Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q4q6V2aCZ6hGxWzNgn3xPkSNVZk.roa
File: Q4q6V2aCZ6hGxWzNgn3xPkSNVZk.roa (raw, json)
Hash identifier: jG6hi3N1R0Uz9edK2Q2yxI73478zDGNUfPJAMa8djMc=
Subject key identifier: 43:8A:BA:57:66:82:67:A8:46:C5:6C:CD:82:7D:F1:3E:44:8D:55:99
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A178DF5843F3566FEB90D08573FEDD8D3F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q4q6V2aCZ6hGxWzNgn3xPkSNVZk.roa
Signing time: Mon 26 Oct 2026 15:41:05 +0000
ROA not before: Mon 26 Oct 2026 15:41:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218537
IP address blocks: 191.217.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:df:58:43:f3:56:6f:eb:90:d0:85:73:fe:dd:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 15:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=438aba57668267a846c56ccd827df13e448d5599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:fe:18:3f:1b:e6:7d:72:30:67:f2:8f:dc:
48:f9:8d:c5:58:1d:f2:ef:71:f0:e2:14:ff:15:f6:
e6:26:f2:5e:19:1d:6a:d6:73:eb:29:dd:76:23:a9:
1a:28:e3:a1:ec:4b:40:61:d8:bf:17:79:27:2a:79:
97:0c:31:f5:c3:c3:6c:81:22:84:b0:a1:46:ae:4b:
82:8e:c3:77:5d:88:0a:b4:9d:ed:0d:20:02:f1:ec:
69:37:b7:06:1d:6f:79:db:3e:0b:12:bb:9e:3d:30:
bb:7d:89:d9:00:6c:f8:60:4d:17:99:e4:a7:76:c0:
1d:a7:75:65:fc:a6:e2:f5:05:2c:83:41:23:10:b8:
f5:a2:a0:7d:35:04:1f:f3:d8:e1:56:d4:b7:6d:a6:
18:c9:af:65:7f:a2:0e:51:ba:f5:af:3f:eb:a8:b0:
93:93:1d:20:d4:09:ea:fa:50:92:f8:e4:89:81:ae:
a8:f5:16:14:f2:d9:24:ee:df:e7:55:67:96:e4:b2:
86:8f:5b:91:87:13:74:e5:c6:e9:85:6a:93:ee:cd:
ec:be:04:19:97:46:60:92:de:8c:95:ea:9c:d6:bb:
94:9d:76:22:00:8d:14:b2:c1:ef:60:f8:49:48:53:
ba:62:9c:a3:5d:a2:6a:fb:a0:f3:bc:c7:78:50:fa:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8A:BA:57:66:82:67:A8:46:C5:6C:CD:82:7D:F1:3E:44:8D:55:99
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q4q6V2aCZ6hGxWzNgn3xPkSNVZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:90:93:b6:8d:06:45:02:37:39:cb:8a:d1:f7:c4:b9:4d:49:
e1:dc:29:52:c9:3c:df:ed:1c:41:ca:fa:c1:89:43:2a:14:6d:
f8:85:05:79:8d:e1:c8:13:91:fd:92:6d:a5:b6:c6:5a:88:45:
36:82:d2:fe:bc:c4:5c:20:79:b6:0a:a8:0b:9c:94:4b:43:f1:
c9:8b:80:9e:d8:dc:b5:7b:5a:46:db:37:51:69:1e:6a:02:01:
38:46:95:45:6d:7f:df:33:83:49:13:cd:a9:1d:12:5c:1d:f9:
b1:55:96:2b:b1:1b:a9:d8:7c:84:9f:b7:00:15:cf:9b:b3:d3:
c0:71:8b:5a:f9:21:68:c1:52:74:d8:ce:af:98:74:5d:8e:73:
f2:07:6d:12:8d:59:f5:f8:8a:a6:1f:e4:84:b8:34:dc:c1:f4:
de:5b:53:e3:c5:12:81:0f:03:72:5b:90:d4:13:58:c6:dd:51:
19:8b:cc:d9:38:30:3f:1f:07:7c:db:36:47:d1:aa:9c:57:a0:
ec:4f:cf:ce:c2:05:e6:69:d5:60:41:93:d2:c6:53:6b:85:b3:
c7:00:35:af:cb:23:c9:47:d6:9b:f2:a9:da:91:4e:83:53:45:
89:84:87:60:4e:c7:2a:4f:36:10:91:81:d2:03:e4:4a:97:51:
b3:95:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:12 2026 by rpki-client