Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ccb0ICNzcse9WG9pf6ZX20BhJwE.roa
File: Ccb0ICNzcse9WG9pf6ZX20BhJwE.roa (raw, json)
Hash identifier: /8i6zwnUMW2zfX+vq13dRsBhVrtZLdcpR2G7QlKDZTU=
Subject key identifier: 09:C6:F4:20:23:73:72:C7:BD:58:6F:69:7F:A6:57:DB:40:61:27:01
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0A100639EE92988F1390E0DE5691375D0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ccb0ICNzcse9WG9pf6ZX20BhJwE.roa
Signing time: Mon 14 Sep 2026 17:39:12 +0000
ROA not before: Mon 14 Sep 2026 17:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42708
IP address blocks: 189.75.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:00:63:9e:e9:29:88:f1:39:0e:0d:e5:69:13:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 14 17:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09c6f420237372c7bd586f697fa657db40612701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:7a:89:3b:89:71:07:16:82:9d:df:c3:c4:
b9:e6:ae:64:89:cc:20:2f:52:4c:d0:55:74:fd:cc:
3e:00:76:31:7c:79:91:b9:98:0b:1b:e5:8d:f5:fa:
f8:45:ab:10:d5:61:d4:e5:99:ba:14:3c:fe:c9:18:
9e:8d:89:c9:d8:de:ff:15:f5:3a:14:5d:6b:e9:5b:
66:55:53:0f:8a:3e:0a:d1:5e:2c:a7:22:47:81:39:
e8:0a:18:40:e0:22:91:84:ed:2a:64:6f:78:09:ca:
ff:e5:95:9f:eb:47:9d:52:22:78:14:d0:b9:13:23:
b4:93:d4:be:ec:91:77:ac:bb:29:33:ac:75:35:67:
bd:c9:15:f8:d5:e7:92:71:f8:20:c4:af:cc:2f:43:
ba:4a:21:ca:b0:d4:48:cb:f6:5a:64:16:1e:fb:8a:
7e:ef:58:6f:5f:4f:64:5e:c1:91:a9:8a:13:aa:a5:
91:b4:42:f8:fa:db:8f:ab:12:87:0a:45:f2:6b:33:
f9:41:f8:73:4b:d5:c5:46:2c:9e:42:ce:e9:36:ed:
ed:b2:2b:f5:be:df:19:1c:45:c6:2b:28:bf:35:82:
bf:b3:85:a0:30:c7:6c:0c:89:13:81:23:9a:ef:b0:
1e:b7:fc:4d:44:97:10:6e:d8:b6:73:55:cd:c4:0d:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:F4:20:23:73:72:C7:BD:58:6F:69:7F:A6:57:DB:40:61:27:01
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ccb0ICNzcse9WG9pf6ZX20BhJwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.177.0/24
Signature Algorithm: sha256WithRSAEncryption
de:61:78:9d:73:eb:3c:d8:8a:2e:b7:63:37:f9:ee:d7:f3:4a:
f4:a8:68:86:96:7e:64:ed:e2:7d:64:19:93:8d:64:05:bb:15:
42:4e:cd:2d:62:5b:5c:16:10:93:23:67:e0:66:9a:43:02:e9:
a8:99:51:9d:73:58:30:09:a4:65:c8:50:5c:cd:19:64:77:80:
b3:ac:2a:95:d7:ae:f7:7a:72:50:65:20:41:9a:f8:10:64:48:
03:81:f9:b0:57:82:ef:c8:f8:6a:f5:b1:75:29:4a:79:52:5a:
86:76:7f:4f:a5:e0:b3:2c:1e:ee:1e:63:7b:6e:51:3a:d7:14:
c2:d2:8d:cd:ac:a5:a2:de:5e:2a:d8:7e:6b:71:81:13:fb:1d:
d2:39:87:28:df:9d:99:a1:85:cb:d4:5a:e2:44:ea:01:b6:0d:
05:36:e8:4b:fa:2d:09:54:e2:49:a5:e6:c1:89:b8:cb:76:eb:
ad:e8:b7:ce:d3:66:40:18:38:3f:3b:62:61:d8:83:e5:c8:c3:
ab:b4:b3:3e:6a:15:5c:69:fa:57:3c:fc:62:25:0b:56:a2:2f:
b6:6e:23:b7:38:b1:1e:4e:da:4e:8a:b4:90:e7:95:d6:39:33:
bf:e1:2d:dc:6c:35:48:77:29:cb:c6:70:43:f5:4f:8b:68:7f:
72:23:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:21:01 2026 by rpki-client