Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9aJ20-sdqaYZ-BLnF6s6bapKSO4.roa
File: 9aJ20-sdqaYZ-BLnF6s6bapKSO4.roa (raw, json)
Hash identifier: CTLEGDrWZmV1RNOBM/WfJBjJbBj2slJbjsQlFfnfL8c=
Subject key identifier: F5:A2:76:D3:EB:1D:A9:A6:19:F8:12:E7:17:AB:3A:6D:AA:4A:48:EE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A03475A7FC36D5D91B281459B0265216C9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9aJ20-sdqaYZ-BLnF6s6bapKSO4.roa
Signing time: Mon 24 Aug 2026 15:48:40 +0000
ROA not before: Mon 24 Aug 2026 15:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 89.106.30.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:75:a7:fc:36:d5:d9:1b:28:14:59:b0:26:52:16:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 24 15:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5a276d3eb1da9a619f812e717ab3a6daa4a48ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:97:78:e3:62:3e:79:50:fd:a9:d7:b5:d5:
db:7e:f5:48:c8:c7:a2:69:95:55:a6:1a:51:d2:f0:
c2:9b:1a:d2:37:ef:d6:b5:67:7e:ea:70:d2:8a:31:
38:b9:fa:93:22:e4:0a:b3:5c:68:d0:c9:02:a4:94:
ad:a0:94:82:c3:2d:84:ac:cd:d6:b9:32:93:32:fd:
38:67:02:09:70:f7:f1:a4:3e:a6:8d:90:fb:1e:59:
98:f8:4c:d5:e0:c9:e2:bf:2a:94:c9:0e:2f:9e:f7:
61:e0:f0:ef:74:f9:85:09:9d:4a:7a:3f:fe:eb:a5:
3c:16:ff:e0:e6:29:e7:5b:d0:09:cc:13:81:51:91:
1e:9a:60:38:0f:e3:b3:71:88:33:b9:46:06:5a:2c:
99:de:be:2c:3e:cb:4d:cc:fe:ae:75:8d:b9:5d:34:
85:d2:bc:72:06:84:47:53:a3:c4:68:b6:de:24:22:
1e:66:96:38:59:69:0e:a6:31:9a:52:d7:da:5d:52:
9e:dd:d4:33:b8:8e:fd:06:94:c6:72:d8:5f:8e:26:
35:11:40:8d:55:70:14:f3:95:25:89:e9:70:37:b8:
c1:b8:ea:15:38:ed:78:ae:f7:0c:be:76:e9:e7:83:
8d:0b:77:bd:b1:00:29:03:f2:cc:26:af:4e:ba:a2:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:76:D3:EB:1D:A9:A6:19:F8:12:E7:17:AB:3A:6D:AA:4A:48:EE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9aJ20-sdqaYZ-BLnF6s6bapKSO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.30.0/24
94.229.223.0/24
200.165.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3d:9c:6e:7b:72:78:80:dd:6d:ba:e8:98:d3:ce:7b:18:4f:
10:3d:6e:0d:38:a8:e5:e4:93:3c:b1:d5:85:86:2e:95:b8:e4:
0a:7b:50:2a:30:c3:2d:c8:d2:c0:9f:d8:aa:f3:2c:15:5c:a1:
3b:7f:82:99:b4:43:b2:66:c7:75:fa:69:de:ae:ab:dd:f3:78:
de:3c:41:7e:3a:59:a5:98:07:e0:b3:b7:df:ce:fa:7a:c9:cf:
bd:6d:36:93:19:e2:f6:60:74:ce:77:a1:bc:1a:04:87:55:76:
6f:d1:08:03:6a:79:17:1c:9e:5d:3c:49:40:6f:7e:53:3f:69:
81:20:da:66:df:1b:4e:50:9b:5b:0d:6f:ea:10:84:2c:de:c3:
bc:9b:bd:62:c4:cf:40:e6:6a:f2:cd:73:d8:f1:52:be:90:c0:
e1:21:b7:20:e1:7d:f0:01:e3:0e:18:e8:e9:10:15:c4:52:db:
eb:45:e8:4f:df:7b:23:cb:61:78:39:4b:bc:c3:39:2b:ff:42:
b6:28:be:81:a3:e4:db:cb:27:f6:75:aa:15:cb:f5:95:4b:05:
5a:78:d8:0a:23:c2:51:98:a2:7d:74:60:5d:8e:be:e1:cc:16:
0d:1e:13:86:bc:30:b0:a7:7e:d3:08:bb:b7:39:7e:5c:09:31:
4b:5d:31:9a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaA0daf8NtXZGygUWbAmUhbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwODI0MTU0ODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWEyNzZkM2ViMWRhOWE2MTlmODEyZTcxN2FiM2E2ZGFhNGE0OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxaXeONiPnlQ/anXtdXbfvVIyMei
aZVVphpR0vDCmxrSN+/WtWd+6nDSijE4ufqTIuQKs1xo0MkCpJStoJSCwy2ErM3W
uTKTMv04ZwIJcPfxpD6mjZD7HlmY+EzV4MnivyqUyQ4vnvdh4PDvdPmFCZ1Kej/+
66U8Fv/g5innW9AJzBOBUZEemmA4D+OzcYgzuUYGWiyZ3r4sPstNzP6udY25XTSF
0rxyBoRHU6PEaLbeJCIeZpY4WWkOpjGaUtfaXVKe3dQzuI79BpTGcthfjiY1EUCN
VXAU85UlielwN7jBuOoVOO14rvcMvnbp54ONC3e9sQApA/LMJq9OuqLVywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPWidtPrHammGfgS5xerOm2qSkjuMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvOWFKMjAtc2RxYVlaLUJMbkY2czZiYXBLU080LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWWoeAwQA
XuXfAwQAyKURMA0GCSqGSIb3DQEBCwUAA4IBAQCpPZxue3J4gN1tuuiY0857GE8Q
PW4NOKjl5JM8sdWFhi6VuOQKe1AqMMMtyNLAn9iq8ywVXKE7f4KZtEOyZsd1+mne
rqvd83jePEF+OlmlmAfgs7ffzvp6yc+9bTaTGeL2YHTOd6G8GgSHVXZv0QgDankX
HJ5dPElAb35TP2mBINpm3xtOUJtbDW/qEIQs3sO8m71ixM9A5mryzXPY8VK+kMDh
Ibcg4X3wAeMOGOjpEBXEUtvrRehP33sjy2F4OUu8wzkr/0K2KL6Bo+Tbyyf2daoV
y/WVSwVaeNgKI8JRmKJ9dGBdjr7hzBYNHhOGvDCwp37TCLu3OX5cCTFLXTGa
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:39 2026 by rpki-client