Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/USJzicSQinSHxFVrQR-0vca_2mw.roa
File: USJzicSQinSHxFVrQR-0vca_2mw.roa (raw, json)
Hash identifier: CGvwiBNP+SS2MYQ5w1wlxLzUt2yPb1HAMI7ApDCOOQ4=
Subject key identifier: 51:22:73:89:C4:90:8A:74:87:C4:55:6B:41:1F:B4:BD:C6:BF:DA:6C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2FF96FF1EA592A4EF93BF45F14B6A8A1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/USJzicSQinSHxFVrQR-0vca_2mw.roa
Signing time: Sun 05 Jul 2026 01:51:44 +0000
ROA not before: Sun 05 Jul 2026 01:51:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 191.44.29.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
200.102.95.0/24 maxlen: 24
201.24.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:f9:6f:f1:ea:59:2a:4e:f9:3b:f4:5f:14:b6:a8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 01:51:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51227389c4908a7487c4556b411fb4bdc6bfda6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bf:7c:cb:a8:f2:0f:1b:6b:d5:9a:20:97:94:
40:8a:91:eb:73:68:7d:de:d3:06:91:c0:0d:a8:f7:
dd:da:47:6a:4c:96:19:12:63:d7:27:4d:8c:30:60:
9f:ea:ac:9b:e3:7d:4f:21:1b:fa:4d:ac:e4:3b:54:
93:4c:8d:57:e8:df:1c:b7:d0:4e:d3:52:6a:f3:f1:
50:66:5f:be:2b:66:c2:0e:9f:8b:9b:e3:3c:56:6e:
2b:39:68:cf:b0:23:9b:84:60:28:60:01:82:e9:e5:
da:fc:d7:3a:df:41:d9:34:e8:45:30:20:6c:91:e6:
b5:26:3d:9d:17:cf:1b:f2:c7:44:b4:e9:a6:15:0b:
0b:5b:66:bd:08:43:b5:22:d1:51:30:62:f3:d6:91:
d4:29:a3:27:24:08:4a:40:9c:34:6b:58:cb:b4:3e:
2b:31:cf:23:28:6a:22:73:96:38:52:7f:2a:43:33:
18:c4:ff:89:ca:3c:52:8b:b3:d4:0d:43:c6:ec:77:
eb:fb:00:7f:8d:84:bc:b3:1a:b0:c8:3b:a9:95:08:
23:33:3e:c9:3b:b0:b0:32:f9:64:81:85:c1:47:8d:
36:f0:97:00:12:30:a7:c1:18:8b:72:fb:f9:bf:56:
8c:cf:69:0b:94:e5:bd:8d:a4:d5:5a:5e:8f:93:9e:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:73:89:C4:90:8A:74:87:C4:55:6B:41:1F:B4:BD:C6:BF:DA:6C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/USJzicSQinSHxFVrQR-0vca_2mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.29.0/24
191.222.38.0/24
200.102.95.0/24
201.24.203.0/24
Signature Algorithm: sha256WithRSAEncryption
97:91:65:7f:a3:22:a9:f2:17:1e:52:c3:08:ed:a5:ae:09:d6:
1f:4d:29:04:c9:e7:3d:f7:e4:74:56:09:f1:3d:70:67:48:e8:
8a:a8:1b:0c:2a:09:86:1f:a1:cc:a1:9f:8b:1f:b4:60:1d:62:
ef:e5:97:11:bc:e2:ea:25:8f:5f:5b:63:b8:c7:4f:18:61:7f:
db:8c:cd:52:e7:36:a8:b0:c0:23:c8:88:40:17:e6:ff:65:dd:
b3:67:e5:9c:26:82:1b:95:fb:67:5e:64:34:1f:01:5b:b1:41:
b4:69:22:1c:41:69:90:f8:76:ff:2b:ee:1d:72:30:89:b3:6f:
9b:56:23:12:b3:96:22:c9:20:4c:e7:a2:c1:f0:67:1a:21:3c:
46:81:9e:3c:d7:ef:4c:aa:12:31:2b:b6:df:dc:ea:e9:11:20:
8a:f0:49:f2:a8:f0:1d:6e:92:ba:08:d1:45:38:b2:f8:08:0a:
ff:53:7a:5e:ee:34:51:0c:e6:3e:70:ef:b9:ad:31:37:76:cb:
69:6d:d4:0d:68:15:ef:19:32:de:ca:21:4a:5f:6b:51:2d:0a:
d8:62:e3:73:5a:72:81:a5:1e:d5:0a:df:43:0a:b7:26:16:23:
d3:ac:79:a2:5b:40:aa:c6:d7:63:65:b4:93:df:17:2e:8e:54:
c6:91:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:19:06 2026 by rpki-client