Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Uh9fk8x_E7K8KXt66o1uv1NvG3Y.roa
File: Uh9fk8x_E7K8KXt66o1uv1NvG3Y.roa (raw, json)
Hash identifier: 3EaYW0ignOSNmJZ6ZC1lGgTAjz1hur8zYsSRIX9hUGE=
Subject key identifier: 52:1F:5F:93:CC:7F:13:B2:BC:29:7B:7A:EA:8D:6E:BF:53:6F:1B:76
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F6BC602F59A23F82496E2785440C974FB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Uh9fk8x_E7K8KXt66o1uv1NvG3Y.roa
Signing time: Thu 16 Jul 2026 16:32:46 +0000
ROA not before: Thu 16 Jul 2026 16:32:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 189.31.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:c6:02:f5:9a:23:f8:24:96:e2:78:54:40:c9:74:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 16 16:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=521f5f93cc7f13b2bc297b7aea8d6ebf536f1b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:de:ab:17:dd:de:d3:6e:34:53:14:97:d6:
83:a9:85:f2:f0:d2:e4:2e:df:b1:25:92:59:ca:4d:
6b:20:34:e4:b2:6f:01:ec:7c:da:94:9f:8e:fe:ff:
fb:0f:93:2d:c3:3e:a6:e4:2e:40:4b:45:e0:36:9b:
80:b1:08:66:68:2b:28:1f:07:c6:7e:66:f7:48:5d:
80:e0:af:f5:0b:5e:22:c2:61:93:21:42:09:83:d7:
9f:fa:2a:7b:34:b6:ad:33:50:b2:13:29:72:1f:45:
36:e2:22:35:e2:1c:7d:81:99:09:22:ba:e4:14:c1:
3b:a5:93:9e:0b:87:19:39:5e:a6:31:52:af:d5:ba:
08:d9:c7:8c:db:eb:f6:57:82:18:78:e2:83:6a:bc:
fd:f6:f5:2c:0b:01:20:86:8b:61:e9:43:0d:cd:62:
c0:2d:02:d1:de:c3:5e:08:79:8e:42:e4:f8:4b:62:
75:a0:f4:72:ca:e7:51:aa:d6:35:7f:d2:54:fa:42:
46:9d:64:23:86:0c:17:db:42:13:0f:ed:19:f2:a4:
bb:9c:63:0a:68:2c:43:d2:71:ac:ad:9d:8f:65:45:
02:18:68:48:dc:5f:e0:fe:58:75:9a:0d:2b:33:6b:
21:3e:b2:f0:ef:00:5b:ef:28:d5:4a:2a:a9:6d:bf:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:5F:93:CC:7F:13:B2:BC:29:7B:7A:EA:8D:6E:BF:53:6F:1B:76
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Uh9fk8x_E7K8KXt66o1uv1NvG3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:54:00:f6:ae:c1:c0:2b:a2:1a:b0:c8:22:25:ce:15:ff:19:
f1:d9:aa:fc:b7:d1:f4:80:0d:48:d8:2f:8c:bb:06:45:e7:8a:
8e:a7:3c:7d:23:51:6e:bc:a7:74:0e:93:f2:ea:df:3d:68:95:
f6:98:45:6d:72:c4:da:2a:b0:82:78:77:58:80:7c:a6:bd:3a:
bd:65:54:a2:f3:c6:d3:2c:b8:6c:98:70:9e:14:93:b1:64:cd:
55:62:de:56:83:36:7c:9e:36:82:6b:ce:29:0a:ab:a6:4f:24:
93:29:cd:0e:3d:4b:ab:bc:37:7b:37:78:48:88:53:c2:a7:6f:
68:41:78:0f:17:5e:56:65:be:e7:4b:56:0e:6b:c4:3a:2c:1c:
61:31:20:08:9a:f9:fe:61:b3:d1:98:22:24:be:4a:ef:e0:2c:
e2:79:f9:f0:4c:bc:d0:98:6b:a4:3b:b4:95:d6:5b:f7:7f:6c:
71:64:bc:a7:2c:50:a9:ba:3b:ea:6d:78:ca:fc:80:75:9d:9b:
34:1f:b0:94:88:e7:59:53:ce:5a:0a:b6:f0:de:e6:6d:11:89:
07:d5:3e:17:a5:1e:a0:a1:e1:d4:e5:21:a2:54:87:ab:77:73:
96:da:31:f2:a7:a3:b6:d9:bd:d7:8a:f6:f6:cd:58:8a:5c:b9:
c2:20:ba:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9rxgL1miP4JJbieFRAyXT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzE2MTYzMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjFmNWY5M2NjN2YxM2IyYmMyOTdiN2FlYThkNmViZjUzNmYxYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZveqxfd3tNuNFMUl9aDqYXy8NLk
Lt+xJZJZyk1rIDTksm8B7HzalJ+O/v/7D5Mtwz6m5C5AS0XgNpuAsQhmaCsoHwfG
fmb3SF2A4K/1C14iwmGTIUIJg9ef+ip7NLatM1CyEylyH0U24iI14hx9gZkJIrrk
FME7pZOeC4cZOV6mMVKv1boI2ceM2+v2V4IYeOKDarz99vUsCwEghoth6UMNzWLA
LQLR3sNeCHmOQuT4S2J1oPRyyudRqtY1f9JU+kJGnWQjhgwX20ITD+0Z8qS7nGMK
aCxD0nGsrZ2PZUUCGGhI3F/g/lh1mg0rM2shPrLw7wBb7yjVSiqpbb+sXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIfX5PMfxOyvCl7euqNbr9Tbxt2MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvVWg5Zms4eF9FN0s4S1h0NjZvMXV2MU52RzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvR/XMA0G
CSqGSIb3DQEBCwUAA4IBAQA9VAD2rsHAK6IasMgiJc4V/xnx2ar8t9H0gA1I2C+M
uwZF54qOpzx9I1FuvKd0DpPy6t89aJX2mEVtcsTaKrCCeHdYgHymvTq9ZVSi88bT
LLhsmHCeFJOxZM1VYt5WgzZ8njaCa84pCqumTySTKc0OPUurvDd7N3hIiFPCp29o
QXgPF15WZb7nS1YOa8Q6LBxhMSAImvn+YbPRmCIkvkrv4CziefnwTLzQmGukO7SV
1lv3f2xxZLynLFCpujvqbXjK/IB1nZs0H7CUiOdZU85aCrbw3uZtEYkH1T4XpR6g
oeHU5SGiVIerd3OW2jHyp6O22b3Xivb2zViKXLnCILoT
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:51:34 2026 by rpki-client