Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7fHOavmu4-WvSiUMf7ryWEAZLgY.roa
File: 7fHOavmu4-WvSiUMf7ryWEAZLgY.roa (raw, json)
Hash identifier: 5/bT4v5cj+h3a+N7Oy353cxps8AAiQVsLVVzeQq2TE8=
Subject key identifier: ED:F1:CE:6A:F9:AE:E3:E5:AF:4A:25:0C:7F:BA:F2:58:40:19:2E:06
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A178F291DDB25857BD1D0F4438821E396F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7fHOavmu4-WvSiUMf7ryWEAZLgY.roa
Signing time: Mon 26 Oct 2026 16:02:05 +0000
ROA not before: Mon 26 Oct 2026 16:02:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 191.222.243.0/24 maxlen: 24
201.11.238.0/24 maxlen: 24
205.237.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f2:91:dd:b2:58:57:bd:1d:0f:44:38:82:1e:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 16:02:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edf1ce6af9aee3e5af4a250c7fbaf25840192e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:90:bf:ce:f1:4a:66:a1:a2:32:68:74:0c:
f1:39:23:0e:83:cc:c2:44:af:21:31:65:f5:5f:d7:
4d:e9:bf:2b:44:57:6a:57:5b:91:f3:c6:94:0a:be:
f9:13:f9:31:4c:fb:1e:02:93:09:5e:1d:86:9d:ac:
a3:0b:e4:f9:77:26:d7:44:8e:fc:57:18:10:f5:c7:
5f:14:b5:e5:ad:40:5a:51:d4:cd:bc:8e:c2:c2:d2:
b0:c8:a4:18:97:93:0a:07:8f:7a:c4:60:8c:c2:40:
c3:01:fe:2e:24:16:5f:d3:38:94:f4:5a:e7:f1:c1:
42:9b:6d:2d:d5:04:49:83:af:86:bb:6f:9b:3b:e1:
de:5d:aa:1e:95:35:47:1b:86:e7:32:68:4c:97:d9:
4b:fc:92:fa:53:c9:3a:24:7d:65:ce:0e:9e:32:01:
7e:ba:e6:d9:2b:c9:b5:63:90:04:4a:67:f7:8a:71:
25:dd:24:b2:3d:27:91:33:57:df:71:f6:78:c7:29:
7a:bd:66:5a:61:18:e0:8f:37:a9:c9:ce:ff:a5:c0:
8f:6f:ef:5e:08:16:41:e1:de:0c:c9:e5:9c:84:27:
a4:25:eb:6a:22:6c:65:35:b1:3d:5d:4a:15:6a:a9:
84:b7:fd:02:ab:19:86:9f:4b:08:75:87:ad:fc:ac:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F1:CE:6A:F9:AE:E3:E5:AF:4A:25:0C:7F:BA:F2:58:40:19:2E:06
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7fHOavmu4-WvSiUMf7ryWEAZLgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.243.0/24
201.11.238.0/24
205.237.90.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:29:12:74:17:00:bc:ed:db:1b:5b:de:b5:cb:c7:25:9c:ff:
3f:ac:8b:3b:21:ed:4b:fc:62:50:fd:fe:36:33:c3:a7:bf:80:
ae:12:cb:f6:32:c0:50:de:6e:26:ad:71:0a:2c:e5:da:74:3d:
cb:d1:d1:40:6a:e3:1d:fc:20:b4:d9:00:0a:fe:c3:0d:25:bd:
57:a5:4b:76:3d:ab:0b:44:1d:8e:41:ac:0a:94:d2:48:e8:54:
3f:6f:52:ae:94:79:54:9b:46:54:d2:02:be:41:f1:e9:5a:5b:
fa:a1:6f:4e:fd:94:d2:e4:d1:c0:02:1f:00:1e:21:83:fa:80:
b7:fe:54:14:76:7d:cb:3d:c6:93:97:fe:38:e5:d5:97:c7:cc:
ca:de:89:2a:df:f0:6d:2f:e2:c7:ca:28:b0:1b:38:83:ee:06:
e0:1f:2a:cc:ee:46:7b:6a:b1:a1:d8:de:8e:02:8b:1a:74:89:
3e:f4:14:b8:fa:1b:04:db:26:f5:de:9b:41:2a:50:19:5c:a1:
41:05:1f:09:33:18:cc:b2:25:6b:1c:92:20:5c:62:b5:56:97:
4d:af:cc:33:5a:80:29:c1:e9:a7:7e:3e:2d:78:1c:22:6f:7a:
81:27:a8:2c:a4:32:fc:ed:35:0e:c3:b3:d6:55:1a:3b:3a:58:
27:54:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:55 2026 by rpki-client