Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SD5JxfMGYowsOdiyL8e4vJN-AF8.roa
File: SD5JxfMGYowsOdiyL8e4vJN-AF8.roa (raw, json)
Hash identifier: +z9eCpuReEYDLvdqzMO1SbAvUnCpMVV1bht7BdBrdLQ=
Subject key identifier: 48:3E:49:C5:F3:06:62:8C:2C:39:D8:B2:2F:C7:B8:BC:93:7E:00:5F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A025194486EAA788584AEEBE4A79391588
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SD5JxfMGYowsOdiyL8e4vJN-AF8.roa
Signing time: Fri 21 Aug 2026 16:13:28 +0000
ROA not before: Fri 21 Aug 2026 16:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 191.219.25.0/24 maxlen: 24
191.219.26.0/24 maxlen: 24
191.219.27.0/24 maxlen: 24
191.219.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:19:44:86:ea:a7:88:58:4a:ee:be:4a:79:39:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 21 16:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=483e49c5f306628c2c39d8b22fc7b8bc937e005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:fc:fc:86:34:7f:73:8b:e0:ef:1f:9d:42:
ad:b2:fc:00:4a:a6:de:ef:79:61:f3:2c:dc:f4:d3:
f7:5e:08:d6:a7:17:68:86:8e:2e:78:67:ca:14:af:
48:f8:8e:3b:94:4e:6b:3f:2f:dd:fd:03:85:48:62:
22:54:62:61:d1:22:dc:54:cd:25:55:e7:c2:dd:c8:
da:9f:27:c8:83:db:d2:9d:0a:57:f6:10:88:6d:7e:
e1:9a:c5:24:02:1e:01:39:3d:08:00:e1:9c:fa:b8:
20:cc:ec:ef:a8:9a:31:cd:1e:9b:ed:d6:f8:ed:32:
1b:eb:f1:25:50:c1:6e:a5:03:00:bf:75:b3:c2:b1:
b6:09:a3:cb:14:fd:8b:69:87:08:8c:0f:e6:bc:5b:
05:7e:37:5f:2a:02:d2:18:09:7c:c8:83:15:99:e2:
7f:08:28:55:a6:a7:77:ce:ae:b6:9f:eb:eb:fe:cd:
bf:88:e9:c3:2a:8d:8a:c8:c6:74:dd:79:b3:51:3d:
58:5d:0b:12:8a:3b:cc:ad:7c:fd:dc:17:dc:df:f9:
ec:03:32:af:39:0c:ee:da:65:ff:df:61:80:ec:d9:
3b:c4:4b:9d:02:12:37:ef:08:a9:fd:1f:1c:68:af:
ed:68:72:ef:b5:23:79:5d:96:da:10:72:b3:3b:04:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3E:49:C5:F3:06:62:8C:2C:39:D8:B2:2F:C7:B8:BC:93:7E:00:5F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SD5JxfMGYowsOdiyL8e4vJN-AF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.25.0-191.219.27.255
191.219.29.0/24
Signature Algorithm: sha256WithRSAEncryption
78:dc:d4:54:c4:c0:4b:a5:63:87:5e:95:bc:a1:c7:34:24:a1:
41:65:de:02:bd:28:f5:7b:34:3e:08:7b:aa:69:8a:f3:05:b7:
92:f1:1f:fe:5d:5f:a1:2e:3b:83:da:23:b5:e2:a1:be:b1:a8:
97:8c:d3:ea:83:37:34:ff:48:d8:a0:f1:f5:b3:32:b4:de:28:
37:7f:2f:c6:d4:bd:28:a3:72:4e:df:b7:6d:0a:b4:18:8c:18:
2e:45:16:49:73:ad:d3:be:a5:07:8a:fb:df:45:17:24:aa:e4:
1d:6c:8b:91:6f:a4:a8:8c:94:b5:cc:53:50:3f:c3:69:50:14:
1c:ce:54:88:81:ec:37:7f:3b:bb:ad:51:7c:19:00:cc:f7:b4:
88:1b:4e:b6:f4:f6:5e:0e:8e:80:b1:99:e6:e9:86:d0:ab:6d:
ee:78:08:58:86:d6:77:1d:5f:d3:aa:e8:a4:33:93:71:cb:ff:
97:0d:7b:f5:2b:eb:78:55:1c:b2:f9:e5:c4:19:3d:6a:0b:f6:
76:2b:0d:3a:bf:f7:4d:de:d3:e3:2f:83:4c:3d:76:5d:5d:ab:
8c:c4:ab:79:3a:3b:a5:d7:b3:c5:79:49:6b:f0:39:5d:9a:6e:
30:a9:cd:4c:14:bc:3e:13:be:5f:a5:08:67:56:77:b0:96:97:
2f:55:a8:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:11 2026 by rpki-client