Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6ygcFc8RJh8cY0Vk-abigriiqCk.roa
File: 6ygcFc8RJh8cY0Vk-abigriiqCk.roa (raw, json)
Hash identifier: YV2nz1zDcGbC5RKbS8RasfvR3U2niOQTwfA4txOBptM=
Subject key identifier: EB:28:1C:15:CF:11:26:1F:1C:63:45:64:F9:A6:E2:82:B8:A2:A8:29
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A08C13DFB1BB9A29165DF0F3EA3C824334
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6ygcFc8RJh8cY0Vk-abigriiqCk.roa
Signing time: Thu 10 Sep 2026 16:08:27 +0000
ROA not before: Thu 10 Sep 2026 16:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138737
IP address blocks: 189.12.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:13:df:b1:bb:9a:29:16:5d:f0:f3:ea:3c:82:43:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 10 16:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb281c15cf11261f1c634564f9a6e282b8a2a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:cd:49:8d:dd:c9:bc:c0:44:0f:ed:15:e7:
67:68:bf:dd:14:31:7f:41:ae:a3:5a:e4:8a:df:58:
e9:b7:6b:16:ce:bd:66:69:f8:fd:70:a7:3e:9e:ce:
ea:fc:a2:fe:71:f0:23:d0:59:6a:a8:ea:cf:bb:7a:
02:1a:ac:40:29:ad:09:22:83:4a:7c:31:d9:d2:1e:
84:2c:96:72:1f:e8:4d:0c:7f:a6:cb:b6:b3:3c:c9:
2c:6d:73:08:1b:fe:4b:09:2a:b0:95:9b:12:f4:6f:
36:34:c5:85:4f:e4:14:ad:80:bf:9e:24:35:7d:df:
3f:74:e3:90:7f:b8:43:aa:c1:fe:82:d0:73:8e:57:
ed:14:e8:92:4d:c0:51:35:d7:79:b4:2b:cd:d8:58:
c4:15:5c:84:ce:3a:a5:e8:ff:f3:94:54:98:54:63:
63:e6:66:44:9e:c9:fe:1d:93:64:b7:04:9c:0e:4c:
df:54:05:c5:c6:3a:78:53:c0:81:a4:f5:cb:d3:df:
aa:6f:bf:ef:23:b1:ba:1a:8a:e5:da:3c:3d:ce:0b:
f6:8d:25:01:7c:9b:a0:2a:86:c7:a1:bc:11:61:c1:
b9:c7:bc:bf:e0:ec:08:89:2e:8f:57:86:41:72:a4:
7b:ff:62:bd:85:4c:fd:4c:fa:56:0f:ea:a4:bb:76:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:1C:15:CF:11:26:1F:1C:63:45:64:F9:A6:E2:82:B8:A2:A8:29
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6ygcFc8RJh8cY0Vk-abigriiqCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.50.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ee:7a:30:34:25:d8:c4:c1:43:7f:8e:d9:0b:4e:bc:70:1d:
ab:a4:e6:93:e9:10:a2:ef:9a:d8:92:5e:af:7a:51:a9:6c:82:
e3:88:1f:7b:f9:53:00:1c:8f:45:d1:97:37:7e:29:04:07:9a:
22:f1:3c:38:8e:1b:9c:8b:a1:c2:05:ba:c1:e9:4a:2c:41:82:
6d:a7:24:52:26:62:2b:1f:ef:39:d5:b6:34:96:eb:14:5a:70:
60:b3:62:f8:15:c2:58:d0:3d:41:7c:49:06:7c:29:e4:5a:33:
e0:a5:c3:2b:87:e9:90:35:60:a4:f5:dd:a8:de:58:8a:bb:70:
c8:b2:81:71:06:14:1b:57:80:07:e4:95:29:4f:f9:c8:76:63:
20:79:a6:d2:ca:72:55:92:14:8e:17:dd:1e:7a:6d:3c:ab:5f:
c9:e0:4b:df:9d:d7:9e:cb:f8:97:e2:04:e9:92:c3:77:c6:82:
4d:91:96:5f:ff:ef:4a:60:36:4d:d2:74:e6:33:87:50:e8:de:
46:c3:9f:7d:e6:d7:b4:0a:f0:ed:33:10:0a:02:e7:55:da:6b:
fa:7d:11:3e:1f:8f:61:58:93:b0:3e:c2:fa:d2:80:ec:7c:4e:
f4:c4:9b:fc:e3:63:07:90:d5:a0:2e:93:7d:9f:47:b9:d4:16:
0e:b7:b0:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCME9+xu5opFl3w8+o8gkM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwOTEwMTYwODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjI4MWMxNWNmMTEyNjFmMWM2MzQ1NjRmOWE2ZTI4MmI4YTJhODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C3NSY3dybzARA/tFednaL/dFDF/
Qa6jWuSK31jpt2sWzr1mafj9cKc+ns7q/KL+cfAj0FlqqOrPu3oCGqxAKa0JIoNK
fDHZ0h6ELJZyH+hNDH+my7azPMksbXMIG/5LCSqwlZsS9G82NMWFT+QUrYC/niQ1
fd8/dOOQf7hDqsH+gtBzjlftFOiSTcBRNdd5tCvN2FjEFVyEzjql6P/zlFSYVGNj
5mZEnsn+HZNktwScDkzfVAXFxjp4U8CBpPXL09+qb7/vI7G6Gorl2jw9zgv2jSUB
fJugKobHobwRYcG5x7y/4OwIiS6PV4ZBcqR7/2K9hUz9TPpWD+qku3Yk/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsoHBXPESYfHGNFZPmm4oK4oqgpMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvNnlnY0ZjOFJKaDhjWTBWay1hYmlncmlpcUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvQwyMA0G
CSqGSIb3DQEBCwUAA4IBAQDM7nowNCXYxMFDf47ZC068cB2rpOaT6RCi75rYkl6v
elGpbILjiB97+VMAHI9F0Zc3fikEB5oi8Tw4jhuci6HCBbrB6UosQYJtpyRSJmIr
H+851bY0lusUWnBgs2L4FcJY0D1BfEkGfCnkWjPgpcMrh+mQNWCk9d2o3liKu3DI
soFxBhQbV4AH5JUpT/nIdmMgeabSynJVkhSOF90eem08q1/J4Evfndeey/iX4gTp
ksN3xoJNkZZf/+9KYDZN0nTmM4dQ6N5Gw5995te0CvDtMxAKAudV2mv6fRE+H49h
WJOwPsL60oDsfE70xJv842MHkNWgLpN9n0e51BYOt7B/
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:57 2026 by rpki-client