Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ID8U0ZDdy45pvPWi3e28zWTAQnA.roa
File: ID8U0ZDdy45pvPWi3e28zWTAQnA.roa (raw, json)
Hash identifier: dsFIxQcKNeQrsJ6Q+X3X9fS1pHKA3YvVJDEXOxgJvT8=
Subject key identifier: 20:3F:14:D1:90:DD:CB:8E:69:BC:F5:A2:DD:ED:BC:CD:64:C0:42:70
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EFA4DFB034B7EF0D31CACC99EE487E390
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ID8U0ZDdy45pvPWi3e28zWTAQnA.roa
Signing time: Wed 24 Jun 2026 15:44:34 +0000
ROA not before: Wed 24 Jun 2026 15:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 189.12.63.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:4d:fb:03:4b:7e:f0:d3:1c:ac:c9:9e:e4:87:e3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 24 15:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=203f14d190ddcb8e69bcf5a2ddedbccd64c04270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:e4:fa:d6:30:cc:68:2e:22:96:4e:48:09:
18:85:69:7e:a5:a9:63:ff:e9:a4:04:e8:34:58:b0:
24:64:ba:b7:c4:6f:05:b1:78:f1:7f:4a:c1:f9:3e:
a5:72:60:4c:9a:3b:6e:f9:c5:9d:a5:be:d0:b1:ce:
a4:f8:de:0d:3e:ef:f1:64:5a:95:f0:5a:1a:46:6c:
11:5b:79:36:03:f8:0a:82:4a:e4:39:1c:14:22:7f:
64:a1:8b:c9:bd:3e:7e:5f:e9:8c:e4:ab:80:29:1f:
8c:18:4b:fb:e2:e2:b8:14:42:29:58:b9:0c:6d:fd:
d5:bc:4f:4b:f4:18:03:94:1b:04:1b:ae:ba:2f:65:
e0:13:41:8a:9f:d1:b6:28:b4:2b:ad:d9:7e:81:9f:
cc:0f:06:48:6a:f9:dd:9f:d8:1a:ed:d4:e0:d7:2c:
75:d5:dc:88:ca:ca:c8:cd:18:ed:fe:d4:b8:73:ac:
b5:c1:b9:49:2e:45:f5:25:4b:66:40:af:d1:9e:b6:
f0:84:86:47:08:51:d8:47:f5:72:76:e8:a4:bf:2d:
7a:20:61:73:ed:e5:21:0c:81:be:e2:0e:78:74:90:
a7:87:6e:f9:b8:b8:3f:8e:22:47:aa:34:a7:42:eb:
fa:7c:13:f0:dd:99:ba:9b:85:29:ca:2d:2f:3e:72:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:14:D1:90:DD:CB:8E:69:BC:F5:A2:DD:ED:BC:CD:64:C0:42:70
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ID8U0ZDdy45pvPWi3e28zWTAQnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.63.0/24
189.31.221.0/24
189.73.23.0/24
200.181.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:09:cb:b3:30:51:59:e6:8f:7f:65:4d:1c:18:a0:9b:28:6d:
a7:3a:43:00:e1:02:49:c3:80:1a:a5:fd:dc:55:1e:86:f8:a0:
a4:47:6b:32:bd:93:7c:22:81:ff:27:ac:fc:0e:a9:03:cb:fd:
ca:3f:96:77:74:28:8b:af:c5:48:b7:55:88:e7:b6:87:6c:c6:
be:42:51:e3:d6:63:3d:d5:0b:7a:cb:7a:bb:7d:31:fc:f8:15:
9b:b7:75:64:aa:f0:60:ec:b9:df:75:72:69:91:a9:f1:1c:2b:
1a:90:64:b1:87:c2:2f:84:42:a3:07:c2:f7:fb:84:82:94:2d:
1b:9d:da:31:84:f7:84:3f:2a:45:9a:cb:3e:3d:03:3e:68:86:
74:40:80:e8:25:33:f2:f1:8e:ac:cb:c2:e4:08:04:1b:cf:26:
f2:45:ec:65:27:b0:91:80:5d:fd:c1:10:47:17:41:00:08:b4:
72:ec:5d:d2:74:ed:21:9a:2a:8c:31:92:75:d1:0b:d1:63:95:
93:53:09:9f:63:91:cc:c0:4d:6c:b3:5e:b2:ee:17:4f:a7:33:
6b:66:2c:9f:96:e9:f7:68:73:c0:cf:e8:27:e9:38:9e:d1:2b:
37:e1:74:e2:e0:23:b8:85:75:59:ec:3a:5f:0e:e4:1b:29:5e:
db:92:0a:83
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ76TfsDS37w0xysyZ7kh+OQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjI0MTU0NDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDNmMTRkMTkwZGRjYjhlNjliY2Y1YTJkZGVkYmNjZDY0YzA0MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQzk+tYwzGguIpZOSAkYhWl+palj
/+mkBOg0WLAkZLq3xG8FsXjxf0rB+T6lcmBMmjtu+cWdpb7Qsc6k+N4NPu/xZFqV
8FoaRmwRW3k2A/gKgkrkORwUIn9koYvJvT5+X+mM5KuAKR+MGEv74uK4FEIpWLkM
bf3VvE9L9BgDlBsEG666L2XgE0GKn9G2KLQrrdl+gZ/MDwZIavndn9ga7dTg1yx1
1dyIysrIzRjt/tS4c6y1wblJLkX1JUtmQK/RnrbwhIZHCFHYR/Vyduikvy16IGFz
7eUhDIG+4g54dJCnh275uLg/jiJHqjSnQuv6fBPw3Zm6m4Upyi0vPnJIfQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCA/FNGQ3cuOabz1ot3tvM1kwEJwMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvSUQ4VTBaRGR5NDVwdlBXaTNlMjh6V1RBUW5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAvQw/AwQA
vR/dAwQAvUkXAwQAyLVfMA0GCSqGSIb3DQEBCwUAA4IBAQCiCcuzMFFZ5o9/ZU0c
GKCbKG2nOkMA4QJJw4Aapf3cVR6G+KCkR2syvZN8IoH/J6z8DqkDy/3KP5Z3dCiL
r8VIt1WI57aHbMa+QlHj1mM91Qt6y3q7fTH8+BWbt3VkqvBg7LnfdXJpkanxHCsa
kGSxh8IvhEKjB8L3+4SClC0bndoxhPeEPypFmss+PQM+aIZ0QIDoJTPy8Y6sy8Lk
CAQbzybyRexlJ7CRgF39wRBHF0EACLRy7F3SdO0hmiqMMZJ10QvRY5WTUwmfY5HM
wE1ss16y7hdPpzNrZiyflun3aHPAz+gn6Tie0Ss34XTi4CO4hXVZ7DpfDuQbKV7b
kgqD
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:24:40 2026 by rpki-client