Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8vu90V9yPjLtCgipGfHGGNx_VhI.roa
File: 8vu90V9yPjLtCgipGfHGGNx_VhI.roa (raw, json)
Hash identifier: yR8totNgxyM+0NbmF7KYval/657HYkXlhvBumxa0CtM=
Subject key identifier: F2:FB:BD:D1:5F:72:3E:32:ED:0A:08:A9:19:F1:C6:18:DC:7F:56:12
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A18EE48F147B4FE8398D9CCAAAF5D07E4F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8vu90V9yPjLtCgipGfHGGNx_VhI.roa
Signing time: Fri 30 Oct 2026 22:18:25 +0000
ROA not before: Fri 30 Oct 2026 22:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16713
IP address blocks: 77.111.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:e4:8f:14:7b:4f:e8:39:8d:9c:ca:aa:f5:d0:7e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 30 22:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2fbbdd15f723e32ed0a08a919f1c618dc7f5612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:d4:b7:0c:64:26:68:ed:0b:ff:5b:fd:ea:
c6:20:4a:c8:28:b7:7d:9c:35:29:f7:6a:7e:52:f5:
49:38:12:6f:a4:0a:1f:41:df:00:89:80:51:85:38:
ae:ea:cf:eb:b8:51:a8:70:ea:dd:b6:c8:43:0a:d3:
30:9c:c6:49:08:a1:c0:15:94:9e:1c:83:0f:e8:7d:
6e:5a:41:3b:29:26:1b:99:52:49:fd:18:c2:a5:b2:
7d:9c:42:73:5c:e5:95:aa:9a:c2:d9:ab:32:ba:be:
e9:56:0c:7a:af:b8:c6:62:94:37:39:11:ec:d2:18:
ff:69:71:8a:5c:e3:11:2d:e9:b3:5f:4c:f7:0a:26:
8c:43:12:68:64:0f:43:62:40:13:92:d4:bd:66:e1:
83:b8:f2:b4:47:df:06:4f:f2:3b:e0:f2:9a:c9:bb:
09:99:cf:72:28:41:63:09:cf:d5:60:23:7f:c6:73:
88:39:d8:2b:ba:6c:c0:1b:a4:35:96:0b:f1:92:03:
fd:16:18:0d:8d:a4:f3:87:1b:c6:d4:bc:6f:46:87:
3e:93:30:47:64:98:5c:93:0e:ee:01:88:94:42:e5:
0d:d4:1d:d1:7f:13:b3:3a:d7:fa:c5:36:bb:e1:18:
7c:50:8c:aa:13:ce:e2:b7:cd:14:d7:99:fc:77:94:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:BD:D1:5F:72:3E:32:ED:0A:08:A9:19:F1:C6:18:DC:7F:56:12
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8vu90V9yPjLtCgipGfHGGNx_VhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.100.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:fa:57:62:c8:3f:a6:db:e7:d3:fe:f6:00:c6:fa:9f:64:97:
d3:29:57:a9:cf:33:e3:f8:a7:15:b2:37:07:e1:46:6c:c6:64:
d5:86:21:38:09:72:4c:5b:3e:bf:73:2d:4b:ae:dc:d2:bd:eb:
11:3d:f6:6c:ad:15:85:a8:3f:bc:eb:35:3b:6d:2a:26:18:52:
21:c6:54:88:b7:5e:ac:33:02:19:8c:60:36:2c:78:10:dd:a2:
73:0a:96:3d:79:95:5a:2c:d4:c4:b3:14:aa:1a:7b:23:cb:a5:
ac:59:fe:54:73:a5:17:6f:09:96:ba:70:b4:9c:f3:09:8e:ee:
6a:4a:bb:2e:8e:d5:29:db:c7:2e:5e:5c:b3:c4:77:3b:47:c8:
de:87:fb:79:32:67:12:d4:3e:79:ae:a8:ab:df:98:e0:59:c0:
f0:7a:89:ce:69:69:29:5c:12:ca:63:bc:2e:76:8b:e7:56:b3:
f4:8f:f7:56:d9:86:d4:a4:62:fd:d1:e9:71:ae:c1:4f:82:69:
de:95:a2:f7:b0:0f:be:56:3c:40:7c:d3:22:42:62:75:dd:6b:
14:59:22:a2:de:5c:59:97:eb:a5:90:40:a9:a8:2a:31:8f:d3:
02:ff:52:37:5f:d4:b8:c3:bf:0d:df:4e:dc:bb:94:2c:e7:4b:
f9:83:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 13:32:48 2026 by rpki-client