Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/D1ptONb-1EVAz4k0S59-3AzxJX0.roa
File: D1ptONb-1EVAz4k0S59-3AzxJX0.roa (raw, json)
Hash identifier: pTS/ZIXMv00iyDFHEFkaqM42LwHEK13/0sORQH3kzi4=
Subject key identifier: 0F:5A:6D:38:D6:FE:D4:45:40:CF:89:34:4B:9F:7E:DC:0C:F1:25:7D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FC88570DE1D0227ACF47E32CD1D074C67
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/D1ptONb-1EVAz4k0S59-3AzxJX0.roa
Signing time: Mon 03 Aug 2026 16:46:56 +0000
ROA not before: Mon 03 Aug 2026 16:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151734
IP address blocks: 89.106.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:85:70:de:1d:02:27:ac:f4:7e:32:cd:1d:07:4c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 3 16:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f5a6d38d6fed44540cf89344b9f7edc0cf1257d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:44:4e:de:15:84:4e:5f:40:b0:e7:35:cc:
2a:82:e4:f0:83:bf:a1:41:aa:ce:d8:e9:e4:64:32:
91:20:ea:7e:aa:ec:7d:a6:fd:37:34:22:51:29:51:
11:78:37:16:5f:94:28:16:0b:54:69:8c:f0:30:16:
b8:8e:8d:1a:62:67:ce:6b:ae:47:1f:a7:09:2b:87:
65:d0:87:87:39:ac:32:5e:d2:d5:e5:0f:1c:a6:e6:
bc:3e:0c:53:f8:f0:e5:12:f9:39:1e:c8:27:11:d8:
79:a7:d0:d0:88:ea:19:34:9d:8f:cd:8b:7d:39:23:
b7:39:e6:3e:c9:7e:1a:ac:5c:ed:f7:6c:fa:2a:12:
45:72:f6:b2:44:61:69:b3:2f:e3:7d:e3:19:00:6b:
63:c2:54:8b:65:e7:30:85:b3:d5:75:04:dc:a4:0b:
ae:e0:e1:ba:87:fd:97:1c:ff:cf:60:11:2a:a2:3f:
4c:b8:cc:32:4d:4c:da:3e:11:08:99:1f:88:06:88:
69:4e:72:a7:56:60:d1:01:88:83:3f:31:44:79:f2:
e3:db:48:37:be:f8:50:6d:80:ee:bc:2e:b3:09:76:
a5:c7:2a:03:c7:25:b4:4d:02:d7:17:23:a2:70:82:
be:a5:c8:35:32:95:55:41:3f:84:67:e8:a5:fe:09:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:6D:38:D6:FE:D4:45:40:CF:89:34:4B:9F:7E:DC:0C:F1:25:7D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/D1ptONb-1EVAz4k0S59-3AzxJX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.16.0/24
Signature Algorithm: sha256WithRSAEncryption
37:27:39:e5:0c:34:1c:0e:5a:b5:98:98:01:45:2f:58:aa:4e:
09:de:19:76:21:23:d0:31:3a:47:a0:1a:da:8b:31:14:ac:6c:
d8:80:b0:be:f5:7f:e8:3b:96:5d:08:d7:f1:fd:67:5d:bb:34:
cf:c7:97:b7:5d:35:58:61:5b:fa:d8:2b:7e:dc:64:59:94:34:
b9:87:cd:91:91:25:d0:33:cd:3d:0d:29:b5:16:ce:77:7c:db:
ce:e7:c2:30:b7:bc:cf:1f:31:d0:4c:d9:e8:b1:d5:62:69:42:
bb:75:e3:84:5d:0a:6b:c8:6f:76:f4:1a:ea:dd:34:a1:9f:a4:
99:09:84:de:4f:d2:36:3a:32:29:7e:6a:c2:4f:5c:a0:45:a4:
75:de:97:28:4c:fe:c9:9b:4c:0c:1c:a3:19:d2:81:78:4b:8b:
53:41:61:47:40:8f:27:53:7f:ef:a5:20:71:43:79:a9:a2:ae:
95:46:6b:c8:16:5a:d9:8b:40:da:21:44:e3:37:85:4a:b6:7c:
60:1e:12:55:16:e0:6d:1d:30:d2:55:68:bd:c9:da:2a:c0:e9:
9c:66:c0:4d:d1:08:86:d8:7e:47:80:dd:23:8c:66:85:7a:7e:
08:07:54:59:66:36:dd:19:7e:7f:ec:96:a6:5b:4f:74:01:76:
81:dc:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:01:52 2026 by rpki-client