Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5xVLzW-9FthFPgUSoLlhYk-yHSA.roa
File: 5xVLzW-9FthFPgUSoLlhYk-yHSA.roa (raw, json)
Hash identifier: y7lN3wF3XPLNfwK2ORdGM+1g0a/vZgcV1LT/pzbVR14=
Subject key identifier: E7:15:4B:CD:6F:BD:16:D8:45:3E:05:12:A0:B9:61:62:4F:B2:1D:20
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A081A3A5DA9F137E3F207A230FDAC3DDA7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5xVLzW-9FthFPgUSoLlhYk-yHSA.roa
Signing time: Tue 08 Sep 2026 15:29:40 +0000
ROA not before: Tue 08 Sep 2026 15:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 189.75.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:a3:a5:da:9f:13:7e:3f:20:7a:23:0f:da:c3:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 8 15:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7154bcd6fbd16d8453e0512a0b961624fb21d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:5d:e8:b2:e5:d0:7d:1e:86:70:a2:a0:93:
bf:59:f4:67:7f:e6:91:76:a9:b1:40:2a:02:2b:98:
d0:c1:3a:fa:66:db:df:20:89:0f:31:84:da:03:6c:
1f:46:d0:73:df:87:16:6f:63:9f:f3:3f:c1:89:a6:
b2:02:17:41:4e:4e:92:38:9f:2c:ea:8d:90:f6:6b:
a5:8e:c6:bf:0f:72:c0:91:18:5b:57:a6:fb:04:d7:
ec:88:71:f0:e3:f5:64:b5:62:af:6c:cf:92:e7:88:
8e:ce:2b:d8:cf:40:86:c3:5d:da:8b:8b:ea:b4:e6:
ef:70:53:ba:f8:0d:52:d4:e5:03:80:0a:16:d2:3d:
f3:21:f7:74:80:fa:c7:b2:9c:b7:5d:c4:97:e9:0b:
56:06:bf:e1:91:53:96:e5:34:0a:93:cc:85:09:31:
6a:8f:70:4c:22:a7:fe:db:07:86:df:8c:d1:52:1e:
a4:c1:91:4d:e3:0b:c0:6b:1f:9a:16:a1:f8:22:fa:
e6:f1:47:04:d2:3c:65:cc:3b:7f:14:9d:71:d3:e6:
f3:f4:85:3b:d2:0c:f9:05:bd:30:28:4a:cf:f8:7b:
5c:38:08:d6:7b:f0:82:a7:69:db:51:3a:9d:f0:e3:
a3:6c:11:16:45:09:01:64:c6:86:8c:39:96:f0:1c:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:4B:CD:6F:BD:16:D8:45:3E:05:12:A0:B9:61:62:4F:B2:1D:20
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5xVLzW-9FthFPgUSoLlhYk-yHSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.178.0/24
Signature Algorithm: sha256WithRSAEncryption
19:95:e0:44:d4:8a:9c:c9:7f:ed:7e:32:ce:1a:58:97:56:89:
74:30:67:ec:57:eb:db:6b:5f:36:55:bf:65:e9:df:d4:e2:69:
06:fe:0f:64:ca:07:ec:07:8f:0b:3c:05:a8:46:51:6f:4b:cf:
47:69:ea:be:0e:1e:3b:7d:58:3d:01:19:92:37:c4:5a:a6:14:
59:8e:59:5b:36:d5:25:d4:30:18:9f:4a:b8:0e:c4:5a:97:c4:
40:3b:ae:51:94:73:4d:61:c5:10:e1:64:13:2b:00:cf:f6:fb:
85:bc:96:23:e6:78:24:a7:17:39:ee:c9:9d:38:b8:96:92:5d:
9b:09:da:25:6a:63:04:97:2b:9d:c9:81:36:c1:b8:e7:db:3b:
bf:2a:bb:f7:7b:6c:d2:c9:1c:e5:f3:cd:ab:eb:a4:ca:7b:6c:
87:09:54:e8:1f:79:12:e2:cc:0b:82:85:1f:af:d7:e3:c2:03:
70:77:e5:a1:66:6c:86:df:40:ce:7b:7d:d4:bc:52:e0:ff:25:
a1:6a:ef:58:c8:ae:c7:1c:74:73:34:ea:f1:71:47:93:c6:cb:
e8:fa:b0:da:b0:0e:7f:8e:2d:d4:5d:56:61:78:d3:34:7b:6c:
f4:e8:38:01:3c:a6:ec:e4:47:f7:ee:99:cd:f6:71:87:72:41:
e0:5e:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 01:23:32 2026 by rpki-client