Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5NXiO4ZBrXjD5JMOAgv831yLxAA.roa
File: 5NXiO4ZBrXjD5JMOAgv831yLxAA.roa (raw, json)
Hash identifier: V4MSfazlpUo9Gis6xM9I/eKVEisZDtT2xtNbQTQo07U=
Subject key identifier: E4:D5:E2:3B:86:41:AD:78:C3:E4:93:0E:02:0B:FC:DF:5C:8B:C4:00
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0159EDD9204ACD7D8D89FF62C077C60B5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5NXiO4ZBrXjD5JMOAgv831yLxAA.roa
Signing time: Tue 18 Aug 2026 16:05:27 +0000
ROA not before: Tue 18 Aug 2026 16:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 77.111.98.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:9e:dd:92:04:ac:d7:d8:d8:9f:f6:2c:07:7c:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 18 16:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4d5e23b8641ad78c3e4930e020bfcdf5c8bc400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:57:6a:7c:e1:8c:56:51:ef:cd:73:1d:96:
3b:f2:7d:ac:c3:4d:52:7a:35:da:c7:0b:a9:b3:95:
bf:0f:96:ad:eb:db:35:43:d3:c2:1d:f4:e6:dd:9b:
2f:07:cf:c1:d2:fd:a1:43:fa:9a:e1:ce:73:e2:9d:
22:4f:40:fb:b2:a0:32:21:8c:8e:03:ed:e3:8a:f9:
2a:78:dc:0e:c4:ac:07:be:a3:e5:78:37:8e:6f:ea:
53:cd:d4:59:39:6a:2a:25:c6:b5:ab:7f:e9:48:4d:
99:ed:ca:c9:de:8f:7f:f1:fb:e1:22:3b:89:15:60:
b8:49:39:33:8a:d1:2f:ac:39:eb:fe:65:54:a0:92:
07:6f:cb:b9:0c:4d:eb:8d:0b:36:67:b2:bc:4c:50:
a0:86:a3:b6:8e:0b:d9:2b:a2:34:29:07:23:f7:7c:
07:ab:a6:96:5a:c1:d6:6f:20:67:58:91:d9:64:26:
04:af:de:d1:ce:94:de:38:3f:27:98:ca:19:09:90:
06:62:87:c8:c8:9a:dd:93:40:4e:5e:fe:42:0a:ef:
ca:37:e0:7b:33:b3:d9:aa:b6:5b:4e:2f:25:86:d0:
64:5f:49:e4:53:bc:4d:0a:e1:f3:dc:d2:a9:b7:c9:
ef:e6:dd:a1:d8:54:5c:d3:bf:09:a2:57:e7:98:a5:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:E2:3B:86:41:AD:78:C3:E4:93:0E:02:0B:FC:DF:5C:8B:C4:00
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5NXiO4ZBrXjD5JMOAgv831yLxAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.98.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
10:40:7d:7e:12:e2:5e:13:75:2c:34:43:a7:b9:84:86:c9:7d:
c4:6d:78:5c:91:e0:3d:e0:7d:f8:b7:6a:7a:9a:05:b7:59:9a:
c4:04:21:29:2e:de:7b:d4:ba:ad:b4:39:a4:db:57:5b:4b:3f:
44:46:2c:a8:74:13:50:58:3f:e9:76:7b:9c:53:94:96:c3:f3:
b6:e5:50:69:cd:7a:9b:b3:b7:e1:d1:3f:97:0c:9a:db:d2:75:
e9:b5:cb:98:0d:aa:26:79:d0:65:a3:4d:91:ea:69:75:13:3d:
e3:c5:d1:33:e3:19:a8:2d:86:c7:a5:8e:fb:a7:01:ac:82:7a:
34:17:25:db:a7:5f:1d:84:73:85:74:59:0a:9a:3b:85:17:02:
84:9b:3b:e0:59:9c:24:63:d4:31:d8:d2:3e:5c:51:2b:72:e4:
31:86:e2:86:7e:8b:bf:f4:d3:c9:47:b2:07:ba:09:d4:87:bc:
49:5d:91:9e:55:fd:49:f3:0a:74:9c:77:2f:ae:56:ad:34:a3:
cd:0d:7e:dd:27:9b:04:e9:9f:4a:5f:3c:cf:12:15:04:1b:e1:
92:e3:a5:8d:ff:6d:2b:a5:3a:7a:ec:fc:1a:e0:8a:57:b1:e3:
2b:0a:b8:23:90:ed:19:00:3b:f2:f1:31:de:41:87:98:17:59:
cb:ef:90:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:21:02 2026 by rpki-client