Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5qSZ7uOAzOny4n27tFWL6dOQ7vU.roa
File: 5qSZ7uOAzOny4n27tFWL6dOQ7vU.roa (raw, json)
Hash identifier: 8YC8HCUymPZYsNwu3N5NOgU1czB+iKMGJDGpgZPugFI=
Subject key identifier: E6:A4:99:EE:E3:80:CC:E9:F2:E2:7D:BB:B4:55:8B:E9:D3:90:EE:F5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ED5FAAF5AADCCD2B7DA57CE18665C8F04
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5qSZ7uOAzOny4n27tFWL6dOQ7vU.roa
Signing time: Wed 17 Jun 2026 14:27:16 +0000
ROA not before: Wed 17 Jun 2026 14:27:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201386
IP address blocks: 200.165.30.0/24 maxlen: 24
201.24.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:fa:af:5a:ad:cc:d2:b7:da:57:ce:18:66:5c:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 17 14:27:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6a499eee380cce9f2e27dbbb4558be9d390eef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:09:45:d9:92:5d:62:50:83:a8:24:06:b6:
35:c3:da:78:7b:ac:a5:4b:a2:e7:a2:19:43:58:0b:
ef:a4:f8:f2:ea:b8:7a:9e:66:ae:89:8a:91:5a:cb:
b2:08:40:60:28:58:d3:ac:5e:9e:d0:0d:db:c7:a2:
18:75:c4:04:d1:3b:95:8b:96:f8:f6:1c:e0:1c:bb:
8d:c7:72:b1:92:51:04:71:c9:31:88:7e:25:d2:38:
f0:99:91:0c:a8:96:f5:36:f2:fe:10:e9:db:e5:19:
72:fc:98:15:54:93:f5:0c:79:fd:90:fc:48:39:4e:
c0:eb:dd:c8:e8:22:8e:2c:cb:43:90:64:9d:de:07:
16:01:3e:70:6b:2d:7e:d7:7d:59:8e:b6:ce:e1:2c:
93:a0:9e:d6:ed:fb:19:d7:17:ce:3b:52:8c:09:2c:
b6:bb:e4:fb:74:68:9c:e4:05:ff:e1:51:57:23:2e:
2d:71:0c:6f:57:45:1f:18:fa:74:39:e0:0c:da:94:
b7:ea:58:de:50:0c:2d:9d:0a:88:31:48:29:cb:fd:
bb:d5:47:3d:1a:a3:eb:3c:e2:6b:3a:8d:ed:44:71:
de:5e:11:b6:1f:41:e9:89:bc:1d:94:e1:00:c4:5f:
d0:95:ca:d5:54:d5:c2:f4:d4:c1:0a:cd:ed:a3:30:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:99:EE:E3:80:CC:E9:F2:E2:7D:BB:B4:55:8B:E9:D3:90:EE:F5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5qSZ7uOAzOny4n27tFWL6dOQ7vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.165.30.0/24
201.24.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c1:9f:48:9d:87:22:01:bb:37:bc:c6:24:36:0c:3c:ec:b2:
39:40:5d:d6:52:11:9c:2b:1a:e2:c0:50:ff:00:21:af:74:76:
eb:9b:8d:39:ce:93:c0:e9:a7:94:08:35:6e:0c:05:17:b2:08:
59:c4:0a:88:4c:4a:7c:6f:2a:04:41:00:d6:9b:2c:c0:6b:f7:
41:6e:95:f1:8f:fb:fe:32:91:52:ff:ba:3e:37:0c:4b:d2:73:
be:c9:bb:e2:01:16:21:3a:01:13:88:17:68:8b:b5:f9:5f:a2:
33:f2:67:b0:27:06:0b:fc:10:38:f2:71:8f:bd:53:00:42:f7:
bb:27:b3:94:5b:92:91:9d:0c:81:5e:2a:dc:3b:23:ba:4f:53:
f5:ed:f2:a1:6a:1d:75:17:ae:5b:19:0e:3c:4b:27:a3:62:63:
c8:6a:f7:59:20:db:ce:8d:d7:4e:69:01:f7:f6:20:3e:e2:64:
76:16:3e:80:ba:7c:3f:02:90:f9:8b:aa:5d:0c:ac:ed:54:df:
29:b5:e8:b3:f4:67:48:98:7e:84:43:55:47:72:b4:f1:f3:7a:
08:57:34:00:00:0d:c4:0d:a4:df:95:f5:d9:00:56:d6:75:d3:
bd:d0:e5:ad:3a:cc:4b:8c:2f:f9:86:75:08:c9:e2:ec:cf:4b:
f3:96:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:26:12 2026 by rpki-client