Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Bs6Idzt3AXIi3vJD5zuhlfEr7Hs.roa
File: Bs6Idzt3AXIi3vJD5zuhlfEr7Hs.roa (raw, json)
Hash identifier: KXMF5yuQtT4Y9CSvULAyDQFBoNSrsutHJLw6Z9SBHgA=
Subject key identifier: 06:CE:88:77:3B:77:01:72:22:DE:F2:43:E7:3B:A1:95:F1:2B:EC:7B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA493C2DC4E8139C9F6D92D5FA7689A3D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Bs6Idzt3AXIi3vJD5zuhlfEr7Hs.roa
Signing time: Mon 27 Jul 2026 17:16:14 +0000
ROA not before: Mon 27 Jul 2026 17:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18229
IP address blocks: 89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 17:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:93:c2:dc:4e:81:39:c9:f6:d9:2d:5f:a7:68:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 27 17:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06ce88773b77017222def243e73ba195f12bec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:f9:bc:f1:62:f2:aa:da:d1:aa:ea:4d:9c:
6f:72:cc:92:16:92:69:25:7e:2d:b3:e4:92:6e:48:
38:2d:cc:7d:69:2f:b5:a2:7d:a6:e0:6a:c6:8d:eb:
a7:d8:99:e5:a0:b6:fc:ed:97:62:f9:11:97:0f:be:
53:a4:e3:c6:ac:da:63:13:d1:01:b9:0b:12:b6:0b:
73:d8:b6:d4:88:e6:4f:8d:c7:c3:05:07:d6:56:bc:
ef:55:a7:e0:89:aa:1f:6e:e1:20:01:c8:fc:24:db:
ef:38:5f:dd:0e:67:ce:46:5c:de:93:98:4e:14:31:
71:5a:43:d2:a2:73:f2:86:a2:b8:b4:b7:17:d4:b4:
f5:53:38:20:cd:dc:9d:ca:bc:86:92:93:38:c9:2f:
af:a0:71:fc:2c:b2:4c:d4:7e:66:e9:ac:5d:69:ba:
63:c6:04:5d:4f:42:37:09:58:7d:0f:e6:2b:63:0f:
33:4f:21:82:8e:c6:40:2c:5a:72:f6:93:01:dc:2d:
3f:bc:a0:e4:3b:88:78:78:6f:aa:d8:51:a1:45:62:
83:49:3b:6c:47:18:03:31:9c:c6:1d:f4:51:ec:e7:
cb:90:3b:42:c2:96:f5:35:05:d2:c9:8f:0f:54:bc:
79:0f:7f:e7:4e:75:e4:7c:0b:a6:36:20:78:6d:21:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:88:77:3B:77:01:72:22:DE:F2:43:E7:3B:A1:95:F1:2B:EC:7B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Bs6Idzt3AXIi3vJD5zuhlfEr7Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.18.0/24
89.106.21.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8a:16:89:1d:49:72:22:56:f7:62:36:3c:a3:6b:8e:0a:5e:
78:30:de:dc:93:1a:f9:6f:f6:95:11:97:bd:66:e0:bc:64:af:
6f:81:1f:56:c1:8a:b1:58:d2:e2:cc:ad:a2:46:f3:a1:09:d2:
5e:3c:af:98:9d:6c:c5:65:b3:e8:96:c4:d9:57:68:a8:0d:3d:
d2:54:83:4c:00:ac:c8:4b:65:8b:93:cf:4e:b5:a4:d5:57:af:
17:f9:00:29:db:84:21:c3:bd:31:83:e8:d3:c6:c8:e5:1b:32:
da:19:c1:71:b1:61:31:97:8b:38:5d:05:2a:50:50:c5:8e:58:
cc:50:25:f3:64:50:9c:30:bc:0b:c8:a7:55:48:05:da:5e:5c:
72:d0:ee:f2:5b:80:de:e7:59:d8:19:88:c8:e0:e7:15:db:66:
fc:37:10:b6:a4:27:42:c8:70:c6:ff:2a:0b:42:b9:72:8e:30:
b2:97:90:cd:22:3a:e7:08:52:e6:36:e4:e0:88:7d:8b:1a:14:
14:b6:ee:04:13:a9:d5:bc:c6:02:31:fb:ce:1e:c2:af:52:7c:
d0:07:14:e1:e6:29:cd:e0:50:6d:83:cb:4b:12:7e:cb:3a:24:
45:3f:ff:16:56:18:2c:e8:17:82:d9:20:29:f7:5f:68:46:5d:
10:74:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:21:59 2026 by rpki-client