Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/L_BnFcKYtLRSst3cN76A4HpQse4.roa
File: L_BnFcKYtLRSst3cN76A4HpQse4.roa (raw, json)
Hash identifier: KNuxcV9sa5f3214wpYjhyLjTRYwveFotyzJyeXCN2Ig=
Subject key identifier: 2F:F0:67:15:C2:98:B4:B4:52:B2:DD:DC:37:BE:80:E0:7A:50:B1:EE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FAEE6E312EEA306239D93EC51F3C2D5E5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/L_BnFcKYtLRSst3cN76A4HpQse4.roa
Signing time: Wed 29 Jul 2026 17:23:14 +0000
ROA not before: Wed 29 Jul 2026 17:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 201.11.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:e6:e3:12:ee:a3:06:23:9d:93:ec:51:f3:c2:d5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 17:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ff06715c298b4b452b2dddc37be80e07a50b1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:61:19:51:cf:43:a7:b1:e3:a5:5a:62:2c:
91:15:99:84:1f:93:09:21:c0:a8:87:ef:aa:5a:ea:
e8:3a:bc:e7:b9:d5:7d:6e:5b:f2:99:06:af:47:a2:
17:53:15:94:60:c9:ae:03:27:65:3a:44:f9:a5:38:
0e:a9:bb:41:ea:76:b6:2b:5e:1b:d3:67:26:58:a7:
49:db:c5:b6:3b:b0:90:c0:b0:9e:60:34:6a:c7:5e:
5b:df:88:22:ad:4d:8b:c8:eb:56:66:ff:d9:93:c1:
74:44:01:40:2a:84:47:82:cb:1d:46:66:3e:80:ee:
78:59:0e:ae:91:c0:e4:cb:14:64:ea:29:c6:f1:f5:
70:e8:89:a0:e3:e9:47:2b:81:07:64:a4:8f:00:a5:
5e:cd:49:d8:e5:0e:ad:67:a1:1d:44:71:11:e1:d4:
65:ff:b0:64:0e:9f:fc:cc:88:90:06:3a:0d:d5:56:
35:5f:93:84:ae:6b:cc:60:9b:ae:a3:43:c4:29:b2:
98:ae:9b:ad:61:e2:27:24:fa:a8:f2:6a:7b:2b:96:
88:06:f5:33:66:e3:e3:45:53:b0:c0:ed:12:11:da:
7f:da:a2:72:41:4c:2f:5e:8c:75:80:88:4e:07:94:
20:26:98:46:bd:e2:f7:18:54:41:b1:5a:dc:4e:61:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:67:15:C2:98:B4:B4:52:B2:DD:DC:37:BE:80:E0:7A:50:B1:EE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/L_BnFcKYtLRSst3cN76A4HpQse4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.11.239.0/24
Signature Algorithm: sha256WithRSAEncryption
69:32:76:ce:72:c5:50:e0:70:ab:37:06:f8:bc:1b:ce:e1:f4:
1c:54:69:5d:6d:be:e1:6e:e0:42:92:6b:8e:48:0f:06:2e:02:
a4:80:2b:98:b0:dc:4e:3d:7e:db:dc:4f:37:00:8e:6c:fe:4f:
db:c5:d6:ed:bc:76:c4:b4:bc:3e:ee:e5:c5:41:58:17:58:bc:
3b:a1:32:24:e3:e4:5d:7a:ed:ef:4b:82:2c:54:80:84:ac:fc:
4d:23:c5:3c:91:03:a5:bf:5b:e1:e5:ed:28:60:d1:85:ae:1f:
78:e9:04:97:82:52:f6:40:9d:de:34:c1:ad:63:53:ac:9c:b3:
ce:37:9a:f3:3b:a5:7c:19:20:60:60:35:12:2b:fa:4c:e7:d9:
5d:c3:22:51:ac:9e:73:6c:c2:ee:ea:2f:09:41:7b:5a:01:67:
64:22:e0:6b:ab:f6:34:ea:a2:b5:5b:0f:f9:ab:fa:ae:43:ef:
00:62:d5:c4:00:f0:e9:bd:c9:cc:01:57:24:dc:09:db:4b:ca:
a0:42:df:5f:9e:3d:da:e1:ee:ea:7c:c9:8a:d7:67:5d:f3:f7:
1f:32:f8:66:b6:22:a4:ac:07:91:9e:09:fe:cf:bd:1e:14:2d:
9a:d9:a0:72:3e:3c:cd:6e:09:dd:fb:3f:f1:2b:c3:d0:58:b5:
37:42:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:23 2026 by rpki-client