Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2pJbm73kS4UjQT4NOophT2AiJ2o.roa
File: 2pJbm73kS4UjQT4NOophT2AiJ2o.roa (raw, json)
Hash identifier: Tqquev9r7obU6HGRwL54wB0ZYwawC5Bql7rckk/fTHo=
Subject key identifier: DA:92:5B:9B:BD:E4:4B:85:23:41:3E:0D:3A:8A:61:4F:60:22:27:6A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F303130555F21E90FE1069698D0F8609
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2pJbm73kS4UjQT4NOophT2AiJ2o.roa
Signing time: Wed 30 Sep 2026 15:51:00 +0000
ROA not before: Wed 30 Sep 2026 15:51:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218535
IP address blocks: 191.44.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:03:13:05:55:f2:1e:90:fe:10:69:69:8d:0f:86:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 30 15:51:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da925b9bbde44b8523413e0d3a8a614f6022276a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:69:78:88:5f:22:23:e7:d6:05:40:c2:3c:
9e:21:5c:6a:c6:af:de:4b:bf:c5:22:d9:f3:2a:a7:
d0:a0:90:ab:d2:34:12:fd:de:aa:3d:86:d8:e3:6c:
9f:7c:56:3c:e5:d8:af:21:50:88:16:70:e9:01:a4:
0f:73:6f:16:18:b6:e0:27:a2:20:5e:35:d3:78:62:
95:d6:ce:79:83:85:ab:b2:38:b8:33:7e:79:18:3b:
f4:23:24:ff:a9:fb:37:43:20:fe:8f:c7:a1:19:26:
ec:9b:81:0b:88:0c:ea:3b:ad:48:41:48:dc:12:81:
f1:79:61:de:a1:6c:f9:e6:92:67:53:7a:1c:e7:c7:
46:6a:8c:22:c6:a3:68:6d:b4:ab:7b:15:7e:3f:02:
11:a2:ea:84:d0:0b:0c:96:82:3c:c5:7a:66:17:4c:
cb:83:ac:d8:6a:f8:fb:57:75:ce:37:21:db:19:72:
72:75:51:99:ee:32:82:4b:34:7f:37:21:57:94:a3:
fa:ce:44:a0:40:01:44:8e:ff:13:d1:b0:89:e8:46:
f7:df:78:c8:ce:11:8f:f5:e6:15:61:25:4f:4e:7e:
aa:7e:50:b8:ba:43:dc:c8:d7:9c:c0:6a:1b:fb:9e:
71:5d:36:a3:51:c1:9b:38:b9:b6:1f:d1:3a:21:56:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:5B:9B:BD:E4:4B:85:23:41:3E:0D:3A:8A:61:4F:60:22:27:6A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2pJbm73kS4UjQT4NOophT2AiJ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.17.0/24
Signature Algorithm: sha256WithRSAEncryption
23:98:1c:c8:58:92:b0:23:7b:0a:f8:d2:a5:cd:bb:0f:40:e6:
9c:6c:2b:8c:f6:5f:0c:45:fc:3d:79:f9:66:7a:4b:cc:c9:62:
2b:3c:d0:9a:cd:5a:73:46:fd:82:12:75:6c:c9:0d:43:5a:83:
b9:52:7b:16:74:9e:6a:f6:7f:9d:6a:92:59:a6:7c:1e:16:69:
c8:4d:66:e5:3e:77:14:99:cf:31:50:e1:ae:18:fe:c9:2d:96:
82:e1:0f:8a:f1:37:85:c4:be:7b:40:0a:0c:c1:b7:93:a3:a4:
5a:35:ad:66:9a:ac:f8:b1:dc:74:5f:e5:c5:f7:7f:0d:93:ef:
05:a9:5a:57:ac:89:dc:1b:f5:d9:53:28:be:a9:41:27:01:96:
83:0b:64:9e:05:18:1a:ba:f2:cc:be:4a:8c:58:d2:13:a9:8e:
d2:93:81:75:ae:aa:f3:b1:50:bb:e3:34:1d:77:02:c2:47:61:
c1:c6:6a:e0:8b:ee:59:d5:37:35:ce:f9:a0:f4:af:79:84:08:
d5:46:87:08:5b:46:72:57:67:db:dd:be:ac:0a:b8:42:f0:a3:
43:86:4e:8b:41:59:a4:9c:b3:fd:48:84:6c:3b:e2:27:95:93:
74:5c:4e:7d:9f:36:77:29:2e:49:ee:64:4f:17:9e:39:ad:c7:
77:98:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:59 2026 by rpki-client