Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7oylKHhsGxRmzdAi7HJHbElX-f8.roa
File: 7oylKHhsGxRmzdAi7HJHbElX-f8.roa (raw, json)
Hash identifier: gvdW9cCUAEI5ZMaBav9Q1pKA9nkHaKr/JQw9b4+scWU=
Subject key identifier: EE:8C:A5:28:78:6C:1B:14:66:CD:D0:22:EC:72:47:6C:49:57:F9:FF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ECB7F8C0C36844878C95A5E7184CD806C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7oylKHhsGxRmzdAi7HJHbElX-f8.roa
Signing time: Mon 15 Jun 2026 13:36:34 +0000
ROA not before: Mon 15 Jun 2026 13:36:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 74.112.152.0/22 maxlen: 24
94.229.212.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:7f:8c:0c:36:84:48:78:c9:5a:5e:71:84:cd:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 15 13:36:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee8ca528786c1b1466cdd022ec72476c4957f9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:57:6a:fa:d7:a5:08:b9:e9:b0:8c:ca:57:
1a:ea:46:dc:8c:6f:43:1e:d0:8a:4e:03:69:a1:87:
58:ca:d0:59:ba:f1:8d:57:c3:8f:16:f7:1b:d2:ac:
cc:4b:42:c9:26:99:fe:47:03:5f:a5:7c:db:77:6b:
3c:54:48:f5:db:a3:12:cd:16:e7:21:e0:b6:f8:9b:
4c:8c:d7:58:da:f5:69:8d:94:2d:a0:af:0a:ac:d1:
20:29:0b:cb:47:d4:04:ed:8e:41:64:61:79:3c:69:
bd:f7:74:bb:08:71:63:6f:7f:f2:9b:32:c7:ef:b8:
1e:6d:1c:42:ad:ca:63:5a:0e:7e:56:3e:e8:99:37:
db:d9:6e:37:11:19:4f:26:56:a6:b9:31:2c:a2:06:
18:83:86:bf:d0:78:22:cd:4c:86:07:1f:d7:56:33:
fe:71:60:67:36:92:88:09:36:40:94:25:52:68:85:
57:ec:ac:e7:02:b9:ef:89:57:6f:50:34:af:7c:5b:
65:85:6c:9d:14:92:58:dd:d8:60:bb:7a:f5:b7:67:
c4:c6:ab:34:50:45:5e:f3:82:78:b9:a7:c3:89:6b:
c5:bd:8c:6a:77:7c:5f:ae:5e:2e:14:76:fa:e3:fa:
70:19:70:75:b4:57:b6:ff:c7:25:84:3e:34:61:c4:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:A5:28:78:6C:1B:14:66:CD:D0:22:EC:72:47:6C:49:57:F9:FF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7oylKHhsGxRmzdAi7HJHbElX-f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/22
94.229.212.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
60:5f:90:cb:f6:39:ce:87:ac:90:99:4a:5b:0b:bf:bb:b9:0d:
d5:11:eb:91:1e:af:b5:52:65:e0:b7:53:21:09:40:ad:2d:53:
8c:2a:ff:d1:9b:67:2b:f9:55:9e:64:fd:2e:36:03:45:a6:83:
a1:81:75:de:47:ed:83:36:9b:51:23:1c:94:29:74:c8:2f:d0:
27:73:af:31:3f:dd:88:81:11:9b:35:7f:e9:61:0a:c8:94:61:
b2:6b:c3:b1:ab:11:1c:f1:30:6e:58:c3:1c:d8:f8:65:7d:9c:
a8:90:cd:29:fe:4a:db:dd:6d:45:7c:36:7c:96:e8:58:2f:89:
75:4e:6b:6c:0d:ac:d0:6a:ee:06:14:f9:78:57:34:59:ae:75:
1a:d7:bf:a5:81:37:51:07:25:29:bd:5d:97:fa:fc:c9:9e:42:
ae:09:da:19:0c:b1:61:6f:ac:5e:83:03:0c:27:21:86:25:cd:
ac:0c:77:bc:84:22:9b:1a:46:6d:48:b4:8a:b9:5f:c2:e2:0b:
fc:a7:d6:6e:7b:33:ef:75:32:aa:0e:e7:e7:8a:c9:ae:3a:f0:
41:34:77:02:d2:49:a9:f4:9a:da:e0:85:a3:99:76:f2:df:ec:
7b:8b:8f:f2:85:25:3a:d8:2e:ab:75:65:dc:ab:20:26:26:33:
36:89:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 20:12:03 2026 by rpki-client