Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PEeKktUtHeOYm2oUJ-dZluAF3-g.roa
File: PEeKktUtHeOYm2oUJ-dZluAF3-g.roa (raw, json)
Hash identifier: k6Q4nAVs2x6Z2CZ0mi6ZsuAsS8tVjCULbBzewoTrMaQ=
Subject key identifier: 3C:47:8A:92:D5:2D:1D:E3:98:9B:6A:14:27:E7:59:96:E0:05:DF:E8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019E272FAF8E00F5F92E2B795E741F40172C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PEeKktUtHeOYm2oUJ-dZluAF3-g.roa
Signing time: Thu 14 May 2026 15:51:36 +0000
ROA not before: Thu 14 May 2026 15:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.100.0/24 maxlen: 24
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.41.46.0/23 maxlen: 24
103.41.47.0/24 maxlen: 24
103.102.132.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.112.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:2f:af:8e:00:f5:f9:2e:2b:79:5e:74:1f:40:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 14 15:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c478a92d52d1de3989b6a1427e75996e005dfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:cc:e5:35:ee:bd:3e:a2:43:30:e1:f7:bb:
e6:f2:4e:16:71:09:eb:b0:56:42:5f:d0:c9:09:13:
12:85:a3:04:c9:0d:c0:0c:b1:10:b9:da:2e:36:7f:
57:53:15:4e:b2:fa:25:a9:78:37:5c:49:f6:64:20:
74:62:07:4d:c9:c4:6a:f2:48:f4:f0:ed:3e:c8:50:
79:a5:86:67:02:3e:0c:a3:6a:b3:6f:b3:cb:d0:43:
a0:67:c0:e8:4c:4f:05:4a:e7:37:98:a4:13:02:10:
70:6b:ff:f2:6e:cf:7c:bf:e6:aa:6f:79:8c:32:79:
b1:dc:56:65:f4:5c:7a:3e:28:6f:ec:7a:62:b5:8b:
69:ec:b6:4b:0a:68:b1:8c:be:20:35:40:73:a7:a6:
33:77:f4:85:b4:f1:db:99:b4:79:5b:32:19:8c:3b:
b1:2f:13:0c:90:aa:ed:ad:62:f0:be:c7:b8:c0:9f:
8b:73:e8:d6:5d:ef:47:6b:c1:1f:55:44:a6:c0:6a:
a5:64:3b:9b:3a:7b:bf:b2:ee:b6:5d:fa:16:20:0f:
a1:2a:ec:87:4a:ba:31:eb:13:33:ca:fd:9c:93:7f:
4d:a9:0c:a6:1b:5f:7f:10:d2:4b:b0:a4:0f:f4:a1:
a7:4d:4f:b3:15:e6:79:7b:d3:67:51:ad:b4:4c:d4:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:8A:92:D5:2D:1D:E3:98:9B:6A:14:27:E7:59:96:E0:05:DF:E8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PEeKktUtHeOYm2oUJ-dZluAF3-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
77.111.96.0-77.111.100.255
77.111.102.0/23
77.111.105.0/24
89.106.2.0/24
94.229.209.0/24
94.229.213.0/24
103.41.44.0/22
103.102.132.0/23
124.158.112.0/24
194.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2d:22:74:64:ef:a6:61:dd:c5:98:34:46:e5:d9:4c:8f:9b:
b1:12:f6:eb:1d:e5:5e:81:3c:12:df:8a:91:33:30:9f:c2:a2:
d7:17:16:9d:10:e8:e3:81:27:96:c9:8f:3e:70:ad:34:41:88:
a2:a2:99:02:55:66:1a:f7:87:b5:b6:1f:a0:56:2d:ed:fe:f1:
e1:c0:87:b2:6b:7d:ed:65:79:50:f3:3e:b7:f1:8c:6b:63:8f:
df:31:f4:b9:5f:98:f4:d8:de:51:a9:be:0d:0f:05:c6:87:ec:
45:17:1a:0b:f5:92:41:4c:c3:6b:be:49:16:67:ed:8c:7b:1f:
64:6c:72:e9:b5:62:da:3b:62:fa:68:1d:88:aa:ee:f4:ff:42:
4e:f2:5f:b9:97:65:38:c8:40:d4:3c:67:2a:04:2e:34:3a:42:
9c:3c:21:32:6a:0c:e7:53:56:71:a2:18:9f:cf:71:11:65:8d:
ce:f7:53:64:81:ec:c7:24:55:4d:ba:61:99:4f:3f:03:27:40:
38:6a:0d:97:60:c3:2f:52:47:ff:3c:73:ad:3d:68:1b:99:3f:
6a:8f:38:8d:89:ca:3e:5a:5b:a8:14:20:77:c2:52:bc:59:61:
3f:72:fb:cf:95:82:c9:e5:f7:7f:a1:a9:1a:fe:45:be:dc:67:
67:32:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:17:28 2026 by rpki-client