Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9j_wHTxNgp0NbprAApVBPeImpJA.roa
File: 9j_wHTxNgp0NbprAApVBPeImpJA.roa (raw, json)
Hash identifier: oyjIJnKy+KeJCIt/ae2uAH/G9GDiwG5ydKC9nOQx1K8=
Subject key identifier: F6:3F:F0:1D:3C:4D:82:9D:0D:6E:9A:C0:02:95:41:3D:E2:26:A4:90
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1455620858D415E3AEEBF2AE113CEF9F2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9j_wHTxNgp0NbprAApVBPeImpJA.roa
Signing time: Fri 16 Oct 2026 15:30:34 +0000
ROA not before: Fri 16 Oct 2026 15:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219149
IP address blocks: 200.181.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:56:20:85:8d:41:5e:3a:ee:bf:2a:e1:13:ce:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 16 15:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63ff01d3c4d829d0d6e9ac00295413de226a490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:b3:d8:1a:f7:48:3c:3e:ca:c5:ff:de:13:
bd:8e:a5:7e:08:71:d6:6f:53:07:db:55:53:a9:cf:
9e:1d:70:97:75:17:d1:d2:3f:fd:77:f3:86:8f:aa:
1f:9c:f2:b1:cf:73:d5:a0:75:97:2a:b8:8f:9f:31:
6f:a2:a7:91:f0:13:da:74:8a:3f:f1:b7:e1:d4:74:
f7:7e:c5:d3:e3:9e:17:b9:b4:f5:a4:3f:5b:84:62:
24:e2:2c:85:f7:5c:64:3a:a4:e9:ad:cb:c7:21:ea:
fb:6e:cc:40:5a:7b:2a:f4:4a:3c:e2:0a:b4:3a:b4:
84:a5:a8:ca:a9:a6:f8:c2:43:a6:ec:9d:33:46:f1:
ff:76:07:a4:98:6e:dd:d7:83:ef:91:87:97:ab:4a:
ad:08:62:8e:4b:a1:2c:04:8c:69:01:89:d0:3c:98:
54:af:14:ed:d5:d6:03:64:5b:68:e9:03:0a:fd:c6:
bc:76:be:c4:2a:c0:3f:4a:ab:60:b8:64:c4:13:77:
0c:97:ea:ef:e6:2e:8b:52:e1:0d:b9:0c:5c:7e:1c:
b6:57:04:a7:40:43:2a:23:da:02:f2:b4:31:d0:aa:
8a:c7:32:12:84:a7:46:7e:f1:0c:e2:24:02:37:89:
bc:4a:a0:08:ee:28:0a:a7:94:67:ba:91:ab:f9:ba:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3F:F0:1D:3C:4D:82:9D:0D:6E:9A:C0:02:95:41:3D:E2:26:A4:90
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9j_wHTxNgp0NbprAApVBPeImpJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.181.85.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ca:d6:2d:06:76:c5:b9:de:7b:d7:f3:cb:19:96:e3:67:6a:
56:6b:7b:2c:4b:1f:ff:c2:e7:96:f5:96:c3:3a:31:68:d8:fa:
6d:97:0b:7a:c3:5e:34:27:e6:87:ac:c5:6a:95:62:97:a0:e8:
59:c0:02:51:6f:12:97:a0:35:5b:d7:30:ec:6e:f7:c2:8e:eb:
30:a3:d4:d7:f9:35:6b:17:a0:c6:16:26:5f:ba:d6:b8:a2:bb:
2d:2b:2e:26:5a:b2:37:5b:f3:0a:e7:60:73:0d:4c:61:92:84:
3d:ba:43:26:b7:08:8c:6b:ce:7a:31:a7:4d:87:0e:a2:01:ff:
11:6f:16:71:48:0e:38:97:6d:fa:e7:f4:dd:86:76:c1:03:da:
37:27:c6:60:1c:e3:ec:06:77:7a:a9:30:8d:49:48:b5:f5:af:
61:c8:1a:bc:8b:ef:7e:20:0f:e0:45:3a:9c:00:fc:cb:2a:3c:
e9:38:83:28:5e:26:ae:01:22:fd:a3:0d:f4:c5:40:21:e2:cb:
ff:c6:f8:64:ca:c7:bd:49:d6:f1:15:f1:64:f1:03:47:9f:f1:
d9:f9:43:a7:19:ca:4d:88:97:46:b8:a6:b1:ba:71:47:86:04:
c1:f8:84:02:99:68:c0:b2:4d:19:e0:0b:ca:d3:34:97:53:64:
54:27:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 08:44:39 2026 by rpki-client