Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y5XWW1tbwtcVkF63CzGZZp82NrI.roa
File: Y5XWW1tbwtcVkF63CzGZZp82NrI.roa (raw, json)
Hash identifier: PFBreww6ljEoNCBbFkw47TkAPEq7z9GdxR1sY0j6Ink=
Subject key identifier: 63:95:D6:5B:5B:5B:C2:D7:15:90:5E:B7:0B:31:99:66:9F:36:36:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F19093F9D0A89F295397F4CAD71C4282F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y5XWW1tbwtcVkF63CzGZZp82NrI.roa
Signing time: Tue 30 Jun 2026 14:57:44 +0000
ROA not before: Tue 30 Jun 2026 14:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 191.222.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:09:3f:9d:0a:89:f2:95:39:7f:4c:ad:71:c4:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 30 14:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6395d65b5b5bc2d715905eb70b3199669f3636b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:65:22:7f:74:9a:95:e5:96:69:ad:bc:3f:
dd:b6:23:a7:1a:68:77:7d:47:ee:e7:e6:bf:16:d4:
b3:74:c9:8e:b2:7b:08:f0:fc:21:c8:93:fc:24:05:
75:2a:db:55:07:68:ca:be:3a:17:66:7e:c2:37:e6:
32:50:7f:ca:c0:47:07:48:1e:0c:87:17:aa:a9:79:
46:a6:61:21:b5:79:ab:4e:16:32:8c:d8:68:16:e7:
49:41:e7:e0:e5:8f:19:dd:e9:ce:49:a2:b2:60:79:
43:58:ce:54:6e:fd:30:99:c8:8f:af:83:ad:f7:91:
42:31:8b:45:2b:36:86:1c:6d:89:8b:e2:27:b1:fb:
49:df:51:63:e8:84:1a:e2:67:28:2d:d1:88:32:d6:
24:4c:7e:87:37:60:1b:46:d1:79:5b:2a:d5:da:1c:
6c:d7:92:4c:d2:64:49:a6:5a:10:d5:54:13:ec:a5:
f4:a2:7f:7d:f7:a2:9a:b6:70:78:00:57:c7:cb:43:
5b:74:10:e2:5d:50:8b:ff:d9:39:c6:36:ec:6b:bd:
42:1a:a3:43:bb:85:3d:fc:cf:a0:6b:16:97:df:53:
20:95:aa:92:0b:3d:b7:03:b6:91:31:26:08:30:30:
30:26:3e:0f:58:92:dd:d7:99:96:94:2b:13:e4:b8:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:D6:5B:5B:5B:C2:D7:15:90:5E:B7:0B:31:99:66:9F:36:36:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y5XWW1tbwtcVkF63CzGZZp82NrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.247.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b1:70:5d:b6:e8:49:04:14:86:a8:5f:8a:be:b7:29:19:c1:
dd:24:51:12:4b:27:de:84:cf:7c:36:9d:f9:f3:b9:3d:1d:95:
14:49:6b:42:b3:5c:66:6b:c9:04:ca:cb:5e:78:b4:d4:13:e3:
53:58:dd:3e:7f:17:51:d4:3c:6c:b9:43:49:b4:a5:ed:76:55:
01:48:3c:a9:52:cf:03:57:ef:ac:ea:7c:44:49:11:59:93:b9:
9e:c9:8b:4d:5a:ca:29:f4:df:14:eb:10:51:ec:90:1f:6b:0b:
3a:d6:b5:29:f1:e0:67:f9:6a:52:7b:a6:cc:ab:af:81:b7:18:
ff:89:a4:2d:12:00:0a:f9:fc:25:7a:a1:72:0f:09:4b:b0:01:
ec:6f:b6:20:f9:cf:de:4b:f8:f2:7a:6e:cb:f4:50:5f:4a:f6:
9e:e2:d4:99:d3:9e:e4:07:4a:84:14:1e:af:ab:2d:66:b6:3b:
0b:c2:69:e4:55:fe:77:36:11:58:35:4d:46:48:ee:01:da:af:
4e:ee:9b:45:18:58:47:2e:5f:37:67:9e:aa:a9:fe:56:29:b0:
23:a3:b8:97:0e:b3:13:2b:dc:e2:ef:fe:b4:19:50:9b:2d:df:
0b:99:d7:b9:38:75:4b:60:ab:f7:9b:55:22:7d:da:e3:17:3d:
63:ea:79:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:15 2026 by rpki-client