Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ENgc4l_Nqwj7ruoDOreiyfpweSM.roa
File: ENgc4l_Nqwj7ruoDOreiyfpweSM.roa (raw, json)
Hash identifier: OYJesilq8ydsgnJbji7RqBhkBR5szUz+NSedE4aZmes=
Subject key identifier: 10:D8:1C:E2:5F:CD:AB:08:FB:AE:EA:03:3A:B7:A2:C9:FA:70:79:23
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ED0F85853C1F2906A9A88320DA5744164
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ENgc4l_Nqwj7ruoDOreiyfpweSM.roa
Signing time: Tue 16 Jun 2026 15:06:36 +0000
ROA not before: Tue 16 Jun 2026 15:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203048
IP address blocks: 201.11.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:f8:58:53:c1:f2:90:6a:9a:88:32:0d:a5:74:41:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 16 15:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10d81ce25fcdab08fbaeea033ab7a2c9fa707923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:c1:36:b9:29:57:af:b9:59:99:43:04:5a:
24:52:08:bc:f0:b4:ec:f8:a1:4f:f7:f5:70:06:68:
6f:8e:7d:b2:d9:1e:69:6e:1d:fa:e4:1e:8c:71:2a:
f4:9f:18:a3:68:48:47:94:b7:e6:d2:31:3a:a7:57:
2c:f6:29:3d:c2:4d:e0:4d:45:ea:b8:b7:c8:66:f8:
7f:4d:0a:16:24:d8:27:8c:b8:16:68:f3:a9:3c:08:
04:11:20:9f:1b:6e:65:88:02:74:dc:eb:58:26:f5:
db:24:6c:4c:26:db:ab:51:ff:91:6b:2d:62:9d:ed:
31:c7:12:f6:0a:10:a8:85:16:2d:79:d5:f3:14:f6:
cd:c8:c8:17:48:e5:6b:85:de:bb:7b:d5:e1:69:f6:
80:40:cf:19:b7:ee:66:13:dd:1f:30:49:73:48:82:
0a:db:63:4b:c0:d9:d4:63:c5:cc:0c:b5:78:e3:79:
78:7c:90:12:7d:dd:8c:5c:36:59:6e:e1:e3:62:50:
52:17:14:42:4a:1e:5c:e7:50:80:fb:2d:08:46:ba:
19:9b:0b:b3:2a:2a:e9:13:03:5f:bf:90:51:91:01:
eb:25:35:3d:2c:dc:b3:5c:0e:01:85:c6:7a:2f:1d:
bc:66:82:c0:a7:d5:7b:b0:5d:00:84:ea:82:b7:db:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:1C:E2:5F:CD:AB:08:FB:AE:EA:03:3A:B7:A2:C9:FA:70:79:23
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ENgc4l_Nqwj7ruoDOreiyfpweSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.11.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:07:dc:6c:a5:dd:9a:2f:a8:43:39:d5:d3:66:56:36:bd:60:
b3:84:fe:e9:87:00:34:3e:08:4f:97:99:dd:a4:85:69:fd:d1:
d5:90:13:68:9d:d8:86:73:c8:fa:de:7d:80:f6:51:02:c8:6f:
c6:f2:30:c9:0a:c0:ab:7b:8f:fa:15:32:2e:bc:e5:61:b7:81:
c9:4d:6d:54:92:48:cf:0e:4a:45:f4:0a:50:2c:35:4b:3b:15:
08:df:68:60:4b:7b:23:03:19:8c:d7:d5:92:6f:ad:86:f7:81:
31:15:6e:5b:ee:10:cb:5d:92:a6:f2:5f:76:57:bd:e4:51:5b:
37:c8:ef:e1:35:6d:84:42:b3:c9:53:3d:80:22:a3:4a:56:e6:
1a:0a:a1:71:2a:fd:46:8e:61:ac:b1:34:68:c1:91:61:47:3d:
27:d0:d1:61:79:75:47:29:9e:97:1c:36:20:ac:ed:ea:0d:51:
a2:d8:1a:8a:be:64:f7:7b:7c:3f:e8:45:cb:72:dc:61:44:89:
ec:67:4e:03:6d:80:33:9b:36:e7:8c:0b:dd:28:ef:5a:fa:3d:
1f:65:39:a4:b4:c2:05:e2:42:d4:74:0e:e4:86:40:45:a7:31:
57:6b:64:94:c1:3e:95:4e:f2:ea:a2:ec:ed:dd:c6:88:84:f4:
09:95:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 20:11:47 2026 by rpki-client