Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wv_bLPJvOGFSA2FkKDrwXaEjv4c.roa
File: Wv_bLPJvOGFSA2FkKDrwXaEjv4c.roa (raw, json)
Hash identifier: jFEXkWbkxw0zi65mUAnM3iq2yzUvKa7YCh2MxDbbrP0=
Subject key identifier: 5A:FF:DB:2C:F2:6F:38:61:52:03:61:64:28:3A:F0:5D:A1:23:BF:87
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019E7007E94F9514CBA553C7D9BD44969E08
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wv_bLPJvOGFSA2FkKDrwXaEjv4c.roa
Signing time: Thu 28 May 2026 19:20:27 +0000
ROA not before: Thu 28 May 2026 19:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51852
IP address blocks: 94.229.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:07:e9:4f:95:14:cb:a5:53:c7:d9:bd:44:96:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 28 19:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5affdb2cf26f386152036164283af05da123bf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:2e:7f:cf:b7:6a:7c:9c:06:da:79:b5:ee:
61:66:87:b7:8a:d1:c0:09:2e:e0:90:7e:86:63:79:
3c:40:aa:84:41:06:23:cb:76:a7:cd:aa:a2:10:77:
01:97:b8:8b:18:68:8d:4c:1c:62:64:25:b7:29:ed:
a8:1d:5d:69:0f:b5:bf:c9:e6:5e:08:bb:fa:7a:02:
65:c7:e5:cf:8f:50:a4:42:30:68:d9:96:05:b8:c8:
91:8b:e6:b8:a8:f8:69:69:81:77:26:21:74:df:87:
de:f6:e0:28:6b:66:0b:f0:73:4b:15:d9:b2:e9:76:
82:73:4f:e5:eb:33:ee:39:1a:d5:22:69:92:6c:31:
dc:ad:f5:24:98:93:ff:96:9d:0f:73:aa:4d:7e:ba:
97:36:9f:65:2c:fa:b0:20:9e:84:a1:48:14:7c:8f:
ef:10:f7:28:14:ab:64:af:64:2d:0b:71:5f:62:ad:
6d:e5:0b:a4:a4:e5:c4:05:c7:e6:6c:3b:f9:31:c5:
00:a7:83:9a:f2:0c:77:dc:48:bd:98:88:1c:e4:e1:
ed:53:63:7b:14:4f:42:d1:65:f2:41:74:e1:9e:a6:
e0:3b:78:26:d2:83:80:d9:02:5f:c6:c7:b1:10:88:
72:79:7a:20:bb:24:1f:ea:93:8c:c7:35:de:88:a6:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:DB:2C:F2:6F:38:61:52:03:61:64:28:3A:F0:5D:A1:23:BF:87
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wv_bLPJvOGFSA2FkKDrwXaEjv4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:45:ef:94:93:31:28:95:22:f7:48:07:54:c2:c7:3a:22:24:
ec:64:b2:01:00:0e:e0:9b:f9:3a:89:33:54:2e:30:48:8e:0b:
07:86:02:43:9d:ff:b9:31:da:83:ff:3d:71:9b:4f:64:03:f6:
5e:87:37:47:b7:74:80:fd:8d:4e:47:21:74:ba:53:10:40:fc:
9a:b8:bb:07:ba:4c:16:4f:6f:61:30:81:d5:6c:f5:84:c1:e7:
ea:5c:4d:d4:9c:d7:ec:ab:09:72:02:fe:94:76:22:1b:44:85:
3d:77:5f:c5:e3:25:26:8f:6f:c0:7a:7a:ed:ad:80:3d:73:b6:
e9:5c:fc:5a:66:d5:ab:2c:69:4c:d7:39:f4:f5:40:ff:c7:94:
e3:31:88:32:eb:11:b7:1e:1a:cd:d8:e2:dc:f7:a4:29:58:45:
66:60:e7:95:b8:84:7d:21:f8:0f:18:ec:8a:b3:0d:4f:19:77:
d5:8b:89:fa:80:87:16:4e:c2:29:29:25:3c:6b:cf:13:e3:c3:
02:6d:c7:79:4e:4c:33:5a:ca:70:8c:0b:51:34:ca:4f:df:96:
45:96:ed:52:97:d6:6b:62:fd:79:93:aa:a8:d1:7f:e7:39:5d:
ea:3c:b4:62:de:eb:e3:c9:2b:95:81:ce:1a:37:b6:dd:4f:54:
da:e8:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:52 2026 by rpki-client