:8e:10:24:de:96:71:dc:
97:c8:ad:7a:c6:04:df:bf:3e:4c:ac:84:98:be:55:
dd:2c:31:de:e5:4f:25:88:fa:ef:f6:8c:7c:f2:22:
70:25:57:fc:2d:5b:e4:4b:7e:e2:8a:f6:f3:72:a7:
ab:c4:f8:e2:e6:68:23:a5:31:de:11:59:67:71:1a:
d7:01:05:ff:67:16:5b:37:d9:51:37:d0:9b:b3:14:
57:14:e7:a9:97:f7:b7:d3:bd:65:5b:28:14:15:c8:
6e:00:3d:e0:69:ea:50:7d:f5:0a:e4:65:52:02:8f:
4a:53:33:ab:c1:1e:6a:b9:6f:5a:78:3d:83:f3:6b:
3c:a3:16:e3:a7:4a:35:3b:4a:10:b0:4c:92:90:ba:
14:9a:48:49:cd:e7:63:5d:98:4b:32:6e:90:7c:8e:
aa:1e:34:8a:1c:e4:09:b5:eb:6a:88:19:65:3c:96:
f1:25:02:c8:9e:72:68:e8:e0:c4:da:f1:80:82:e7:
8a:1f:bd:db:08:f5:67:fb:1b:8c:0e:80:fd:3c:b0:
ea:cd:18:b5:a5:b2:c2:12:47:52:79:9c:90:38:7f:
20:b6:20:1c:aa:42:f6:1b:39:45:c0:fb:61:67:da:
3b:d9:52:59:03:65:4b:5f:d9:e6:73:0f:0d:8c:92:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7C:B8:C2:F0:E2:4D:C1:E4:BC:B9:AF:6F:EA:66:51:0A:7C:D7:F9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2Hy4wvDiTcHkvLmvb-pmUQp81_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/24
191.219.22.0/24
191.222.240.0/24
200.102.188.0/24
205.237.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:35:e5:43:15:92:31:06:c6:5f:12:44:6f:3e:1d:fa:95:3f:
28:82:bb:39:40:7d:04:62:0a:36:22:a6:ae:de:6a:0c:05:4c:
aa:79:3a:d0:f4:8b:51:a0:de:45:4a:fe:06:44:56:a4:de:ba:
63:d3:4c:2c:3c:f9:aa:3f:84:79:29:66:49:a5:7f:63:62:f7:
53:54:48:d5:2f:30:b0:e1:55:54:60:50:32:82:4d:e3:c1:32:
fd:f0:e8:78:79:e7:24:0c:63:97:0c:ea:4a:39:75:3d:21:46:
8a:e0:83:bc:4d:5e:39:0f:6a:b4:d3:b7:33:69:73:51:1b:fd:
54:8d:cf:d0:c0:1d:ff:9f:4d:c2:cd:16:ed:50:a0:cc:66:9c:
f2:a1:c9:24:7e:83:cf:df:95:66:ee:a6:64:a0:d1:fc:22:27:
e6:eb:25:58:5a:52:bf:ce:e6:06:51:57:f4:15:27:24:35:b5:
e5:d1:0c:9f:d3:b0:e2:78:31:18:8c:b4:0c:35:d6:c5:05:35:
ba:c4:39:57:c5:60:ed:21:e2:f0:62:67:5b:c4:cf:d3:13:b9:
1b:a8:4e:59:11:52:fb:45:de:3f:23:0c:6d:76:58:50:a5:5c:
e5:15:5a:05:d6:c1:8a:06:99:1f:10:c0:9b:69:86:c0:94:23:
e5:04:60:59
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaF996zhPw2vaBhliUh42GFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDI3MTUyNTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODdjYjhjMmYwZTI0ZGMxZTRiY2I5YWY2ZmVhNjY1MTBhN2NkN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRBqZyGsAo4QJN6WcdyXyK16xgTf
vz5MrISYvlXdLDHe5U8liPrv9ox88iJwJVf8LVvkS37iivbzcqerxPji5mgjpTHe
EVlncRrXAQX/ZxZbN9lRN9CbsxRXFOepl/e3071lWygUFchuAD3gaepQffUK5GVS
Ao9KUzOrwR5quW9aeD2D82s8oxbjp0o1O0oQsEySkLoUmkhJzedjXZhLMm6QfI6q
HjSKHOQJtetqiBllPJbxJQLInnJo6ODE2vGAgueKH73bCPVn+xuMDoD9PLDqzRi1
pbLCEkdSeZyQOH8gtiAcqkL2GzlFwPthZ9o72VJZA2VLX9nmcw8NjJInRQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNh8uMLw4k3B5Ly5r2/qZlEKfNf5MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvMkh5NHd2RGlUY0hrdkxtdmItcG1VUXA4MV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQASnCYAwQA
v9sWAwQAv97wAwQAyGa8AwQAze1YMA0GCSqGSIb3DQEBCwUAA4IBAQCoNeVDFZIx
BsZfEkRvPh36lT8ogrs5QH0EYgo2Iqau3moMBUyqeTrQ9ItRoN5FSv4GRFak3rpj
00wsPPmqP4R5KWZJpX9jYvdTVEjVLzCw4VVUYFAygk3jwTL98Oh4eeckDGOXDOpK
OXU9IUaK4IO8TV45D2q007czaXNRG/1Ujc/QwB3/n03CzRbtUKDMZpzyockkfoPP
35Vm7qZkoNH8Iifm6yVYWlK/zuYGUVf0FSckNbXl0Qyf07DieDEYjLQMNdbFBTW6
xDlXxWDtIeLwYmdbxM/TE7kbqE5ZEVL7Rd4/IwxtdlhQpVzlFVoF1sGKBpkfEMCb
aYbAlCPlBGBZ
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:42 2026 by rpki-client