Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N5Mf2Dzx5FEPMF5fxS0eZE5rvfs.roa
File: N5Mf2Dzx5FEPMF5fxS0eZE5rvfs.roa (raw, json)
Hash identifier: SMg9qgkuKaNjQFJNvoCyq8aAlj7gMlNBVf1lsbqqyQA=
Subject key identifier: 37:93:1F:D8:3C:F1:E4:51:0F:30:5E:5F:C5:2D:1E:64:4E:6B:BD:FB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F47627C8B660E6EA8DF97A7DCB288B739
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N5Mf2Dzx5FEPMF5fxS0eZE5rvfs.roa
Signing time: Thu 09 Jul 2026 14:57:44 +0000
ROA not before: Thu 09 Jul 2026 14:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 191.217.164.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.45.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.181.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:62:7c:8b:66:0e:6e:a8:df:97:a7:dc:b2:88:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 9 14:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37931fd83cf1e4510f305e5fc52d1e644e6bbdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:46:56:28:6d:c7:c3:f9:68:6b:86:eb:14:
73:9b:6d:e9:3a:7e:fa:64:92:0c:05:3c:ab:79:2c:
9b:ab:fc:83:91:79:aa:21:06:b3:03:58:9a:69:48:
f5:fd:bf:71:2c:57:7a:7c:d2:19:46:33:f6:58:86:
85:d0:6b:8a:c7:44:28:07:fc:cb:b6:f9:43:51:61:
67:0f:0c:2c:6f:57:82:4f:ec:cd:a5:39:62:28:b6:
a4:b5:14:08:d9:9a:cd:80:5a:cc:82:ce:ea:8d:48:
63:fd:51:a5:1c:5f:de:83:2b:28:ba:93:d5:4c:3b:
5f:34:40:14:14:da:74:a4:e9:41:58:fa:12:d0:d4:
dc:57:1e:fe:77:e1:de:1d:32:7f:0f:25:01:90:a8:
39:f9:c7:77:b4:50:fd:54:57:c6:89:86:78:05:f6:
6f:a7:d8:02:15:47:d1:38:ef:57:06:1e:1c:ab:2d:
89:7c:4d:e0:29:a7:cc:68:af:7b:a9:2c:8e:10:c0:
ac:49:78:da:d2:ef:22:a1:12:4f:00:11:77:66:de:
26:86:9b:5e:71:42:56:53:98:ab:e8:f9:70:e9:95:
d9:e4:b6:61:55:04:f7:d1:c8:ab:b3:59:a3:6f:f3:
c0:33:2e:28:98:fb:bd:2c:37:fc:61:24:6a:fe:05:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:1F:D8:3C:F1:E4:51:0F:30:5E:5F:C5:2D:1E:64:4E:6B:BD:FB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N5Mf2Dzx5FEPMF5fxS0eZE5rvfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.164.0/24
191.222.39.0/24
191.222.45.0/24
200.102.188.0/24
200.102.191.0/24
200.181.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2c:08:06:b7:36:7d:72:5e:cf:ca:9b:b2:1f:a5:0c:cf:62:
c7:df:13:d2:77:e4:3b:76:3f:67:da:d9:27:78:46:6d:4f:c7:
d8:e0:eb:48:6e:03:db:ba:44:d2:9e:67:2c:ee:31:5d:2f:40:
9b:35:50:24:75:5d:26:b7:e5:7e:ba:17:48:5a:cd:29:81:a8:
bb:5c:87:4a:ec:c6:45:0d:60:fb:24:9c:3f:72:0e:7f:90:0e:
46:0f:90:af:42:f9:c7:c9:a9:89:73:06:4f:60:55:cf:8d:d9:
9d:dd:c5:3e:27:2e:25:38:33:d0:4e:09:19:cb:76:45:48:a8:
90:50:59:7c:46:5d:b9:42:d4:73:bb:56:a1:06:b2:df:e0:2c:
07:f9:a8:bf:0e:db:e6:e4:64:93:f8:dd:8e:d1:3f:e8:b3:e8:
b0:60:2f:3f:ea:ff:27:c1:f6:4f:f0:a1:6a:cc:1b:a6:76:64:
1d:99:f1:37:94:84:c3:ab:9e:5d:27:ce:bd:3f:5c:b2:a3:0a:
2e:e1:d9:48:92:b8:34:d6:db:3d:8c:0f:14:09:cc:b5:de:64:
bd:8d:b1:dd:dd:07:29:36:f7:ff:8b:cb:6f:84:8e:c8:9d:e5:
62:a4:93:48:6b:80:88:9a:58:fc:a8:6d:82:81:57:48:2c:81:
49:0e:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:05 2026 by rpki-client