Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8y_u6d0OLNpJ6z3xhOJIgkyfQkQ.roa
File: 8y_u6d0OLNpJ6z3xhOJIgkyfQkQ.roa (raw, json)
Hash identifier: x5ngkjK8Oi5Ei2ai6vv+AJoGw1ojnjCn2ofMAHZIiEM=
Subject key identifier: F3:2F:EE:E9:DD:0E:2C:DA:49:EB:3D:F1:84:E2:48:82:4C:9F:42:44
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F23E4C91FF138E7F7126E88468578AB23
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8y_u6d0OLNpJ6z3xhOJIgkyfQkQ.roa
Signing time: Thu 02 Jul 2026 17:33:44 +0000
ROA not before: Thu 02 Jul 2026 17:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 94.229.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 12:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:e4:c9:1f:f1:38:e7:f7:12:6e:88:46:85:78:ab:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 2 17:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f32feee9dd0e2cda49eb3df184e248824c9f4244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:d2:33:a5:bf:7c:54:4b:57:a8:d0:be:ce:
51:f5:58:2a:98:3b:c7:4d:11:ee:e4:1d:c2:a3:8e:
f5:ac:27:34:bb:d7:dc:c1:75:53:fd:0f:22:2e:2a:
ba:02:10:c6:90:dc:77:81:8e:2d:a6:d8:59:c1:1e:
f8:b8:df:3b:38:40:3a:de:8f:a9:46:74:b4:20:4b:
5b:e7:28:e9:b3:1e:ab:9b:cf:10:47:35:3c:c6:39:
e0:96:43:04:a1:86:c2:60:5a:cd:8e:5b:2d:67:b9:
87:ad:94:c6:08:79:fc:52:e5:06:c6:f0:80:ff:12:
75:4c:5a:33:c9:8f:bd:1f:a2:b6:c8:68:9d:35:5f:
63:8a:d9:85:bf:7d:6d:87:92:47:3c:07:1d:0c:6e:
8d:cd:de:3d:7e:44:8d:28:e8:86:94:f3:c7:7b:8b:
45:05:45:d9:c0:e9:42:25:ba:cc:a5:6f:fd:bb:8c:
54:d5:6d:0c:97:df:82:ec:e4:2d:40:db:89:12:19:
6c:3e:f0:b2:70:e2:ca:94:67:0e:30:6f:eb:e3:45:
7e:40:cc:6d:a2:72:9e:67:6e:91:bb:e0:3b:75:a0:
36:ec:7b:6c:68:47:16:d7:40:8b:f8:a2:ad:4e:f9:
83:02:4b:25:67:17:8c:46:78:24:c9:eb:4a:66:7c:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:EE:E9:DD:0E:2C:DA:49:EB:3D:F1:84:E2:48:82:4C:9F:42:44
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8y_u6d0OLNpJ6z3xhOJIgkyfQkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
85:23:53:0f:7c:e4:a7:84:dd:d1:b2:99:bc:7d:93:d4:3f:af:
96:ec:1c:c4:8e:5b:52:44:07:df:cf:b4:bf:b4:e8:af:da:61:
bf:34:a2:2a:97:9c:c6:c8:a4:b4:79:e8:f4:fb:45:81:44:03:
de:18:da:81:34:78:84:34:5b:30:29:37:1c:99:6a:eb:db:51:
1d:9c:98:af:2e:91:86:e6:c5:ec:13:62:be:c8:b3:78:49:96:
f6:bc:f3:2c:16:e2:8e:db:cf:e2:82:20:2d:4c:7f:e0:ea:87:
7e:ae:54:fe:78:48:93:ee:b6:24:8b:57:41:94:16:fc:89:7f:
8e:f9:c2:e9:16:af:3b:7e:62:08:56:cc:67:c6:6d:f5:92:f1:
75:85:28:b2:46:15:4f:1e:a9:6b:e0:3a:8f:0f:61:94:08:57:
d4:7e:8f:c9:69:c9:fb:55:75:e2:3c:e0:7d:ab:bf:f7:19:0c:
00:11:1c:0a:dc:a9:6f:9f:cf:b9:5c:ce:2c:76:5c:99:e9:a4:
0d:7c:e8:a9:d2:ad:b9:5b:d8:8a:b6:2a:93:7e:58:f9:99:7a:
be:3d:c1:a9:31:7c:ee:23:ce:73:f5:39:dd:93:db:72:b6:35:
fb:9b:2a:7d:b5:0b:b6:dc:72:35:df:c3:f3:e0:b4:54:d0:ac:
f0:96:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:46 2026 by rpki-client