Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/T5ETwMto2exMFDuhCDgTS9LJSuo.roa
File: T5ETwMto2exMFDuhCDgTS9LJSuo.roa (raw, json)
Hash identifier: dwSSZ2/DYyv0IKWDnBIpTb8HK6YdgsmPfFiHYgQyisE=
Subject key identifier: 4F:91:13:C0:CB:68:D9:EC:4C:14:3B:A1:08:38:13:4B:D2:C9:4A:EA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1696C669ADE00109C65030C5D1EF95F41
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/T5ETwMto2exMFDuhCDgTS9LJSuo.roa
Signing time: Fri 23 Oct 2026 15:41:14 +0000
ROA not before: Fri 23 Oct 2026 15:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:6c:66:9a:de:00:10:9c:65:03:0c:5d:1e:f9:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 23 15:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f9113c0cb68d9ec4c143ba10838134bd2c94aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:23:2d:ed:55:05:12:92:a7:73:26:70:61:
3e:4b:14:d6:f2:95:43:9c:dd:e7:c4:56:97:f0:a4:
e0:27:25:01:3d:71:8f:d7:97:da:38:8d:4f:17:9b:
4e:87:04:8a:fb:06:43:6e:4e:bd:88:86:ff:9a:77:
73:f1:43:7e:b2:3b:ed:82:f1:4b:72:99:01:f2:3a:
b2:c8:49:af:e5:82:59:94:2a:a7:c5:f3:a6:5b:ae:
d9:f8:3b:42:cb:1d:42:60:9c:f1:32:e3:b3:4a:50:
4a:7c:12:fd:6f:e6:9d:4b:98:f5:14:1a:43:c4:bf:
8c:6d:b4:a4:78:b1:e6:26:22:01:74:90:ca:cf:a3:
61:f0:eb:5b:ec:52:67:bb:75:bb:18:a5:8e:19:e5:
cb:c5:e1:d1:68:59:e5:81:74:52:e4:6f:6d:f3:f7:
25:a5:71:b6:fd:dd:6d:59:3e:e0:6c:3f:71:df:d6:
e6:05:e3:7d:0a:72:45:2b:cc:fc:c8:4e:4b:b4:96:
77:e1:52:62:55:ad:5c:9a:ad:cb:2e:c2:3d:bf:36:
a9:06:65:3f:c3:ce:84:73:7b:f7:75:65:8d:3d:a2:
4f:21:9c:f3:92:c5:74:5a:da:f2:83:4a:18:df:3c:
64:b7:95:2c:f9:3d:c4:74:d4:59:ec:72:3b:b2:de:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:13:C0:CB:68:D9:EC:4C:14:3B:A1:08:38:13:4B:D2:C9:4A:EA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/T5ETwMto2exMFDuhCDgTS9LJSuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fc:40:91:b9:bb:d4:fa:a0:ee:24:c5:01:c6:74:ae:99:ee:
e8:fe:93:d1:0f:35:aa:38:e4:67:5f:e1:b9:55:57:63:11:29:
52:66:71:a1:4a:c8:8a:41:85:1d:ec:23:4b:f5:74:38:18:6a:
9e:ee:10:78:4f:eb:46:20:b9:f0:1f:35:53:18:8f:0a:60:55:
5c:2e:04:96:40:19:6c:d7:c7:31:7f:95:96:17:ec:3f:a9:e8:
95:ae:bf:17:fe:c6:0b:0f:1f:58:7d:28:76:d5:a9:08:30:90:
00:69:82:ac:1a:0c:b8:a7:a6:bf:3a:18:30:a9:3c:08:6a:d8:
51:cd:d2:ce:45:c8:b4:b4:a5:96:aa:c9:67:1f:3f:4d:f1:82:
5d:76:5f:4e:f8:45:c8:22:37:16:20:5e:a2:4d:be:df:a3:33:
8f:c1:7b:ae:b0:04:9b:b2:d8:a4:41:0c:f1:ac:9b:98:80:43:
80:b0:94:67:a2:ae:6f:0a:69:05:86:bf:b1:10:74:8a:4a:20:
80:a4:85:56:43:1f:5d:29:7d:d3:d2:8b:79:05:25:82:0f:6a:
d2:f3:fa:26:80:01:37:62:d6:ff:27:09:3f:64:db:46:eb:cd:
2c:a0:aa:d5:26:7c:13:62:65:c2:b0:ed:46:3b:4d:7c:cb:a1:
8a:f5:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 09:21:48 2026 by rpki-client