Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UNtiXFqKJaJp2t-8x39VA_21IgI.roa
File: UNtiXFqKJaJp2t-8x39VA_21IgI.roa (raw, json)
Hash identifier: 2d4+wiZKkg8P2H3zLaHbluglE1Qf+eXok/R+XesIzwM=
Subject key identifier: 50:DB:62:5C:5A:8A:25:A2:69:DA:DF:BC:C7:7F:55:03:FD:B5:22:02
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F823A06C88F98C263F6E10363D99CB9F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UNtiXFqKJaJp2t-8x39VA_21IgI.roa
Signing time: Thu 01 Oct 2026 15:44:39 +0000
ROA not before: Thu 01 Oct 2026 15:44:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 200.102.180.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:23:a0:6c:88:f9:8c:26:3f:6e:10:36:3d:99:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 1 15:44:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50db625c5a8a25a269dadfbcc77f5503fdb52202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:34:c5:5b:a9:c0:75:e4:d1:9f:02:2c:52:
5f:5d:ba:c9:66:2b:e0:b0:ab:52:96:d4:fd:5d:1c:
64:ba:eb:cc:39:1f:43:d0:86:b4:8b:77:2a:0c:32:
da:7e:95:a2:1a:0d:d5:7a:6c:f3:51:0e:f8:ae:f7:
cd:a1:9e:2a:b3:2c:6d:6a:96:3c:70:d6:24:15:b7:
12:ed:12:5d:ee:80:aa:f7:a1:83:c4:f8:85:03:c8:
c7:c8:00:2f:24:6d:60:27:c5:28:60:61:16:bc:39:
ba:be:09:b2:24:92:b1:66:73:4a:e2:da:14:14:a3:
da:9e:71:e1:7a:02:92:f7:3c:af:64:ae:72:b9:35:
40:6c:24:72:cb:16:01:65:d4:25:58:bd:b0:f1:cf:
4f:59:61:8f:4e:8e:cc:7d:84:10:82:9c:2c:2e:25:
a2:e7:7c:c8:15:1c:d1:c4:8a:b7:48:08:fc:ed:f0:
30:9e:4b:4f:14:83:5b:05:b4:26:34:77:84:5e:ad:
94:e4:18:d2:b1:8f:b4:47:be:c3:bf:6f:93:5e:41:
9a:3a:a7:4f:ab:8e:ed:c3:77:f4:3b:9b:db:72:ae:
68:29:7b:d9:34:80:e8:00:d0:e0:ae:90:4a:a6:c9:
65:e0:f6:78:97:78:8b:9b:63:c2:bc:39:a4:24:74:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:62:5C:5A:8A:25:A2:69:DA:DF:BC:C7:7F:55:03:FD:B5:22:02
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UNtiXFqKJaJp2t-8x39VA_21IgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.180.0/24
200.102.182.0/23
200.181.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:14:e4:36:06:68:23:db:a5:ad:13:2d:ae:94:27:2f:32:0c:
1e:db:32:9d:dd:8a:97:6b:a5:3f:b9:e5:30:f1:2d:ae:5c:4e:
ee:2b:40:66:2b:52:25:20:cc:6f:d7:06:a3:47:9c:12:a0:87:
13:a8:78:68:1b:f7:38:35:55:ae:50:4d:78:a1:12:53:70:89:
b3:d7:f9:e4:d5:85:f6:80:c8:aa:b1:c3:96:0e:81:80:11:d8:
e9:84:e7:fb:61:f6:31:bc:8d:be:e7:ee:ca:f5:10:2c:c2:64:
2d:57:3a:68:de:f4:ac:ef:52:16:6f:2d:30:42:2c:fc:a3:be:
54:ea:1f:fb:28:cf:15:64:81:92:e3:a4:4a:9c:23:cd:f4:9d:
ac:40:54:a9:59:0d:89:37:31:0f:1e:71:4f:8a:fe:46:86:28:
2e:c1:a4:5a:28:39:96:ac:a9:e8:a7:c8:b2:30:be:89:4d:7c:
91:d4:db:b5:03:ef:0f:37:21:5e:f4:df:3e:bd:0e:e7:84:60:
bc:e4:55:94:23:97:f8:e2:39:c6:45:5b:e7:e0:48:21:a7:43:
36:9b:36:d1:d4:67:b0:30:9d:43:e6:5c:10:be:5c:8b:65:83:
62:d2:e8:66:f9:51:c5:cb:29:84:00:5a:d2:27:c1:d6:a6:91:
01:ee:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:11 2026 by rpki-client