Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NM8aTqlagMdswOVEtP_GKcpq_KU.roa
File: NM8aTqlagMdswOVEtP_GKcpq_KU.roa (raw, json)
Hash identifier: jjHJLr1HKCXslPJSsP2IDyTDqyi32kBjA6WooDQZrCs=
Subject key identifier: 34:CF:1A:4E:A9:5A:80:C7:6C:C0:E5:44:B4:FF:C6:29:CA:6A:FC:A5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F70B89F55C090D4FD2522BCFDEA517D0E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NM8aTqlagMdswOVEtP_GKcpq_KU.roa
Signing time: Fri 17 Jul 2026 15:36:15 +0000
ROA not before: Fri 17 Jul 2026 15:36:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 189.12.49.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.219.25.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.235.0/24 maxlen: 24
201.14.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:b8:9f:55:c0:90:d4:fd:25:22:bc:fd:ea:51:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 17 15:36:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34cf1a4ea95a80c76cc0e544b4ffc629ca6afca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:c7:1b:82:28:dd:89:e5:96:1d:05:50:48:
e7:28:49:c0:ca:7f:a1:c7:f0:1d:92:fb:44:1e:40:
2e:4f:bd:ba:b2:f8:00:f2:c9:fb:e0:ce:ab:69:55:
be:44:ee:bc:d6:cc:23:76:95:4d:4b:a5:39:74:8a:
2b:52:48:2e:e0:ee:8d:e8:78:59:39:47:ff:5a:0a:
98:de:46:37:d3:5d:7c:0c:41:21:89:e8:a1:76:99:
99:c5:47:be:c0:d7:ba:65:a7:4c:c0:6a:fc:a3:d1:
21:96:ff:33:18:14:70:04:66:52:9f:73:73:df:cb:
3c:86:50:4c:16:39:a3:76:4b:7d:8b:8d:9d:44:d0:
e6:db:43:89:5c:bb:21:69:ae:ef:cf:e8:0e:fd:25:
c9:f1:6a:c1:16:ca:b5:65:36:0e:31:01:2a:d9:a7:
0a:f6:0a:d8:bb:be:9c:f5:78:53:1d:26:4f:1d:e8:
f6:bc:ae:39:b4:b8:a7:95:08:bd:1d:e1:67:8b:fe:
ac:b6:55:c3:a7:70:d0:20:b2:3a:06:bb:cf:c0:64:
58:2e:d1:51:00:a9:68:29:a6:4b:dd:5b:f3:ce:b8:
49:9e:86:1a:e7:c4:42:11:bc:9d:87:a0:4e:80:bc:
8d:db:11:72:68:30:53:f2:ff:07:a5:82:67:df:80:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:1A:4E:A9:5A:80:C7:6C:C0:E5:44:B4:FF:C6:29:CA:6A:FC:A5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NM8aTqlagMdswOVEtP_GKcpq_KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.49.0/24
189.12.63.0/24
189.31.221.0/24
189.73.17.0/24
189.75.180.0/24
191.217.165.0/24
191.217.170.0/24
191.219.25.0/24
191.222.42.0/24
200.102.179.0/24
200.102.181.0/24
200.181.95.0/24
201.11.229.0/24
201.11.235.0/24
201.14.211.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a8:fb:1a:38:34:46:ec:f1:d2:83:f7:5e:55:62:c8:af:26:
73:54:21:36:2d:39:d6:40:42:7a:6c:e9:1e:f9:5d:38:27:04:
13:eb:59:e1:5a:3c:88:50:7d:a9:47:8e:47:f6:f2:cb:5c:8d:
ca:73:61:c1:a1:5b:e1:e9:80:e3:af:b6:bc:92:17:c6:78:95:
4d:7a:84:b3:10:e0:e9:75:ac:57:4c:3e:65:32:41:37:64:41:
5a:a5:18:a8:c6:49:81:fa:93:73:0f:64:6a:c9:83:38:f3:3c:
0f:ec:7c:b6:d3:61:32:a0:b3:ea:35:ff:fd:8e:60:8a:98:0a:
a0:d6:58:27:c6:9c:09:07:93:ee:8d:fd:55:30:06:4d:44:25:
a0:72:75:38:20:2c:10:ad:e5:99:a0:0f:62:f1:38:4b:4a:cc:
0f:1d:e2:f3:d8:7c:a6:2b:ce:08:9f:9e:98:88:1c:ef:92:78:
6a:95:9e:43:19:b2:e9:3e:92:97:22:62:4c:7f:86:7e:f4:1d:
fb:ec:37:46:7f:a9:d8:27:b5:21:a2:29:ff:e8:07:97:ca:e5:
b8:6f:26:a5:b0:70:34:74:4b:4f:7f:2f:6b:eb:b8:c1:84:97:
64:d3:ea:b4:6c:66:8f:26:c2:dd:41:2d:ab:7a:96:8d:7f:00:
8d:21:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:24 2026 by rpki-client