Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YVt6SOvb5s5nFH__iR3CjDV_aLM.roa
File: YVt6SOvb5s5nFH__iR3CjDV_aLM.roa (raw, json)
Hash identifier: hxLiOq1+tDh4RZZQmh4zc+yUanVn4Js/9hWFfb3u+BQ=
Subject key identifier: 61:5B:7A:48:EB:DB:E6:CE:67:14:7F:FF:89:1D:C2:8C:35:7F:68:B3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FBE37CE8B446FF6B02666F4CEE6BD5B1F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YVt6SOvb5s5nFH__iR3CjDV_aLM.roa
Signing time: Sat 01 Aug 2026 16:45:56 +0000
ROA not before: Sat 01 Aug 2026 16:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 189.12.50.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:37:ce:8b:44:6f:f6:b0:26:66:f4:ce:e6:bd:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 1 16:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615b7a48ebdbe6ce67147fff891dc28c357f68b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:34:e3:68:9a:41:3d:43:d3:d6:7d:c1:e5:
44:e8:08:e0:18:34:fb:64:63:6e:18:c6:34:14:96:
37:22:eb:e6:40:64:b1:d6:a5:71:10:75:ee:35:54:
42:a6:65:2f:de:05:ab:d9:b5:06:b9:bb:aa:e9:da:
1f:69:4b:07:da:88:d9:2f:f8:d8:00:9e:4d:e6:d3:
fc:77:e6:e0:f5:8b:6b:3a:e7:44:f5:e5:50:70:9a:
10:ef:8e:ca:69:6f:a5:1c:0b:8c:23:3b:d1:ad:e2:
8f:2e:36:4a:24:dc:d8:a2:5d:c1:be:18:b2:80:31:
4c:7f:82:52:ad:1f:b2:1c:56:4b:bd:a7:1c:7d:5c:
10:62:5b:90:ba:be:9f:1d:50:59:05:ed:9e:e7:92:
18:35:f1:b5:44:62:85:06:06:81:db:a4:cc:5b:2f:
ee:00:37:5c:6a:02:9f:db:ab:bb:d1:1d:ed:ef:fa:
61:5f:a5:95:b7:52:bd:aa:0b:69:0f:69:e8:a2:02:
b3:11:9a:95:a5:27:b7:f3:1c:74:c0:ee:89:68:33:
64:76:94:18:fe:11:fc:f2:ea:01:15:4c:35:05:23:
d4:07:99:e0:de:a5:b9:90:7a:c3:74:a4:73:e9:15:
f8:8e:d3:0c:07:25:3b:84:63:65:38:17:c8:b0:96:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5B:7A:48:EB:DB:E6:CE:67:14:7F:FF:89:1D:C2:8C:35:7F:68:B3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YVt6SOvb5s5nFH__iR3CjDV_aLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.50.0/24
189.12.53.0/24
191.44.24.0/24
191.44.27.0/24
191.44.30.0/24
201.14.208.0/24
201.14.213.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ed:62:98:b6:34:c9:ed:93:68:f2:2a:19:f5:36:b7:ca:34:
2d:bb:49:5e:38:ad:8c:71:0f:9b:70:c4:bd:c6:c0:63:90:2f:
a8:c6:8f:a1:a0:02:fa:8d:cb:03:9d:15:43:f6:5a:ff:da:df:
6d:fc:0f:82:d0:8b:a2:d3:36:57:31:c8:10:e1:35:7a:c5:dc:
81:e9:37:c7:ed:ef:2b:32:41:31:82:16:ca:22:d6:d6:2a:28:
6e:49:76:d1:70:e6:92:00:95:ff:b4:a8:d2:90:51:c4:da:b1:
04:3b:a6:8f:02:39:68:b6:3c:71:79:a6:2f:18:7c:62:e4:2a:
3c:48:83:d2:1b:d8:00:c2:08:3f:98:ce:61:fb:77:f3:ab:04:
6f:ee:5c:06:2a:05:db:15:6e:df:66:57:2d:2b:5b:71:79:8e:
1c:a1:6c:1e:da:3d:2b:05:ca:c3:12:e5:55:b4:42:17:d7:43:
97:fd:16:1b:54:c0:95:8f:e1:6c:65:b8:d9:cd:91:25:73:5c:
e6:e3:86:c9:f8:31:37:af:ae:41:dc:b0:0e:07:f3:b8:ca:dc:
e4:01:21:29:08:4d:09:b3:c8:79:e3:8d:dd:b0:19:24:8a:9f:
2f:d9:aa:f5:d8:c1:e7:08:62:ae:df:f7:46:46:6a:2f:e4:13:
b1:1b:8b:a6
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ++N86LRG/2sCZm9M7mvVsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwODAxMTY0NTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTViN2E0OGViZGJlNmNlNjcxNDdmZmY4OTFkYzI4YzM1N2Y2OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OI042iaQT1D09Z9weVE6AjgGDT7
ZGNuGMY0FJY3IuvmQGSx1qVxEHXuNVRCpmUv3gWr2bUGubuq6dofaUsH2ojZL/jY
AJ5N5tP8d+bg9YtrOudE9eVQcJoQ747KaW+lHAuMIzvRreKPLjZKJNzYol3Bvhiy
gDFMf4JSrR+yHFZLvaccfVwQYluQur6fHVBZBe2e55IYNfG1RGKFBgaB26TMWy/u
ADdcagKf26u70R3t7/phX6WVt1K9qgtpD2noogKzEZqVpSe38xx0wO6JaDNkdpQY
/hH88uoBFUw1BSPUB5ng3qW5kHrDdKRz6RX4jtMMByU7hGNlOBfIsJZcQQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFGFbekjr2+bOZxR//4kdwow1f2izMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvWVZ0NlNPdmI1czVuRkhfX2lSM0NqRFZfYUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAvQwyAwQA
vQw1AwQAvywYAwQAvywbAwQAvyweAwQAyQ7QAwQAyQ7VAwQAyQ7dMA0GCSqGSIb3
DQEBCwUAA4IBAQCX7WKYtjTJ7ZNo8ioZ9Ta3yjQtu0leOK2McQ+bcMS9xsBjkC+o
xo+hoAL6jcsDnRVD9lr/2t9t/A+C0Iui0zZXMcgQ4TV6xdyB6TfH7e8rMkExghbK
ItbWKihuSXbRcOaSAJX/tKjSkFHE2rEEO6aPAjlotjxxeaYvGHxi5Co8SIPSG9gA
wgg/mM5h+3fzqwRv7lwGKgXbFW7fZlctK1txeY4coWwe2j0rBcrDEuVVtEIX10OX
/RYbVMCVj+FsZbjZzZElc1zm44bJ+DE3r65B3LAOB/O4ytzkASEpCE0Js8h5443d
sBkkip8v2ar12MHnCGKu3/dGRmov5BOxG4um
-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:23 2026 by rpki-client