Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_B5NU0CtfNJ3WDHKzWvdnLucMYw.roa
File: _B5NU0CtfNJ3WDHKzWvdnLucMYw.roa (raw, json)
Hash identifier: LRc4NRUNM0f0Y/VJ509yfMz+6ElLpBfwvDzRE0+LnmQ=
Subject key identifier: FC:1E:4D:53:40:AD:7C:D2:77:58:31:CA:CD:6B:DD:9C:BB:9C:31:8C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F59D940A4B63A699EDD523AE06AFC264
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_B5NU0CtfNJ3WDHKzWvdnLucMYw.roa
Signing time: Thu 01 Oct 2026 03:59:00 +0000
ROA not before: Thu 01 Oct 2026 03:59:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 191.44.19.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:9d:94:0a:4b:63:a6:99:ed:d5:23:ae:06:af:c2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 1 03:59:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc1e4d5340ad7cd2775831cacd6bdd9cbb9c318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:3d:fa:96:ba:a8:85:fe:1e:dc:08:ad:ea:
9b:59:32:9b:a2:83:4b:5e:f7:8a:40:5c:b1:32:6e:
ab:74:a7:90:b4:41:a6:d7:67:56:f0:57:75:13:37:
12:94:8b:e7:eb:4f:62:fe:5f:c9:ae:f9:68:ac:b1:
9a:f8:5a:c6:73:8d:c8:6b:1a:16:41:2b:ec:c4:8c:
f8:9b:69:c3:0e:39:c1:fe:26:ff:fe:ec:f6:7e:35:
c3:04:ae:70:b0:ba:6a:f3:30:c4:20:ac:36:72:8a:
12:67:26:40:9c:e6:a5:ab:1c:32:c2:ba:57:2d:31:
49:7a:85:d2:da:dd:fd:4c:ec:79:2f:af:6c:86:8c:
b7:56:34:66:6a:ac:4f:22:d7:00:d0:d0:36:3e:8b:
c0:d6:d0:de:3f:50:fb:5b:75:60:a4:7b:3d:4a:0a:
54:2a:aa:11:23:7d:74:3d:49:c8:2b:66:7f:b7:0b:
56:32:75:55:67:14:ad:53:30:35:6e:e6:a1:e7:a6:
02:08:e2:65:fe:6f:da:39:31:b5:91:48:93:b8:b8:
91:57:cd:e9:5a:f1:f5:d5:c2:49:da:3d:db:9d:91:
e1:b6:d8:d4:82:47:15:b8:e7:59:a4:15:3e:af:9d:
4b:37:e6:f6:1c:6a:61:25:20:da:cc:38:f6:c9:91:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:4D:53:40:AD:7C:D2:77:58:31:CA:CD:6B:DD:9C:BB:9C:31:8C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_B5NU0CtfNJ3WDHKzWvdnLucMYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.19.0/24
200.102.178.0/24
Signature Algorithm: sha256WithRSAEncryption
00:80:69:ab:c3:64:ca:8f:07:ef:31:86:2a:11:df:19:ce:29:
b9:dd:06:29:10:2e:62:61:60:0a:be:fd:32:5c:2a:6e:df:5f:
c4:cb:e7:89:ac:eb:4f:69:7e:be:d3:ba:7d:99:ee:b3:ed:1e:
3e:b0:bb:af:1f:f8:50:ed:52:e5:d6:1d:21:89:fb:10:f7:e3:
6e:ad:ff:10:f6:b4:e1:0a:55:a6:11:fd:d7:25:04:79:77:0d:
f9:59:9e:2e:1a:48:71:aa:49:26:d4:7d:9d:e7:f4:83:42:2c:
26:b2:f2:5e:05:1a:86:2a:7a:5a:73:b0:85:f7:a8:ff:00:0b:
af:1e:4f:5e:8d:ab:a3:e2:df:54:ab:3f:a6:c4:a6:d8:57:aa:
7e:53:d2:37:0b:95:8c:ea:2e:9b:bc:a2:04:c6:42:e5:ef:9d:
c9:39:05:73:30:08:79:37:50:90:4b:7c:d3:62:8a:b4:da:62:
4e:48:70:a5:e4:d3:21:9c:6e:fb:02:53:61:f3:ce:8c:ec:23:
65:fd:60:10:f7:a1:c6:a1:73:21:5d:a2:55:46:e6:3c:36:35:
a4:b8:61:7f:46:44:94:73:4f:a1:99:e8:fa:0e:74:01:6c:3f:
16:1a:c9:20:54:50:9f:0c:bb:a8:58:2a:a1:29:71:f1:0a:82:
d8:75:eb:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaD1nZQKS2Omme3VI64Gr8JkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDAxMDM1OTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzFlNGQ1MzQwYWQ3Y2QyNzc1ODMxY2FjZDZiZGQ5Y2JiOWMzMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvns9+pa6qIX+HtwIreqbWTKbooNL
XveKQFyxMm6rdKeQtEGm12dW8Fd1EzcSlIvn609i/l/JrvlorLGa+FrGc43IaxoW
QSvsxIz4m2nDDjnB/ib//uz2fjXDBK5wsLpq8zDEIKw2cooSZyZAnOalqxwywrpX
LTFJeoXS2t39TOx5L69shoy3VjRmaqxPItcA0NA2PovA1tDeP1D7W3VgpHs9SgpU
KqoRI310PUnIK2Z/twtWMnVVZxStUzA1buah56YCCOJl/m/aOTG1kUiTuLiRV83p
WvH11cJJ2j3bnZHhttjUgkcVuOdZpBU+r51LN+b2HGphJSDazDj2yZHkKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPweTVNArXzSd1gxys1r3Zy7nDGMMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvX0I1TlUwQ3RmTkozV0RIS3pXdmRuTHVjTVl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvywTAwQA
yGayMA0GCSqGSIb3DQEBCwUAA4IBAQAAgGmrw2TKjwfvMYYqEd8Zzim53QYpEC5i
YWAKvv0yXCpu31/Ey+eJrOtPaX6+07p9me6z7R4+sLuvH/hQ7VLl1h0hifsQ9+Nu
rf8Q9rThClWmEf3XJQR5dw35WZ4uGkhxqkkm1H2d5/SDQiwmsvJeBRqGKnpac7CF
96j/AAuvHk9ejauj4t9Uqz+mxKbYV6p+U9I3C5WM6i6bvKIExkLl753JOQVzMAh5
N1CQS3zTYoq02mJOSHCl5NMhnG77AlNh886M7CNl/WAQ96HGoXMhXaJVRuY8NjWk
uGF/RkSUc0+hmej6DnQBbD8WGskgVFCfDLuoWCqhKXHxCoLYdety
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:19 2026 by rpki-client