Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U8Z6zeJiplIIP8vjeMIOVlquCSg.roa
File: U8Z6zeJiplIIP8vjeMIOVlquCSg.roa (raw, json)
Hash identifier: 7mPnqxBU4CNKz+AAbcNawvDDcqPAUjxNFzvESCYZaL4=
Subject key identifier: 53:C6:7A:CD:E2:62:A6:52:08:3F:CB:E3:78:C2:0E:56:5A:AE:09:28
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0A5AA78C8EFDC1BC4B8716404DFCEA510
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U8Z6zeJiplIIP8vjeMIOVlquCSg.roa
Signing time: Tue 15 Sep 2026 15:23:27 +0000
ROA not before: Tue 15 Sep 2026 15:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 89.106.30.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
201.14.223.0/24 maxlen: 24
201.24.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:aa:78:c8:ef:dc:1b:c4:b8:71:64:04:df:ce:a5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 15 15:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53c67acde262a652083fcbe378c20e565aae0928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:5d:80:cf:f5:f5:68:65:74:f0:f4:03:13:
28:e2:69:04:a3:43:04:93:a4:0e:1a:73:4b:04:6a:
13:bb:8e:5d:11:ef:08:26:19:e9:c7:5d:ab:69:9b:
b7:bc:a4:73:58:67:ae:c2:05:65:a5:7e:fe:0f:80:
95:1e:15:f5:1d:b4:c7:0c:42:6d:14:d2:a8:8e:df:
6f:d8:74:7b:8d:8b:1a:35:07:ae:60:82:36:b2:33:
a3:2c:6e:ba:2f:2e:17:e0:28:c9:75:7f:9e:99:c4:
3f:6e:76:7d:81:7a:0d:5b:bf:f0:b1:7e:05:19:9c:
b2:05:f8:27:b9:2b:85:d3:8b:10:d6:60:72:ec:45:
40:b3:30:6d:42:0e:2a:18:9a:50:c7:af:d5:53:13:
7b:18:79:51:cb:f6:ff:62:70:0b:75:b0:04:be:63:
07:29:43:7a:4b:ca:d1:9b:37:0b:1a:46:86:a6:38:
d1:72:c3:71:62:77:6b:b8:33:37:17:1f:a5:e3:7a:
5b:ec:f4:b7:f5:a8:97:4b:07:4a:e7:8b:25:cf:2d:
52:42:6d:ad:8c:cd:c9:47:7f:ac:74:30:26:fe:6a:
c3:db:e4:90:95:9a:fd:f1:b0:4d:f1:31:ea:27:bc:
44:fb:87:90:f9:f1:9a:b5:95:9d:3c:1a:8e:c7:1a:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:7A:CD:E2:62:A6:52:08:3F:CB:E3:78:C2:0E:56:5A:AE:09:28
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/U8Z6zeJiplIIP8vjeMIOVlquCSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.30.0/24
94.229.223.0/24
200.165.17.0/24
201.14.223.0/24
201.24.204.0/24
Signature Algorithm: sha256WithRSAEncryption
51:65:68:95:79:40:58:33:95:68:4e:c4:21:f9:d1:d1:9b:bd:
9d:d3:cb:8f:e3:44:a0:a5:ca:5e:54:d5:c7:fb:e6:9f:d7:f2:
a5:4a:11:5a:a5:0d:65:52:e2:a7:fd:15:e8:fa:32:12:d9:25:
60:f5:c2:ca:ec:e5:93:21:e4:25:4a:75:9c:9e:1b:8f:d7:9c:
d1:e8:6e:8c:cf:81:d3:03:1a:5d:b7:29:7d:01:f4:8a:69:7e:
d7:43:a0:f4:aa:1a:5e:09:99:96:8a:db:94:6a:85:b4:f1:cd:
44:5a:bb:44:06:dd:72:e1:e1:e5:4f:1b:d8:df:26:81:bf:cb:
4a:6f:18:5e:c8:6a:7c:9e:b6:28:66:fb:ac:5a:1c:0d:e4:d6:
1b:52:cb:fb:5e:cf:be:fc:5f:6b:b5:ba:d7:51:62:36:e6:ba:
ac:b2:92:74:11:cd:e3:9a:70:90:c7:7e:89:7f:5c:81:4d:e9:
e8:b5:c1:eb:28:bf:fd:0c:e1:f5:2d:f8:06:d0:f3:9b:a5:53:
71:11:e6:8b:be:02:27:ae:53:0e:70:b4:7b:99:d1:ae:10:0e:
71:7e:7c:46:c1:3c:4a:77:eb:49:11:20:d5:d0:ce:97:0d:62:
14:de:22:14:d5:2d:67:7a:f2:c5:1e:d1:7e:6b:e0:34:01:d6:
99:ee:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:16:57 2026 by rpki-client