Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DtRwMw8TJaSRoWG02j7slpvSceE.roa
File: DtRwMw8TJaSRoWG02j7slpvSceE.roa (raw, json)
Hash identifier: VkB3MJz6MAKZkAWNPrak8pFOvKP2CXyDBeBQNw6G1lI=
Subject key identifier: 0E:D4:70:33:0F:13:25:A4:91:A1:61:B4:DA:3E:EC:96:9B:D2:71:E1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F2F72D2136E12012D82CEE56CC5E510D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DtRwMw8TJaSRoWG02j7slpvSceE.roa
Signing time: Wed 30 Sep 2026 15:38:00 +0000
ROA not before: Wed 30 Sep 2026 15:38:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135530
IP address blocks: 191.219.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:f7:2d:21:36:e1:20:12:d8:2c:ee:56:cc:5e:51:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 30 15:38:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ed470330f1325a491a161b4da3eec969bd271e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:48:53:61:aa:2c:16:00:8c:cf:a7:35:99:
43:ab:7b:9e:b2:07:0f:55:00:6a:be:f2:6b:6c:3e:
af:d5:28:ab:41:e8:f5:5b:d0:bc:05:25:8e:ae:c9:
e8:4e:27:d8:30:d3:f2:9d:26:13:58:07:12:2f:1f:
71:e7:d0:b9:23:16:82:bb:19:cf:4e:06:04:cb:2e:
68:a2:0d:a4:a2:e1:8f:da:c7:06:0d:2e:2e:7f:49:
54:ef:f0:b8:10:39:c2:08:07:d5:43:47:c5:1c:bb:
34:c3:34:af:1a:5f:4a:af:dc:89:0f:51:9a:6d:f0:
4c:55:63:93:d2:5c:5d:cf:51:4c:f7:f8:24:d2:3f:
33:78:0e:f2:49:f1:69:77:2f:14:23:87:89:b5:c9:
a2:33:f1:e4:cd:32:dc:3e:db:87:32:5b:71:bc:5d:
ae:2c:1f:38:20:96:66:2a:85:bd:86:b2:29:4f:cb:
bb:9b:fd:8a:d0:fd:fb:bc:48:39:48:da:82:79:ac:
a3:70:b6:77:8e:23:63:f6:7e:8c:d0:42:6f:64:02:
0b:b9:de:2e:c0:e9:c4:7a:a4:c2:bb:34:06:9e:46:
76:03:c0:62:5a:7a:a9:00:d0:11:1d:86:82:93:18:
78:08:0d:33:46:f9:00:12:58:9a:b3:bf:66:3f:16:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:70:33:0F:13:25:A4:91:A1:61:B4:DA:3E:EC:96:9B:D2:71:E1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DtRwMw8TJaSRoWG02j7slpvSceE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.17.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d6:85:af:0d:2c:79:2d:2e:ca:29:09:f9:7c:e7:c4:ad:fb:
6e:05:9e:ec:dc:58:d0:c8:54:3b:e0:7d:7f:98:3d:aa:7f:ec:
36:49:f6:70:80:c5:18:52:0c:fa:f0:c4:32:a8:73:aa:74:ec:
df:94:a5:83:59:d4:03:fb:7c:c8:0b:b0:a9:3b:1c:e6:e2:a0:
5d:1a:41:5b:ad:b8:d3:d3:40:7f:21:21:d9:2b:bc:7c:91:eb:
9a:10:87:40:3b:6b:07:a8:af:c4:7b:16:34:b2:63:25:70:5b:
4d:89:4d:d8:88:18:82:49:f2:48:bb:d2:04:49:23:fe:aa:f6:
4e:93:72:e1:84:d2:41:92:b6:e8:9c:62:88:cf:4c:99:dc:ab:
2b:b1:0b:ee:0d:bc:ad:cd:93:c6:78:c9:aa:12:e0:d7:39:51:
04:d2:26:21:1d:cb:bd:c8:b4:01:f6:a8:d5:04:a0:ac:5a:56:
ff:2d:95:2f:09:b6:d7:48:33:cf:ba:05:07:b7:20:b9:2b:db:
cf:ab:8d:8a:fd:06:e5:3e:67:2f:f4:cd:ec:ba:54:e5:18:df:
58:48:67:11:41:40:29:e1:79:29:8b:32:5d:da:f6:71:59:88:
58:25:0b:23:c5:48:a9:a0:e4:14:f5:03:d5:50:ff:fb:08:1f:
ae:b9:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:42:05 2026 by rpki-client