Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/98qt9gg1py276Ixy7rJD_Tt5GoM.roa
File: 98qt9gg1py276Ixy7rJD_Tt5GoM.roa (raw, json)
Hash identifier: QrSG2xBshRIbuoZy41u4BDSFfTAzTxEeoHs15LJknh8=
Subject key identifier: F7:CA:AD:F6:08:35:A7:2D:BB:E8:8C:72:EE:B2:43:FD:3B:79:1A:83
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1220BB720690ACA843CAEFA0E48ADD2BD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/98qt9gg1py276Ixy7rJD_Tt5GoM.roa
Signing time: Fri 09 Oct 2026 19:02:35 +0000
ROA not before: Fri 09 Oct 2026 19:02:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 191.217.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0b:b7:20:69:0a:ca:84:3c:ae:fa:0e:48:ad:d2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 9 19:02:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7caadf60835a72dbbe88c72eeb243fd3b791a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:a2:37:d6:db:20:ff:fa:9d:21:68:7a:50:
72:b1:0f:6e:51:27:e2:e0:ca:ff:5d:1e:3e:e5:44:
95:73:7c:98:59:e8:34:11:82:f5:5c:dc:d8:42:11:
43:69:c3:16:fb:46:34:28:2e:7e:f2:75:30:45:63:
ec:54:3a:10:07:d0:93:98:7f:85:5b:d3:15:30:bf:
04:46:3d:fb:07:5f:63:63:3b:f5:5f:7a:79:c0:86:
8d:94:1a:82:33:13:b6:84:63:a4:c9:3a:ec:55:b3:
99:aa:0b:62:63:2d:c2:f0:65:2e:e2:22:e8:ea:6c:
4b:f9:98:bb:48:c3:3f:86:1d:1a:41:63:f8:fb:3c:
63:5a:e1:5d:93:42:a9:0c:a2:57:bd:d5:72:a5:59:
70:4d:2c:15:95:37:48:0c:e0:dd:31:ee:3c:38:0d:
38:dc:ef:a9:c7:1e:c7:88:90:f1:b4:79:d8:a7:79:
44:e3:0a:75:c6:b3:df:e5:81:46:04:6a:5b:bd:86:
cc:64:07:1e:e4:b1:42:d2:13:c2:d4:b7:9c:6b:39:
04:88:c6:a4:3d:80:5a:7d:29:c4:da:eb:0e:e0:8e:
ac:4b:da:fa:d4:cb:1c:49:2a:5d:a7:df:37:55:e0:
3c:23:29:ae:57:ce:49:db:58:22:a4:94:92:5c:7c:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:AD:F6:08:35:A7:2D:BB:E8:8C:72:EE:B2:43:FD:3B:79:1A:83
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/98qt9gg1py276Ixy7rJD_Tt5GoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.163.0/24
Signature Algorithm: sha256WithRSAEncryption
11:85:c2:9f:9f:cf:ec:5c:55:2c:d8:46:64:1b:70:6c:3f:ea:
6d:cd:cf:5c:fe:0d:b5:21:40:47:2f:c3:45:39:71:7e:f6:50:
14:a0:10:7b:c2:6a:f4:00:da:69:00:2b:35:d8:d9:4f:44:b5:
5d:9d:72:3d:0a:15:f1:01:a7:44:98:f5:46:bc:fb:c0:9c:f1:
95:d4:b6:63:c7:7e:7d:9a:30:0e:3d:d1:8a:64:99:79:d2:1a:
d2:08:70:a9:cd:d1:ff:f4:cc:ea:bc:4a:f7:6a:24:d2:bb:4c:
47:95:2d:41:9a:60:7e:5b:dd:5b:a3:42:60:e4:c6:2b:09:2a:
4c:44:4b:d6:de:b3:16:7e:55:a8:d9:61:e1:0c:75:46:34:b2:
54:23:4c:fe:37:6e:5f:ff:5d:1f:b6:ad:df:74:42:0b:9b:61:
86:26:28:f8:c5:16:29:1a:04:0e:f1:88:38:89:26:1f:70:ea:
76:23:61:c7:21:40:d8:9d:92:ba:e7:d6:d3:40:4f:c0:30:c2:
ba:ad:a7:83:19:6b:73:a5:4d:b6:d8:ec:88:cd:e7:05:7b:e5:
ac:fc:8f:73:8f:53:88:50:a2:c8:6f:36:47:64:c1:ea:a1:7e:
c5:c4:77:40:71:eb:c5:da:e1:cb:13:f8:61:e7:0a:7a:92:15:
c0:30:aa:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEiC7cgaQrKhDyu+g5IrdK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDA5MTkwMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2NhYWRmNjA4MzVhNzJkYmJlODhjNzJlZWIyNDNmZDNiNzkxYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb6iN9bbIP/6nSFoelBysQ9uUSfi
4Mr/XR4+5USVc3yYWeg0EYL1XNzYQhFDacMW+0Y0KC5+8nUwRWPsVDoQB9CTmH+F
W9MVML8ERj37B19jYzv1X3p5wIaNlBqCMxO2hGOkyTrsVbOZqgtiYy3C8GUu4iLo
6mxL+Zi7SMM/hh0aQWP4+zxjWuFdk0KpDKJXvdVypVlwTSwVlTdIDODdMe48OA04
3O+pxx7HiJDxtHnYp3lE4wp1xrPf5YFGBGpbvYbMZAce5LFC0hPC1LecazkEiMak
PYBafSnE2usO4I6sS9r61MscSSpdp983VeA8IymuV85J21gipJSSXHzsjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfKrfYINactu+iMcu6yQ/07eRqDMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvOThxdDlnZzFweTI3Nkl4eTdySkRfVHQ1R29NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv9mjMA0G
CSqGSIb3DQEBCwUAA4IBAQARhcKfn8/sXFUs2EZkG3BsP+ptzc9c/g21IUBHL8NF
OXF+9lAUoBB7wmr0ANppACs12NlPRLVdnXI9ChXxAadEmPVGvPvAnPGV1LZjx359
mjAOPdGKZJl50hrSCHCpzdH/9MzqvEr3aiTSu0xHlS1BmmB+W91bo0Jg5MYrCSpM
REvW3rMWflWo2WHhDHVGNLJUI0z+N25f/10ftq3fdEILm2GGJij4xRYpGgQO8Yg4
iSYfcOp2I2HHIUDYnZK659bTQE/AMMK6raeDGWtzpU222OyIzecFe+Ws/I9zj1OI
UKLIbzZHZMHqoX7FxHdAcevF2uHLE/hh5wp6khXAMKru
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:07 2026 by rpki-client