Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MuDN0UFFzNQT61NqnKPYs7W-rrI.roa
File: MuDN0UFFzNQT61NqnKPYs7W-rrI.roa (raw, json)
Hash identifier: ad7FHi05pWKG0ikYatSQZCwakZqIrC56iWa9swrffYI=
Subject key identifier: 32:E0:CD:D1:41:45:CC:D4:13:EB:53:6A:9C:A3:D8:B3:B5:BE:AE:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1945B7D57F3197437B42676ED4D723BEE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MuDN0UFFzNQT61NqnKPYs7W-rrI.roa
Signing time: Sat 31 Oct 2026 23:46:26 +0000
ROA not before: Sat 31 Oct 2026 23:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213711
IP address blocks: 191.219.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:5b:7d:57:f3:19:74:37:b4:26:76:ed:4d:72:3b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 31 23:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32e0cdd14145ccd413eb536a9ca3d8b3b5beaeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:ed:4e:cf:c7:a3:ec:a4:34:1f:d0:1b:cc:
4a:d4:49:62:07:5e:64:78:d3:8f:40:1f:88:3b:84:
59:6e:48:fb:19:24:49:7b:20:7c:df:d7:2e:b0:61:
ae:00:be:96:94:48:51:ae:5e:ed:8c:11:8c:d8:c5:
72:25:c5:d1:06:6c:00:c7:7d:37:31:0e:29:df:5f:
af:0a:3b:6e:e3:b0:c7:14:53:e2:48:d2:fc:70:84:
ec:a0:f5:fe:fd:71:fc:e1:2c:5d:3c:80:d9:93:f2:
fe:09:64:99:3a:96:3c:d9:14:1d:f9:26:e0:f0:65:
14:cf:25:93:8a:b5:27:b7:a1:64:dc:18:7f:ba:c1:
42:5c:e2:18:e4:dc:24:1c:5c:97:13:f2:b2:9d:b0:
d9:48:96:2b:9a:ef:29:6f:9c:9f:00:f3:7f:d3:8f:
cd:01:0c:54:4b:f7:12:c2:70:5e:63:7e:58:4e:2a:
a8:23:57:ef:14:11:6d:de:bd:04:5c:77:96:43:d7:
e5:d9:be:09:8d:6b:38:00:81:ad:42:46:6f:0b:51:
d7:72:a1:b2:9b:6f:d0:d3:ca:b7:c2:06:a2:59:4b:
fb:3a:58:88:d6:53:10:6a:07:13:fd:81:a1:6f:fb:
8a:6a:5a:6a:9c:f2:b4:a7:3b:ae:8e:07:06:ac:98:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:CD:D1:41:45:CC:D4:13:EB:53:6A:9C:A3:D8:B3:B5:BE:AE:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MuDN0UFFzNQT61NqnKPYs7W-rrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.26.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fd:1b:cf:05:b3:25:8b:41:96:79:a6:6f:8d:d3:db:1c:86:
dc:80:e7:6d:15:e1:8e:d7:0c:d7:4d:5f:11:fb:a1:66:3d:e9:
28:17:dd:b1:1d:d3:e7:22:e9:5f:b2:f5:f3:d4:34:9e:5b:56:
84:3f:b7:1c:ad:d7:8c:07:eb:2c:f2:32:72:1c:7f:e6:1b:5f:
29:e1:09:22:0e:9b:77:4c:82:d8:24:93:87:3c:79:d5:4c:6b:
f8:79:6d:1f:0d:0e:48:4b:e9:eb:59:d3:58:6c:ef:74:59:64:
92:f2:bd:f0:54:11:4c:d9:25:33:d0:72:0e:40:d5:da:49:26:
c6:ce:49:01:61:e6:97:15:db:53:e6:d5:52:5a:e2:0a:c1:24:
8a:9d:79:07:21:fa:6a:cf:84:76:bc:d8:92:e7:30:9e:fa:74:
a2:9e:b5:2c:55:7a:2d:c3:f0:6b:22:11:a9:76:8c:94:d1:ea:
a6:db:14:cc:d4:b7:7f:0c:75:b7:72:df:ac:8c:19:4e:69:3b:
1f:a7:38:31:09:0e:73:e4:65:23:96:ab:2a:e3:25:b8:ad:9e:
c0:b8:77:3b:ff:d1:91:31:42:c9:1c:b1:c7:c8:77:91:b2:d2:
6f:68:1f:d0:9f:98:1a:d6:98:af:49:ae:72:2e:fc:40:11:f2:
6b:0d:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:01 2026 by rpki-client