Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RW57BOIMnq_ANJj_05CniFSQdDo.roa
File: RW57BOIMnq_ANJj_05CniFSQdDo.roa (raw, json)
Hash identifier: P6sjZvORmGqvYA92tfzvFhaf4QIYes3M2gqEKAuKvVo=
Subject key identifier: 45:6E:7B:04:E2:0C:9E:AF:C0:34:98:FF:D3:90:A7:88:54:90:74:3A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FAEDAFB612968C6BA47F58013DC7ADD0A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RW57BOIMnq_ANJj_05CniFSQdDo.roa
Signing time: Wed 29 Jul 2026 17:10:14 +0000
ROA not before: Wed 29 Jul 2026 17:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 191.44.28.0/24 maxlen: 24
201.11.226.0/24 maxlen: 24
201.24.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:da:fb:61:29:68:c6:ba:47:f5:80:13:dc:7a:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 17:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=456e7b04e20c9eafc03498ffd390a7885490743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:4d:c3:39:c5:7c:89:28:c0:49:bb:8f:fd:
36:b5:0d:36:eb:fe:10:a8:94:73:6f:a5:10:ef:87:
8a:18:76:4d:aa:e1:03:b6:4b:93:63:81:c3:52:33:
8d:dc:e0:31:a9:5b:2b:8c:d6:b4:b2:69:a6:fc:fc:
97:f9:3d:eb:9e:c3:93:18:d4:ba:54:84:20:1c:75:
1e:73:74:a5:b4:49:e3:fe:06:a4:c0:4d:e9:ee:91:
0c:83:42:2c:b3:f9:d0:97:b8:e6:37:45:ee:c5:89:
5e:f5:54:fe:31:4e:97:ea:0f:13:22:7e:04:3b:8e:
85:e6:54:3e:b1:33:c0:24:4c:30:e9:2f:78:eb:e5:
f5:44:8a:75:63:e0:80:09:5c:9d:7b:1b:ab:2d:b9:
b0:85:cd:35:87:15:fb:b0:45:ac:d9:4e:69:89:f2:
06:d7:68:f8:21:84:db:05:45:21:d0:53:67:14:67:
eb:43:6c:71:76:79:6e:c7:6f:02:b0:08:43:62:08:
cc:ca:de:c0:82:2d:d9:6a:c5:83:19:1d:f5:11:24:
70:ea:d8:04:17:76:a4:31:ee:c1:a8:b2:7b:00:08:
4d:dc:23:ee:86:a1:22:ac:df:d5:d8:9e:36:60:04:
7d:fe:d7:51:b9:0e:8b:7f:88:9e:f6:a3:e3:6f:ba:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:7B:04:E2:0C:9E:AF:C0:34:98:FF:D3:90:A7:88:54:90:74:3A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RW57BOIMnq_ANJj_05CniFSQdDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.28.0/24
201.11.226.0/24
201.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:06:20:fd:d2:5a:5a:f1:a2:21:18:f5:2d:89:88:8e:8e:ac:
28:d8:74:2e:86:5d:dd:9a:f8:e4:8f:51:8f:48:64:25:01:5e:
32:c0:3e:3c:27:0f:70:89:94:f4:7c:3e:ca:63:9b:f5:56:3c:
d1:d9:eb:8b:b5:b5:58:0d:c3:79:27:97:da:98:5f:3b:50:2c:
d0:6b:2d:15:49:b8:3f:77:a5:db:74:98:f7:6c:41:e4:1c:59:
11:d3:10:86:73:42:15:ad:e6:fc:ad:a9:e1:95:7d:e2:21:01:
51:f8:26:68:c9:5a:43:14:6e:70:5b:f5:08:b6:58:cd:77:79:
03:b6:5b:ab:ea:64:74:b5:c2:70:e5:85:90:71:36:42:c7:9d:
ea:09:68:a9:7a:3a:a0:0c:7b:23:23:ee:3f:b2:0c:5c:46:50:
06:c7:27:6d:6a:03:e9:b6:2c:49:b4:ac:ac:29:a0:fe:8f:79:
01:6d:93:2b:1a:86:0c:18:2a:9e:a6:85:20:4b:0d:09:71:51:
92:cc:5f:58:69:86:94:36:69:40:7a:6f:00:ef:6a:c1:8f:9e:
ca:0c:d8:20:8d:7d:28:6c:7e:9e:96:17:b0:89:ff:aa:b6:e8:
cf:27:ff:a4:2b:ce:24:75:0a:43:6f:4c:05:0b:fb:c1:73:a0:
7e:56:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:09:17 2026 by rpki-client