Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4IraFb6XfNSup1-81kiPHVbGJYM.roa
File: 4IraFb6XfNSup1-81kiPHVbGJYM.roa (raw, json)
Hash identifier: /uqlvN4k/aQpLh6Sk88dRa+Q5TxdbcBXLnRnu9S6XJE=
Subject key identifier: E0:8A:DA:15:BE:97:7C:D4:AE:A7:5F:BC:D6:48:8F:1D:56:C6:25:83
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F4CE37AF7A3564FA2262326B27BB739E5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4IraFb6XfNSup1-81kiPHVbGJYM.roa
Signing time: Fri 10 Jul 2026 16:36:44 +0000
ROA not before: Fri 10 Jul 2026 16:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134488
IP address blocks: 189.75.180.0/24 maxlen: 24
189.75.185.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:e3:7a:f7:a3:56:4f:a2:26:23:26:b2:7b:b7:39:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 10 16:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e08ada15be977cd4aea75fbcd6488f1d56c62583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:6f:60:04:e6:06:d3:b7:49:c8:10:f8:d8:
5d:8e:f0:0e:fa:2d:0c:f2:34:bb:8c:95:1c:0c:7e:
fc:b2:1e:e6:f3:8a:32:72:3c:19:f9:8f:53:39:e6:
b4:40:63:b2:28:cb:96:48:b9:1b:ac:25:7f:00:89:
37:46:e3:96:09:81:27:9f:ef:76:53:27:35:e3:cd:
50:d0:b8:a7:ba:50:9f:9e:f4:97:59:97:e1:9e:72:
82:41:be:80:82:ea:3b:20:ae:0f:b6:d8:ae:be:0b:
8f:76:58:7d:0c:95:9b:1a:c3:cf:db:95:b0:c1:a9:
bf:11:70:37:43:1d:50:2d:ce:fd:6a:e8:85:4a:3e:
d8:fb:a1:98:18:bc:b2:89:f1:8d:63:51:95:16:f1:
49:52:42:39:12:09:45:31:3d:7c:d8:23:db:9e:42:
bc:04:24:60:e3:d1:3f:5c:e8:a6:a8:6e:f8:df:51:
9d:7a:db:ce:3b:58:5b:a1:1d:98:7b:39:77:0f:93:
8d:70:68:ce:9d:f7:0a:8d:09:c0:51:4b:dc:0b:06:
91:a8:59:d3:8f:40:6d:db:7e:fa:9e:a3:61:86:72:
73:0a:38:a7:41:53:5b:1e:39:83:7d:ba:f1:0b:e3:
dc:2d:a0:74:03:1d:0a:67:d4:ca:58:ec:fa:23:b5:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:DA:15:BE:97:7C:D4:AE:A7:5F:BC:D6:48:8F:1D:56:C6:25:83
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4IraFb6XfNSup1-81kiPHVbGJYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.180.0/24
189.75.185.0/24
200.102.179.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a2:bb:2e:c3:54:8f:9a:67:d4:e2:e1:64:4f:04:78:3e:4b:
96:21:d7:af:9a:d4:72:c3:3b:19:98:a7:ae:3f:0c:45:ba:e5:
3c:d4:c5:e7:07:1c:94:db:0c:7e:a3:d3:39:af:31:ce:34:91:
fe:3d:9a:f5:d3:8d:29:0e:dd:19:f5:b1:06:aa:96:32:30:ed:
4f:59:d8:b8:81:e6:35:6d:1a:5a:84:71:19:e1:11:c0:bc:0d:
b9:93:9a:f9:7d:2e:c0:3c:e8:41:80:94:bc:db:cb:b8:81:64:
c9:33:1e:f7:93:78:40:2e:1c:65:fc:4e:e3:4f:fa:73:45:64:
ed:87:01:74:22:64:fc:c2:db:f6:72:36:1f:9e:63:99:e0:5e:
6e:1d:6f:c8:ee:1c:9b:2b:72:1d:19:c6:61:4c:61:26:01:c1:
c0:a1:ce:fd:52:91:39:1a:aa:e8:56:f7:01:dc:d3:ba:3f:41:
1d:1b:bf:3d:8e:19:00:df:ce:42:cd:88:3e:f5:d0:cd:aa:4d:
79:0e:99:08:df:a8:58:c2:e4:ad:77:a1:93:ae:ab:3d:f4:ee:
50:05:0f:da:85:3b:94:39:01:9a:51:50:3f:86:dd:22:91:e0:
4f:9e:76:69:23:f6:74:10:f0:cb:0d:5f:59:59:71:ed:d4:f2:
27:b0:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:47:32 2026 by rpki-client