Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8rH3pw3PAp341oBN3-PnuAGhmyM.roa
File: 8rH3pw3PAp341oBN3-PnuAGhmyM.roa (raw, json)
Hash identifier: tzyWngz4GhaeI1AytJ6oyp2806AlRhhzdKzj4I9L9r0=
Subject key identifier: F2:B1:F7:A7:0D:CF:02:9D:F8:D6:80:4D:DF:E3:E7:B8:01:A1:9B:23
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2F8D6861F9F3F00035C1E860EB4792F5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8rH3pw3PAp341oBN3-PnuAGhmyM.roa
Signing time: Sat 04 Jul 2026 23:53:44 +0000
ROA not before: Sat 04 Jul 2026 23:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 191.219.24.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
201.11.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:8d:68:61:f9:f3:f0:00:35:c1:e8:60:eb:47:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 4 23:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2b1f7a70dcf029df8d6804ddfe3e7b801a19b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:e0:ca:75:94:be:6f:41:0e:d4:76:ff:19:
4c:9f:24:56:a7:76:8d:e9:c0:a9:e1:13:03:82:6d:
78:68:18:ad:d5:3a:cc:71:fd:62:6f:bf:f3:fd:ad:
cf:9c:bd:c7:f7:d5:57:b6:e9:0a:d1:a9:f7:c8:d3:
cc:ca:9d:11:9e:c3:af:ae:4a:b9:24:f4:6a:f5:63:
61:a9:b9:45:b7:76:fc:fa:7b:80:05:1d:4c:b0:2e:
25:01:35:f2:4a:82:77:02:1c:ff:dc:d4:a9:ef:25:
cd:7d:45:be:ed:73:2b:9e:e5:31:31:f2:4a:33:14:
8f:68:6c:ee:13:da:6a:6c:c0:04:cc:3e:8c:50:04:
f4:0f:ff:03:42:fa:bd:9f:36:dc:23:ca:a3:42:d0:
71:7b:8b:56:6c:9a:da:82:fa:1f:13:55:e0:1c:09:
dc:97:19:63:6c:64:c7:1f:d1:0a:70:b5:cd:7a:21:
56:af:a3:0b:56:70:9e:0b:25:9f:c2:f1:b7:39:71:
85:b8:b8:69:5a:d9:25:f2:84:87:c6:47:71:92:f8:
9b:c0:eb:11:1f:97:96:25:3d:0b:96:6b:85:8a:8d:
25:14:75:11:f8:11:6e:7d:4b:47:3a:ba:43:11:47:
24:40:46:06:dc:31:68:8c:f8:38:d3:85:ec:d5:7c:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B1:F7:A7:0D:CF:02:9D:F8:D6:80:4D:DF:E3:E7:B8:01:A1:9B:23
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8rH3pw3PAp341oBN3-PnuAGhmyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.24.0/24
191.222.246.0/24
201.11.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ab:49:df:6f:11:7e:43:3a:3a:07:20:b7:97:09:72:d5:31:
bc:b2:83:f5:2b:7e:73:36:c2:4f:2f:68:d3:a4:4e:ed:23:f7:
38:89:f9:f7:89:3e:e5:dc:a0:2c:63:67:80:6a:ee:49:e6:d3:
cc:5a:8c:c7:09:54:97:3b:52:0b:ed:5b:44:8b:1f:03:e7:57:
0c:6b:20:1d:8a:81:a7:dc:ec:9d:c6:9b:98:0b:90:89:c4:99:
0d:44:3d:75:b7:ee:ba:34:e5:48:7d:e6:f3:2d:e0:a7:21:0b:
a3:8b:5d:1e:96:a4:95:f6:b0:e1:62:0f:e0:df:31:90:1f:aa:
c7:72:85:d7:b2:0e:6c:0b:e8:42:9e:78:d8:66:53:0e:07:a3:
2e:bf:f5:eb:d5:15:76:e4:7f:8c:4a:55:d7:4d:45:a7:21:2e:
6f:c4:59:68:78:1c:a1:b8:6e:23:c2:48:39:fb:ed:1d:ed:94:
dd:b4:8c:7f:7a:a4:15:4e:d3:f5:4f:18:0b:5a:5f:78:0e:41:
19:b8:ee:48:6e:07:39:57:2b:cd:ef:17:0b:ef:c7:f4:e9:6f:
d0:15:cd:6a:fe:84:6e:f5:34:c8:b5:47:9e:a1:1d:c1:a8:74:
1b:bc:1c:3b:14:81:d8:7d:10:c1:66:07:8a:da:b9:39:2c:58:
11:79:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:12 2026 by rpki-client