Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PqQTGikEHd-J3oXTdaXgWluB7H4.roa
File: PqQTGikEHd-J3oXTdaXgWluB7H4.roa (raw, json)
Hash identifier: LAHSJBF4xj2cxiKcdS3FtP7h2B9OsuHs00y+4csGKSw=
Subject key identifier: 3E:A4:13:1A:29:04:1D:DF:89:DE:85:D3:75:A5:E0:5A:5B:81:EC:7E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0FD4A280B39E7CBC4CF2DB5142111639E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PqQTGikEHd-J3oXTdaXgWluB7H4.roa
Signing time: Fri 02 Oct 2026 15:44:50 +0000
ROA not before: Fri 02 Oct 2026 15:44:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218824
IP address blocks: 191.44.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:4a:28:0b:39:e7:cb:c4:cf:2d:b5:14:21:11:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 2 15:44:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ea4131a29041ddf89de85d375a5e05a5b81ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:8b:26:a5:1a:ac:60:50:79:64:76:39:6f:
60:48:cb:a8:f2:a1:6b:ba:f9:cf:c2:74:0b:90:7a:
d4:09:04:f5:f1:f3:b9:1b:e7:12:98:b2:31:2a:bf:
49:0f:42:12:9f:ae:a2:3a:e2:e5:d8:d4:4f:d7:d6:
90:a0:ef:85:b4:89:a1:e8:24:66:45:fa:a4:bb:8a:
be:f1:39:9e:b7:fe:66:24:3a:96:de:46:0b:c4:7a:
33:c8:e7:01:cb:e3:49:96:a3:e8:1b:06:94:d0:be:
d9:0d:a8:6a:38:9e:74:11:09:9c:42:ed:46:57:8c:
59:5d:02:b8:db:0e:8f:cd:1b:c1:1d:2b:fa:dc:5b:
3c:26:7b:e6:6e:5d:81:76:32:43:09:2a:c9:f1:32:
4d:82:7a:ac:64:64:e3:4f:2e:19:82:9f:96:1f:cf:
5b:67:e8:2a:e0:5e:4b:c0:54:ce:0a:cb:5f:dc:cd:
9e:5a:d6:f9:1c:bb:eb:8e:bb:30:ec:a2:dd:8f:1f:
09:24:6d:51:d1:f8:6d:38:4b:f4:10:3f:eb:7c:7b:
a1:ae:72:35:b6:be:b2:98:32:7d:d7:eb:db:94:76:
5a:7d:d9:a6:fe:23:c8:07:87:02:8a:7d:49:80:9b:
67:2e:33:4f:18:e1:d0:54:0e:8e:f1:a1:d5:c8:50:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:13:1A:29:04:1D:DF:89:DE:85:D3:75:A5:E0:5A:5B:81:EC:7E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PqQTGikEHd-J3oXTdaXgWluB7H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.21.0/24
Signature Algorithm: sha256WithRSAEncryption
58:de:12:90:bd:73:44:ae:c6:42:0d:ad:02:b2:dd:23:42:cc:
27:82:08:d1:54:37:00:30:84:4b:1a:ff:6e:32:ac:6a:75:ff:
91:8b:23:c0:55:41:83:8b:4a:97:9b:73:6e:17:0f:5c:d2:c7:
dc:a2:a0:ac:41:30:f0:3e:ed:f3:fb:44:88:ca:e4:b4:77:60:
34:e9:ce:a6:69:9c:cd:38:fa:90:a2:7b:14:3d:a2:67:41:51:
ad:27:5d:e7:c6:e4:f4:d0:29:46:7f:76:8c:eb:d4:4a:b5:ba:
e5:fa:43:1d:07:07:83:90:34:41:e1:f7:9b:c4:e5:9a:60:f9:
10:c9:d4:9e:63:59:05:9f:01:85:8e:1c:e0:aa:4c:e4:d8:be:
2b:0d:9f:3e:da:78:e8:08:bb:85:b3:ba:6a:53:76:10:8d:c0:
23:40:84:aa:f5:8d:33:ea:f8:f1:a3:ef:53:53:93:d3:d5:45:
db:2e:5d:51:f2:38:c2:c0:83:5b:cb:37:6d:bb:79:74:ee:66:
ef:b2:6b:63:36:00:04:f7:c3:dd:74:27:9e:68:ff:54:0c:c0:
9b:92:84:99:24:06:11:47:73:ee:0c:54:70:1d:28:ec:12:6f:
b6:7d:24:0b:ce:62:e8:3d:0a:c2:0c:26:fd:03:27:0b:b2:ef:
d4:84:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:26 2026 by rpki-client