Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NBeKRqx3RKN-wxa1uzuUEOhpOqM.roa
File: NBeKRqx3RKN-wxa1uzuUEOhpOqM.roa (raw, json)
Hash identifier: JHSzvZc+mB7bMo9yfWpCBNsDnqr6zHrlB/qNllAmy+A=
Subject key identifier: 34:17:8A:46:AC:77:44:A3:7E:C3:16:B5:BB:3B:94:10:E8:69:3A:A3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FAED83C7BCE27437108C7A604B025CC8B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NBeKRqx3RKN-wxa1uzuUEOhpOqM.roa
Signing time: Wed 29 Jul 2026 17:07:14 +0000
ROA not before: Wed 29 Jul 2026 17:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201724
IP address blocks: 191.222.46.0/24 maxlen: 24
201.11.228.0/24 maxlen: 24
201.11.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d8:3c:7b:ce:27:43:71:08:c7:a6:04:b0:25:cc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 17:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34178a46ac7744a37ec316b5bb3b9410e8693aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:64:be:ac:ec:22:22:d6:d0:80:40:83:b4:
3f:70:f6:ca:0d:bc:e7:7c:f0:49:e8:c2:22:7b:91:
ab:e9:52:f7:ed:f3:8f:4f:7d:80:ac:bc:c5:2a:19:
4f:2e:07:f2:29:5f:d0:06:cb:a6:db:92:26:13:bd:
e9:31:2d:f3:f0:70:db:cb:af:37:53:54:01:d5:20:
5f:52:1e:17:62:8d:32:ad:6a:39:6c:d8:7b:7a:c0:
c9:a7:5c:50:23:11:2d:51:21:a7:38:24:d1:c5:dd:
16:4b:ac:2f:54:36:c8:8e:99:30:23:82:33:dc:9e:
04:0f:96:dc:e9:05:37:17:dc:f1:3a:4d:6d:3c:b9:
03:7e:2d:7d:f7:c4:1e:ae:55:3b:7f:78:8b:34:ea:
fe:21:5a:9b:ea:98:ef:61:08:a5:5f:94:d9:9c:8e:
23:a2:93:48:a3:a6:9d:0a:8c:0a:0b:4a:7b:c6:5c:
0d:b3:f6:46:92:14:bf:39:2f:c3:89:c7:8f:c9:01:
ad:88:42:a7:07:5c:7d:0d:88:9c:8c:7f:b4:a0:fd:
28:87:0c:19:3b:53:ff:1b:d2:fc:67:41:db:9c:7f:
86:bd:e1:4c:3e:cd:28:4d:3c:de:af:54:ea:82:d1:
e6:10:17:66:99:16:32:76:98:a6:85:5c:98:bb:5f:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:8A:46:AC:77:44:A3:7E:C3:16:B5:BB:3B:94:10:E8:69:3A:A3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NBeKRqx3RKN-wxa1uzuUEOhpOqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.46.0/24
201.11.228.0/24
201.11.237.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6d:b2:e9:89:27:f0:6a:0f:c2:62:ac:1b:87:ca:0e:d4:01:
d2:1e:75:97:cf:ec:c0:9d:7d:37:84:85:9d:27:31:f7:2e:f6:
c6:f3:a7:42:08:b4:b4:b6:d5:ed:74:5d:e6:e0:0e:d6:c1:9d:
06:86:bd:f5:7e:b3:a3:b5:38:7b:78:6e:14:cf:cc:bd:55:2c:
72:f0:59:bb:c0:e7:50:c7:76:04:21:0c:4e:93:48:00:4b:72:
89:c9:85:1d:29:2b:b2:55:62:24:ce:49:1a:04:d9:db:d1:e1:
03:d7:18:87:5f:1d:57:e3:57:7e:b3:43:9e:ba:3d:88:0b:0b:
e1:94:34:2c:1e:57:2c:0e:23:bd:6b:88:8b:a8:73:fb:14:9a:
92:a6:0e:40:91:91:66:46:47:37:e4:99:9e:d3:49:fe:79:07:
98:d6:13:62:83:24:09:ed:76:59:81:12:15:93:66:19:36:da:
9b:b1:0d:d4:39:f2:07:44:7d:9d:73:43:b3:86:e6:94:ba:0c:
73:6a:37:fc:c3:c1:01:de:a1:4c:c1:5d:a0:c0:3a:e9:67:57:
cf:da:1d:13:0b:a1:04:7a:1b:bb:7e:e3:b9:20:62:45:68:cd:
23:84:3b:bb:97:eb:0f:a1:b9:93:b7:ae:df:ed:ef:c7:f1:be:
a6:0c:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:20 2026 by rpki-client