Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OR8V_AjfqUHZnGUs49QfTv4GbR0.roa
File: OR8V_AjfqUHZnGUs49QfTv4GbR0.roa (raw, json)
Hash identifier: GcwjxS+wpFkJyIpmM4RMvKdxfjenw4MmJmFYJlwbP8s=
Subject key identifier: 39:1F:15:FC:08:DF:A9:41:D9:9C:65:2C:E3:D4:1F:4E:FE:06:6D:1D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F282DD137840071E5E07E921A88CDC892
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OR8V_AjfqUHZnGUs49QfTv4GbR0.roa
Signing time: Fri 03 Jul 2026 13:31:59 +0000
ROA not before: Fri 03 Jul 2026 13:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 189.12.50.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
191.222.243.0/24 maxlen: 24
200.102.88.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
201.24.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:2d:d1:37:84:00:71:e5:e0:7e:92:1a:88:cd:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 3 13:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391f15fc08dfa941d99c652ce3d41f4efe066d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:a9:67:f0:c9:e3:2b:7e:a8:9f:01:a3:9a:
d9:1b:de:46:62:a7:3e:c6:80:29:1a:a0:65:e6:91:
33:a1:b6:b4:7f:77:95:e2:bb:69:a3:db:0c:9c:c1:
4d:20:d0:68:4b:0e:a9:36:df:31:4f:60:fe:59:6c:
86:3e:2b:e5:83:bc:18:dc:1a:2f:a4:1d:ee:78:6d:
00:6e:d1:cf:10:5c:54:61:eb:00:84:8e:af:db:17:
06:64:82:c9:49:67:26:f7:55:56:88:0f:14:03:29:
31:2a:24:84:79:8d:04:97:41:27:99:7e:d2:32:35:
86:56:4b:5d:d7:4e:82:b6:35:56:45:89:b0:56:a6:
e8:60:7d:35:74:ab:f4:88:60:c4:a2:ea:3b:44:c9:
25:23:39:b9:35:66:71:50:53:c7:d9:29:45:b1:95:
5b:91:e5:08:41:8e:f8:1b:46:18:2f:59:1e:83:88:
7a:b9:f0:7f:64:86:df:ed:98:59:3b:61:c8:37:96:
4f:f0:18:f0:5a:fe:ea:37:12:92:1b:83:cb:44:1b:
29:7f:90:64:89:cc:d6:c2:80:35:77:da:1b:65:17:
e8:7a:3f:e3:e5:8c:7c:c1:5b:32:f8:0a:c8:2f:a8:
40:7f:21:34:dc:0b:54:a1:5c:56:ef:5d:8c:5b:e8:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:15:FC:08:DF:A9:41:D9:9C:65:2C:E3:D4:1F:4E:FE:06:6D:1D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OR8V_AjfqUHZnGUs49QfTv4GbR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.50.0/24
189.12.53.0/24
189.12.58.0/24
191.44.24.0/24
191.44.27.0/24
191.44.30.0/24
191.222.44.0/24
191.222.243.0/24
200.102.88.0/24
200.102.90.0/24
200.181.85.0/24
201.14.208.0/24
201.14.213.0/24
201.14.221.0/24
201.24.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:08:d5:aa:2f:03:2f:ec:f7:c5:ee:ed:b1:dd:de:a0:da:84:
e3:e4:aa:80:6f:f7:ec:f8:87:ec:4f:cc:d0:f0:53:4a:64:ca:
30:5b:46:e6:b2:bb:f7:6c:9d:28:ef:5c:41:54:b7:b8:95:6c:
a6:2c:51:03:31:11:31:32:88:1f:db:40:50:84:6a:5e:59:36:
a9:53:2c:c2:cc:8b:4f:9e:b1:14:ac:71:31:01:15:b3:87:c8:
db:ea:5f:00:f9:57:ac:a6:5e:bf:f1:f7:0d:dc:3e:88:38:e4:
2d:a3:a5:3f:8f:a3:08:4d:96:37:9c:fc:26:7b:fa:fd:a9:ef:
bf:80:29:6a:3d:e2:e3:b7:ec:f7:97:4d:a3:f2:13:62:bc:e8:
8b:5c:b8:65:d6:8f:31:4e:41:c7:14:a0:ae:7b:34:8d:00:3c:
df:b8:81:89:d4:b4:0d:5e:b5:2f:0c:c1:70:4b:2f:18:09:7e:
be:17:56:60:ea:4c:e7:88:5b:a7:74:d8:1c:e0:e9:b5:9a:be:
75:b4:5d:46:1b:e6:82:4d:1a:65:f8:cf:cd:36:c0:15:a7:a0:
2f:e4:6b:fa:9f:ff:f0:cb:6d:cb:8d:14:78:ee:46:07:fb:9a:
a1:2f:fc:a1:fc:e6:da:15:76:35:f5:63:5c:58:1c:90:79:33:
48:ed:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:56:25 2026 by rpki-client