Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/479xaKUMML4lHiKlZNAS9N8Wn3w.roa
File: 479xaKUMML4lHiKlZNAS9N8Wn3w.roa (raw, json)
Hash identifier: s2OI6H8IW8uQN6G1pQ7HX+9TG9jHV25/D2MbluesTZY=
Subject key identifier: E3:BF:71:68:A5:0C:30:BE:25:1E:22:A5:64:D0:12:F4:DF:16:9F:7C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FAEE24F920A6EFADFD8A3735C5D0EAB5A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/479xaKUMML4lHiKlZNAS9N8Wn3w.roa
Signing time: Wed 29 Jul 2026 17:18:14 +0000
ROA not before: Wed 29 Jul 2026 17:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 189.31.213.0/24 maxlen: 24
189.31.216.0/24 maxlen: 24
189.31.220.0/24 maxlen: 24
189.73.27.0/24 maxlen: 24
189.75.187.0/24 maxlen: 24
189.75.191.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
200.102.95.0/24 maxlen: 24
201.24.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:e2:4f:92:0a:6e:fa:df:d8:a3:73:5c:5d:0e:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 17:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3bf7168a50c30be251e22a564d012f4df169f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:c4:18:f8:91:22:d8:38:e4:4a:dd:47:ff:
26:5d:b7:b4:4a:ee:07:4b:6d:3e:dc:dc:7f:07:fa:
a9:29:d6:a1:e6:52:3f:d8:db:d6:58:43:79:2c:7c:
d5:0d:8a:54:0e:2f:5d:69:2a:7e:fc:63:29:a0:b7:
f0:96:b7:59:6d:2d:8d:90:60:aa:a3:aa:d8:b3:14:
a1:6f:2c:af:3f:1d:7c:16:a7:9f:ca:4c:55:58:28:
a8:ac:35:4f:c6:88:3f:86:13:a0:3a:49:c7:2f:d2:
94:a4:6a:9a:69:1a:be:81:cb:1f:12:fa:f2:ad:f3:
87:71:d4:04:13:4e:37:64:d4:19:bf:e5:c6:d0:56:
1a:c6:33:f5:1f:69:ca:df:1d:44:70:a6:99:f5:f6:
aa:11:e5:6c:39:52:2b:62:32:d8:4d:fc:20:2a:5b:
27:97:b3:d6:8e:2b:3a:55:63:31:a2:b8:e8:a3:7d:
bf:21:37:91:bc:cc:6a:b6:d1:df:93:5a:a7:2c:75:
b9:cb:4d:52:d7:55:fa:93:aa:c2:c7:17:b3:41:d4:
97:33:3c:a0:d8:0d:b4:c0:aa:b9:25:3f:47:ef:64:
47:61:62:c2:bf:b4:33:21:c1:b3:84:d1:82:f3:7b:
6a:0d:8b:29:6d:61:a8:b4:e5:00:0a:1b:92:15:da:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BF:71:68:A5:0C:30:BE:25:1E:22:A5:64:D0:12:F4:DF:16:9F:7C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/479xaKUMML4lHiKlZNAS9N8Wn3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.213.0/24
189.31.216.0/24
189.31.220.0/24
189.73.27.0/24
189.75.187.0/24
189.75.191.0/24
191.44.29.0/24
200.102.95.0/24
201.24.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b3:38:b1:48:dd:25:71:54:59:6d:4f:ac:e2:28:30:eb:ea:
d8:bc:32:ad:26:99:46:89:b7:3f:67:aa:2f:9b:ed:9b:2c:d4:
ec:31:ed:42:da:78:a6:35:6b:31:89:b1:04:bb:0a:bc:ad:b3:
85:35:3f:6f:60:46:3a:eb:0c:5c:88:26:a4:33:c9:01:85:53:
32:ee:b7:9e:95:14:62:5e:4f:96:ea:a5:a4:96:2a:62:8d:96:
58:02:68:3d:13:80:6d:70:96:ed:d8:89:58:cd:64:12:b7:9b:
ad:c0:27:e6:b2:99:cf:4d:36:7d:f5:f4:60:c2:28:3c:66:ad:
bf:31:36:a0:29:82:13:f9:9e:bb:a7:37:a7:5c:30:9d:5e:8a:
c4:cb:97:bf:0e:04:cb:1d:83:f3:ca:b3:e6:9f:20:c4:09:07:
20:9d:7d:c4:fb:3b:12:4f:45:2e:29:b0:93:bb:fc:be:4a:e3:
38:26:c9:2f:db:bc:88:3e:c2:20:cb:6b:97:0d:43:cc:84:c7:
2c:d3:64:c2:6e:10:f1:67:fd:fb:54:da:9b:f4:4f:c0:4d:b0:
9d:1e:6c:83:c7:57:5c:47:9c:04:f2:a7:be:25:db:17:45:15:
92:18:3e:ef:f0:27:77:3d:19:3d:8d:46:2b:fc:8b:b6:d3:c2:
97:e4:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:22 2026 by rpki-client