Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EVVSd4RTuFqvezmi6d35GRYvcHw.roa
File: EVVSd4RTuFqvezmi6d35GRYvcHw.roa (raw, json)
Hash identifier: h2N8D1TEMUYElNwxJAQQnKDJNAku2hZJNOU+AFbajXY=
Subject key identifier: 11:55:52:77:84:53:B8:5A:AF:7B:39:A2:E9:DD:F9:19:16:2F:70:7C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A01AE286B3C0A18FDBE3A0B2BF926D14E8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EVVSd4RTuFqvezmi6d35GRYvcHw.roa
Signing time: Wed 19 Aug 2026 16:37:28 +0000
ROA not before: Wed 19 Aug 2026 16:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 94.229.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:e2:86:b3:c0:a1:8f:db:e3:a0:b2:bf:92:6d:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 19 16:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=115552778453b85aaf7b39a2e9ddf919162f707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:bb:cb:85:36:b5:2f:1a:ae:f5:89:01:37:
6e:73:c6:dc:2e:77:20:e1:43:fc:98:0f:60:c5:7e:
75:16:a3:b3:6d:ac:3b:e7:c6:b0:c9:51:c4:67:e1:
ed:26:f1:8e:87:e2:82:52:2e:78:20:e9:b1:af:f9:
0a:e0:12:0e:87:b2:91:a9:3f:89:b1:18:8b:da:27:
fc:5b:dc:ae:7d:0c:fd:9c:97:87:48:56:32:0d:d0:
4c:86:9e:90:f0:6f:f2:a0:30:a5:33:97:77:9b:c9:
b2:ea:95:6f:65:91:52:f2:bd:f4:a3:26:38:6b:ef:
14:45:5c:0c:f4:a7:a9:26:30:85:fa:11:3a:8e:f0:
7e:56:67:77:97:9a:5e:e4:ec:b1:a5:ef:0b:2e:85:
b6:1b:07:d0:b1:be:3b:af:97:de:ff:88:0d:0d:35:
ab:93:5d:22:c2:e4:73:45:a6:bc:29:21:7b:88:5a:
15:fa:6d:f9:e6:d5:d3:ce:7b:52:69:ab:f4:e7:d0:
91:cd:f5:69:c5:75:cb:05:b9:e3:54:03:96:39:37:
7e:c3:f1:bb:4d:6d:3c:a5:ac:2a:30:f2:80:45:45:
68:e6:e0:0d:f1:20:fe:0f:ea:fe:50:14:e1:ee:7d:
12:dd:db:11:5d:41:95:02:54:70:0e:e0:c1:57:73:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:52:77:84:53:B8:5A:AF:7B:39:A2:E9:DD:F9:19:16:2F:70:7C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EVVSd4RTuFqvezmi6d35GRYvcHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:21:13:fa:b5:70:dc:e5:b8:a3:60:6d:78:9e:8d:79:e8:8c:
01:a8:ec:13:3e:14:5d:61:67:b2:dc:ca:92:5b:f3:a6:83:79:
c5:f4:8e:cc:9f:2c:a8:cb:62:14:bc:5c:00:24:89:3b:a4:0b:
6e:f3:58:fb:2a:2c:f8:71:06:f4:1f:b9:ee:11:1b:ba:71:c9:
e7:48:da:55:ce:6b:24:7f:38:76:22:95:2a:0d:0d:a4:40:7e:
f8:67:e1:ab:60:70:e8:44:90:60:3d:59:b2:6a:86:16:3f:61:
f7:4f:84:76:2d:d4:c4:e0:42:d9:5c:e3:df:8c:fe:74:11:2f:
3b:ef:0d:e4:ed:fb:5b:5e:8d:17:a8:27:80:ae:02:2e:fe:a4:
a9:02:b5:f1:47:ba:f9:b5:52:11:09:ce:44:58:33:0c:64:8d:
53:25:5c:b1:9f:a9:ee:f4:f7:8e:7b:96:b9:43:47:7d:02:aa:
e3:2a:04:3d:1d:e3:f9:bb:bc:d8:5c:ea:e3:6c:49:4e:de:ae:
25:8b:36:82:ac:40:6b:c4:68:f8:12:58:25:4e:51:45:8f:43:
17:49:32:84:60:4f:e5:70:da:a8:02:18:93:c9:59:9e:32:93:
22:cc:3f:f4:40:ef:fb:02:b2:84:11:8f:50:55:e7:21:05:75:
8b:d9:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:31:33 2026 by rpki-client