Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BE1b2sOXEI7JBf1Sit-CNaNn5VQ.roa
File: BE1b2sOXEI7JBf1Sit-CNaNn5VQ.roa (raw, json)
Hash identifier: LLO7wBpSRM8IESIS9ccgV+BHBIopmAVzaDdNsFCBMpo=
Subject key identifier: 04:4D:5B:DA:C3:97:10:8E:C9:05:FD:52:8A:DF:82:35:A3:67:E5:54
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A17A056B38C9BDB728F1901751FCC935E8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BE1b2sOXEI7JBf1Sit-CNaNn5VQ.roa
Signing time: Mon 26 Oct 2026 21:02:17 +0000
ROA not before: Mon 26 Oct 2026 21:02:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213990
IP address blocks: 191.217.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:05:6b:38:c9:bd:b7:28:f1:90:17:51:fc:c9:35:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 21:02:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=044d5bdac397108ec905fd528adf8235a367e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:74:c3:d9:07:bf:f9:14:e2:07:1b:7a:1b:
5f:14:7c:77:18:07:85:1a:bf:a6:78:41:2e:51:82:
e2:9d:cc:08:09:dc:1e:d0:08:dc:f0:df:94:a4:ed:
31:ab:5e:76:95:84:76:d4:b2:8e:ff:7d:93:51:da:
9a:b5:09:d9:73:76:2b:bb:0b:45:fc:db:75:91:82:
58:20:24:46:32:ca:be:e7:d6:91:24:7e:c2:cd:ae:
0d:d3:2b:fc:df:ae:43:59:a9:41:aa:68:ae:23:2c:
b0:ab:0c:2d:21:f3:a7:e4:f5:a3:9b:b0:24:6b:5f:
aa:6b:c4:1a:57:eb:91:d0:be:b1:e6:38:62:13:57:
9e:be:78:be:b0:f8:5b:e0:64:9d:76:22:33:a2:f9:
b8:bf:7c:5b:94:f9:0f:34:94:1d:37:3a:9c:65:db:
28:36:70:37:62:5a:22:7e:45:75:16:d8:57:8e:99:
d1:01:8d:79:93:8a:df:8a:6c:1f:81:c9:67:44:b9:
cd:5a:d6:d9:31:af:43:aa:b5:ca:7e:02:70:78:eb:
f6:7b:f2:bd:99:db:ac:7b:d2:a8:c8:a2:c8:0e:6e:
a9:3e:5d:0a:7d:c1:90:f6:a2:b7:66:7f:c2:16:c9:
7d:b1:c5:e3:6d:56:83:10:81:47:96:d0:12:d0:99:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4D:5B:DA:C3:97:10:8E:C9:05:FD:52:8A:DF:82:35:A3:67:E5:54
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BE1b2sOXEI7JBf1Sit-CNaNn5VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.165.0/24
Signature Algorithm: sha256WithRSAEncryption
25:02:e6:4f:f5:f4:95:9f:ec:b6:9c:d5:6d:b8:3a:72:c1:39:
2e:44:ad:2e:63:0f:67:dd:88:62:9c:b2:9f:34:d8:5b:40:6a:
5f:21:be:d9:05:86:ed:a4:26:7e:79:45:ea:a4:12:d9:5c:0b:
0d:8f:0b:4b:f2:9d:bd:03:7a:6d:4a:48:fc:b8:6c:46:df:97:
b0:93:bc:28:9f:4a:f7:5e:51:34:03:f2:fe:bd:d0:5f:e5:12:
da:3b:db:85:89:63:55:88:a3:70:93:58:07:1c:c0:d3:76:ab:
80:81:d3:4b:ee:c9:a4:15:4e:3f:24:cd:7e:e7:17:59:07:81:
cb:38:d5:40:73:e3:6e:e7:fc:c7:4d:aa:81:2c:64:ce:34:b2:
45:c8:b4:67:87:c5:32:0d:b5:1a:ac:7e:6f:57:3e:b7:91:9a:
58:b7:e6:8e:f6:75:3f:0a:02:1b:be:88:13:6a:db:52:e4:38:
c4:c0:0a:b6:cb:95:49:82:fe:09:d8:16:58:f8:b5:d9:7a:c0:
08:0a:01:1b:67:c6:72:bb:f1:33:d1:f4:4b:01:dd:58:3b:b8:
7e:4b:26:c4:62:91:6e:7d:7d:b5:08:81:78:91:21:3b:94:0a:
ba:46:9e:13:3f:45:d4:a5:6b:af:be:01:6e:3d:59:59:b4:27:
af:7c:b7:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF6BWs4yb23KPGQF1H8yTXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDI2MjEwMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDRkNWJkYWMzOTcxMDhlYzkwNWZkNTI4YWRmODIzNWEzNjdlNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7N0w9kHv/kU4gcbehtfFHx3GAeF
Gr+meEEuUYLincwICdwe0Ajc8N+UpO0xq152lYR21LKO/32TUdqatQnZc3YruwtF
/Nt1kYJYICRGMsq+59aRJH7Cza4N0yv8365DWalBqmiuIyywqwwtIfOn5PWjm7Ak
a1+qa8QaV+uR0L6x5jhiE1eevni+sPhb4GSddiIzovm4v3xblPkPNJQdNzqcZdso
NnA3YloifkV1FthXjpnRAY15k4rfimwfgclnRLnNWtbZMa9DqrXKfgJweOv2e/K9
mduse9KoyKLIDm6pPl0KfcGQ9qK3Zn/CFsl9scXjbVaDEIFHltAS0JnBVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARNW9rDlxCOyQX9UorfgjWjZ+VUMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvQkUxYjJzT1hFSTdKQmYxU2l0LUNOYU5uNVZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv9mlMA0G
CSqGSIb3DQEBCwUAA4IBAQAlAuZP9fSVn+y2nNVtuDpywTkuRK0uYw9n3YhinLKf
NNhbQGpfIb7ZBYbtpCZ+eUXqpBLZXAsNjwtL8p29A3ptSkj8uGxG35ewk7won0r3
XlE0A/L+vdBf5RLaO9uFiWNViKNwk1gHHMDTdquAgdNL7smkFU4/JM1+5xdZB4HL
ONVAc+Nu5/zHTaqBLGTONLJFyLRnh8UyDbUarH5vVz63kZpYt+aO9nU/CgIbvogT
attS5DjEwAq2y5VJgv4J2BZY+LXZesAICgEbZ8Zyu/Ez0fRLAd1YO7h+SybEYpFu
fX21CIF4kSE7lAq6Rp4TP0XUpWuvvgFuPVlZtCevfLcV
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:20:50 2026 by rpki-client