Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YqdvNaj3TihIc13W4Nbcn3MJ8e8.roa
File: YqdvNaj3TihIc13W4Nbcn3MJ8e8.roa (raw, json)
Hash identifier: iANzYbn88Pk/l+lrVirHARK23K+2737w5hZdLZQVH3Q=
Subject key identifier: 62:A7:6F:35:A8:F7:4E:28:48:73:5D:D6:E0:D6:DC:9F:73:09:F1:EF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2FE9E095F77F00E9C76227ED48731E8A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YqdvNaj3TihIc13W4Nbcn3MJ8e8.roa
Signing time: Sun 05 Jul 2026 01:34:44 +0000
ROA not before: Sun 05 Jul 2026 01:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 191.217.161.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:e9:e0:95:f7:7f:00:e9:c7:62:27:ed:48:73:1e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 01:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62a76f35a8f74e2848735dd6e0d6dc9f7309f1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:81:3a:cb:9f:d5:ee:05:84:f6:6b:a4:4d:
a6:3a:a6:07:a7:5e:dd:62:34:58:72:64:21:36:99:
8a:12:ac:7a:3f:f5:d8:8c:c6:52:9c:a2:30:15:54:
77:c7:93:dd:2d:f6:20:6f:5f:b7:1c:35:de:9a:8c:
8f:4c:ab:d0:be:7e:8f:ff:0e:53:b1:f8:52:1e:92:
20:ed:db:35:03:32:77:a9:bb:25:30:95:e7:10:50:
b9:64:87:6d:8c:3c:d2:36:30:3a:65:84:11:6f:88:
c4:e3:48:e0:5f:3c:27:7c:96:11:40:90:a6:fa:93:
8e:83:22:c0:a2:a0:4b:b3:2a:ca:83:43:7b:e1:a5:
7e:e8:63:b1:0d:de:a4:ea:18:9c:a3:34:c5:7b:cd:
69:02:31:55:a4:18:1c:1c:36:60:8b:b3:e8:86:73:
5a:2b:9d:ae:e7:1a:7f:60:31:35:fc:04:c8:cc:50:
37:3c:f8:b4:f2:e4:f8:95:df:8b:d1:9c:e1:db:22:
3b:e8:7a:f7:b8:4b:c3:96:16:3c:23:3e:75:5c:cd:
00:3d:cc:e6:5f:35:c8:60:2f:42:27:bf:ae:78:e5:
a9:6e:22:ca:31:16:33:02:56:22:09:8e:af:45:b6:
e3:37:0d:00:60:43:27:86:73:17:89:70:97:b4:67:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:6F:35:A8:F7:4E:28:48:73:5D:D6:E0:D6:DC:9F:73:09:F1:EF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YqdvNaj3TihIc13W4Nbcn3MJ8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.161.0/24
200.102.178.0/24
201.11.236.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d1:55:c6:b2:51:3a:28:9e:7f:82:6c:3f:eb:26:b1:c4:b0:
4f:ce:23:0f:c9:3f:b1:8c:6e:fe:f8:12:0b:4a:22:57:9e:12:
c8:7a:93:e3:ec:bf:cf:30:13:95:2c:dc:f2:41:d6:4d:d6:c4:
10:38:38:98:81:87:51:bc:c8:c8:df:20:7a:f8:4c:91:a7:e9:
20:1f:b6:42:bb:62:23:d5:f9:1e:8a:cc:58:35:97:db:d8:a1:
ea:51:a2:c3:1e:b8:bc:c9:36:15:84:bb:a5:28:75:a5:98:55:
32:64:2b:c6:77:c1:d0:a8:bd:91:d6:7e:52:63:be:f8:59:b2:
cf:56:f6:f4:a2:b3:0c:e9:e4:85:0a:fc:67:53:5c:4c:f7:70:
80:25:a6:4c:22:4d:a4:15:fb:2a:05:44:1a:10:0d:9d:14:74:
a7:2b:b3:f9:a3:22:7a:e1:c9:13:0c:0b:4b:ee:ce:ea:96:51:
d1:ef:8f:79:52:93:2d:ba:f8:da:74:14:2c:66:1c:7c:31:ba:
49:e9:d3:94:8f:4a:f2:3c:b8:f5:af:81:ef:46:5f:63:65:f6:
46:65:c4:03:ea:a3:0f:92:1c:6a:94:42:20:ca:5c:a3:34:2f:
4d:a5:24:ce:39:cb:38:02:e3:21:12:fe:07:35:7a:66:90:03:
44:c8:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:57 2026 by rpki-client