Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RWyUZ-SXACJMXXSMy_ucdjoBeRA.roa
File: RWyUZ-SXACJMXXSMy_ucdjoBeRA.roa (raw, json)
Hash identifier: ZMT5pulXvWjT1p9+PSlgHLtcHV3vYfe62XPXhtjSuSA=
Subject key identifier: 45:6C:94:67:E4:97:00:22:4C:5D:74:8C:CB:FB:9C:76:3A:01:79:10
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2FF79B37588331483EA24DC96E8758E3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RWyUZ-SXACJMXXSMy_ucdjoBeRA.roa
Signing time: Sun 05 Jul 2026 01:49:44 +0000
ROA not before: Sun 05 Jul 2026 01:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402276
IP address blocks: 191.217.162.0/24 maxlen: 24
200.102.89.0/24 maxlen: 24
200.181.80.0/24 maxlen: 24
200.181.83.0/24 maxlen: 24
201.24.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:f7:9b:37:58:83:31:48:3e:a2:4d:c9:6e:87:58:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 01:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=456c9467e49700224c5d748ccbfb9c763a017910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:ec:a5:bd:16:ed:5f:5f:7e:93:8f:f7:b9:
7e:eb:c3:4a:cc:21:e0:43:b5:ca:bc:5d:6d:dd:5b:
d9:7c:63:25:d6:bf:e6:87:7e:2a:b4:94:b7:4b:61:
d8:bc:1c:74:1a:f5:3d:fc:68:5a:69:84:17:0e:0a:
d5:24:cd:b4:34:3e:05:8d:65:b5:d7:f9:5f:34:21:
12:30:45:9e:14:af:c8:32:2e:ab:62:99:a1:6c:af:
b8:b6:44:f9:fc:47:cc:4e:01:42:1c:8e:7a:b2:94:
5e:ba:a2:f8:c4:48:3d:f3:24:16:80:a2:85:6c:2b:
54:35:60:6e:3c:31:42:76:f9:aa:cd:44:ef:13:57:
66:61:5c:9e:d6:5c:b1:e1:7e:31:a2:ec:6b:be:08:
b5:a5:72:bf:df:7f:87:46:0a:76:21:2f:41:10:00:
8c:c7:a7:78:7d:f3:45:26:5b:20:1e:27:23:bf:37:
be:df:ad:63:49:60:6c:c7:c4:a6:14:b1:dd:c0:d6:
43:f6:b6:97:6b:e7:e2:e2:72:c5:cc:46:c6:18:72:
10:fa:77:2c:16:f9:f7:9c:a1:1a:92:8b:61:be:ea:
4d:8b:ec:5e:c5:63:05:ed:35:45:7d:50:3f:b2:d6:
56:55:41:97:8b:31:e0:4d:7a:ce:36:5c:10:f7:26:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6C:94:67:E4:97:00:22:4C:5D:74:8C:CB:FB:9C:76:3A:01:79:10
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RWyUZ-SXACJMXXSMy_ucdjoBeRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.162.0/24
200.102.89.0/24
200.181.80.0/24
200.181.83.0/24
201.24.200.0/24
Signature Algorithm: sha256WithRSAEncryption
53:de:01:49:e6:e6:9a:51:95:26:0d:75:b8:e6:27:e9:0b:32:
d1:0f:74:61:4a:a2:78:bd:56:89:5f:cb:4f:cd:f3:c6:a2:ee:
79:97:1a:bb:4b:42:a5:6f:db:96:b5:c2:eb:00:f2:25:7f:84:
0b:db:79:a8:d2:85:69:d6:ed:8c:19:d4:33:03:0c:1b:ab:38:
f6:4b:94:2c:80:d8:88:a6:cc:a1:df:6e:27:1c:c7:11:31:8b:
f3:71:d6:de:6f:a0:d6:30:de:9c:0f:96:ca:8a:1c:b1:09:4e:
57:9f:3c:fc:52:49:6d:56:50:d1:80:2a:1d:95:4f:4b:36:85:
ae:ae:d7:de:f3:3d:82:fd:67:12:6b:38:ba:32:29:d0:90:52:
95:92:86:e0:cb:6f:bd:d6:79:1b:c7:2f:72:55:8e:66:11:dc:
d6:11:c4:b4:26:62:02:34:af:21:72:b6:d9:44:92:61:f7:5a:
c5:1c:8c:3b:0c:37:b5:06:11:63:25:9e:77:4e:94:0c:fb:af:
eb:91:5a:56:3a:48:59:da:b9:17:3b:a3:be:2d:71:c9:66:9d:
bc:55:b7:bb:8d:9e:12:6f:02:17:ca:04:d6:a7:61:a9:77:6d:
d0:c9:c5:3d:1e:3f:1a:ae:0b:12:13:9c:32:2b:a1:f7:3b:b9:
09:be:8a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:23 2026 by rpki-client