Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RUfhF7LX8h8EFgedqn59C_KA-J8.roa
File: RUfhF7LX8h8EFgedqn59C_KA-J8.roa (raw, json)
Hash identifier: kOEh1ArbjWIeVkKAoQ5gEsFD0LWF1f6Xhx5uOFu8TT8=
Subject key identifier: 45:47:E1:17:B2:D7:F2:1F:04:16:07:9D:AA:7E:7D:0B:F2:80:F8:9F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A174ECEA6FAF1F39B6F516E7803A163760
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RUfhF7LX8h8EFgedqn59C_KA-J8.roa
Signing time: Sun 25 Oct 2026 21:17:25 +0000
ROA not before: Sun 25 Oct 2026 21:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 191.44.24.0/24 maxlen: 24
201.11.237.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:ec:ea:6f:af:1f:39:b6:f5:16:e7:80:3a:16:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 25 21:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4547e117b2d7f21f0416079daa7e7d0bf280f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:3a:47:8a:46:78:88:bd:5b:50:ac:e1:51:
40:77:9b:1b:65:4f:ce:cc:cb:e8:96:38:5b:5f:d4:
6a:bc:82:de:d9:cf:ad:8b:2e:a8:b1:f2:38:71:cc:
51:c8:9f:4d:61:d8:07:39:7b:02:02:c8:de:eb:f1:
e0:ae:88:5e:ba:f3:d7:c4:9f:b5:65:6f:61:0c:34:
2e:9d:63:47:a1:18:88:cc:ae:67:65:94:93:d0:7b:
da:76:ec:d4:ea:7c:20:7a:22:8e:8f:18:85:de:72:
fb:90:f5:79:87:cb:42:6d:c9:db:f4:65:05:08:96:
82:a0:6c:3a:79:66:51:eb:2e:09:8d:9c:56:09:b9:
eb:86:fb:65:e7:83:99:2b:66:8a:03:c5:db:55:68:
b5:52:30:07:2b:af:d1:18:76:fc:dc:d4:4d:4a:ac:
6d:69:ad:8a:66:62:bb:b7:3a:a6:bf:d9:89:8d:be:
28:d3:6a:0e:13:a2:cb:96:9c:e9:5b:1a:23:a8:76:
7d:76:a8:1d:4d:75:f7:4e:eb:46:4f:c9:b3:6d:60:
51:9c:5a:55:6e:c2:f9:97:a7:56:5d:1c:13:2e:26:
5f:f9:b0:e5:63:a7:e5:91:94:0d:7f:26:b2:1f:85:
c9:1c:ff:4c:30:71:37:60:81:2d:4a:b5:e1:66:96:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:47:E1:17:B2:D7:F2:1F:04:16:07:9D:AA:7E:7D:0B:F2:80:F8:9F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RUfhF7LX8h8EFgedqn59C_KA-J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.24.0/24
201.11.237.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ce:13:6e:b3:19:31:5f:c3:cd:7c:51:25:65:26:bf:44:53:
11:51:5c:ba:00:d2:14:2a:54:89:dd:6c:fb:d5:19:f8:2d:85:
9d:2d:e7:d8:8a:80:d7:b3:08:1c:c3:c5:5b:5b:da:45:e5:26:
2b:a4:44:c5:b0:cc:ff:b0:b6:17:e9:ce:4d:8a:e3:c2:a3:53:
35:d7:76:4f:47:12:5e:ee:26:e0:6a:ad:1e:86:e2:61:6e:e0:
4b:e8:45:a8:71:a6:2d:09:f4:2d:ac:f2:d3:d8:99:a9:d0:dd:
fc:22:53:4a:21:8b:a2:d9:d1:45:3a:57:21:26:4b:f2:fa:fb:
40:6e:97:67:2e:67:2c:34:4d:16:eb:26:5c:44:19:af:7e:a4:
fe:51:f5:55:2d:cf:76:ea:27:da:ca:b7:87:aa:33:79:6b:2c:
05:c9:d9:5f:d2:b5:af:05:2f:49:02:29:34:7c:2d:0a:98:75:
bf:91:90:81:e5:b5:12:39:74:b0:1d:b5:eb:5b:51:df:72:96:
d0:73:70:5d:1e:f2:a4:da:0a:47:54:31:87:8c:50:aa:12:1b:
14:9b:f5:70:69:e6:64:f6:d5:3c:9c:be:3d:b0:f5:65:a6:36:
70:ba:5a:57:13:f9:a2:8d:84:98:17:4c:0c:e9:3c:f9:dd:d8:
63:a0:a6:80
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaF07Opvrx85tvUW54A6FjdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDI1MjExNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTQ3ZTExN2IyZDdmMjFmMDQxNjA3OWRhYTdlN2QwYmYyODBmODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVY6R4pGeIi9W1Cs4VFAd5sbZU/O
zMvoljhbX9RqvILe2c+tiy6osfI4ccxRyJ9NYdgHOXsCAsje6/HgroheuvPXxJ+1
ZW9hDDQunWNHoRiIzK5nZZST0HvaduzU6nwgeiKOjxiF3nL7kPV5h8tCbcnb9GUF
CJaCoGw6eWZR6y4JjZxWCbnrhvtl54OZK2aKA8XbVWi1UjAHK6/RGHb83NRNSqxt
aa2KZmK7tzqmv9mJjb4o02oOE6LLlpzpWxojqHZ9dqgdTXX3TutGT8mzbWBRnFpV
bsL5l6dWXRwTLiZf+bDlY6flkZQNfyayH4XJHP9MMHE3YIEtSrXhZpaGDQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEVH4Rey1/IfBBYHnap+fQvygPifMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvUlVmaEY3TFg4aDhFRmdlZHFuNTlDX0tBLUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvywYAwQA
yQvtAwQAyQ7dMA0GCSqGSIb3DQEBCwUAA4IBAQAwzhNusxkxX8PNfFElZSa/RFMR
UVy6ANIUKlSJ3Wz71Rn4LYWdLefYioDXswgcw8VbW9pF5SYrpETFsMz/sLYX6c5N
iuPCo1M113ZPRxJe7ibgaq0ehuJhbuBL6EWocaYtCfQtrPLT2Jmp0N38IlNKIYui
2dFFOlchJkvy+vtAbpdnLmcsNE0W6yZcRBmvfqT+UfVVLc926ifayreHqjN5aywF
ydlf0rWvBS9JAik0fC0KmHW/kZCB5bUSOXSwHbXrW1HfcpbQc3BdHvKk2gpHVDGH
jFCqEhsUm/VwaeZk9tU8nL49sPVlpjZwulpXE/mijYSYF0wM6Tz53dhjoKaA
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:03 2026 by rpki-client