Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/__AUwOko7fuhTFNJQ0Bd_iwPjU8.roa
File: __AUwOko7fuhTFNJQ0Bd_iwPjU8.roa (raw, json)
Hash identifier: UmtbBUTVNHCuJ5qoIF+F/CD7uaOD4jBwtH54kuIgB7o=
Subject key identifier: FF:F0:14:C0:E9:28:ED:FB:A1:4C:53:49:43:40:5D:FE:2C:0F:8D:4F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F23E69E7466554E5F9344C1F90060D4A5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/__AUwOko7fuhTFNJQ0Bd_iwPjU8.roa
Signing time: Thu 02 Jul 2026 17:35:44 +0000
ROA not before: Thu 02 Jul 2026 17:35:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 189.12.51.0/24 maxlen: 24
189.12.54.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.31.0/24 maxlen: 24
191.222.34.0/24 maxlen: 24
200.102.92.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
201.14.209.0/24 maxlen: 24
201.14.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:e6:9e:74:66:55:4e:5f:93:44:c1:f9:00:60:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 2 17:35:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff014c0e928edfba14c534943405dfe2c0f8d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:6c:c2:84:47:49:37:b3:ab:f3:b8:11:8f:
df:8d:ca:81:c1:7e:0a:52:c9:b2:bc:7c:97:89:14:
af:09:6b:44:21:66:0a:53:4f:9d:c2:99:28:02:c3:
97:95:53:2c:6e:69:59:2f:c3:b5:12:d9:16:b2:d5:
be:c7:35:a9:d1:bc:6a:46:07:32:a5:49:60:62:32:
fd:ce:a3:c7:65:12:8f:9a:c5:66:9a:ab:10:5e:fb:
2d:20:94:c6:4a:60:87:6f:c2:ac:72:84:7f:ab:cd:
19:8b:12:c1:17:4f:57:cd:9f:f6:52:74:63:ad:08:
a1:cd:bb:ad:b9:af:42:56:66:1a:5f:78:4d:f5:71:
5f:c5:94:8a:1c:cc:d0:5d:33:62:4f:61:6f:9b:3d:
72:a8:d5:b7:86:b0:60:aa:e0:88:b6:43:05:97:3d:
d9:f6:dc:9d:1b:42:de:35:70:71:6c:7a:f3:e1:94:
1d:91:f1:82:86:c8:b3:b4:a4:e6:ce:e7:a3:d9:d5:
31:a4:a2:7f:8c:9c:f9:54:76:10:f9:c0:67:68:c4:
dc:4b:d1:82:c1:41:4f:ed:00:74:dc:52:64:23:eb:
d6:f4:a5:a5:f6:b2:36:4a:fd:91:33:09:90:b3:64:
55:9c:51:49:07:c7:53:dc:b3:61:1c:93:f3:ae:30:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:14:C0:E9:28:ED:FB:A1:4C:53:49:43:40:5D:FE:2C:0F:8D:4F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/__AUwOko7fuhTFNJQ0Bd_iwPjU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.51.0/24
189.12.54.0/24
189.31.214.0/24
191.44.25.0/24
191.219.23.0/24
191.219.31.0/24
191.222.34.0/24
200.102.92.0/24
200.102.94.0/24
200.102.189.0-200.102.190.255
200.165.17.0/24
200.165.27.0/24
201.14.209.0/24
201.14.212.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ed:41:81:e3:d5:b1:0e:24:40:10:92:8a:05:c0:0d:87:de:
5f:d6:8f:0f:6e:19:3c:6d:d3:9a:fe:4e:5a:40:bc:f8:fe:b2:
ef:3d:37:53:43:ab:22:8a:40:a8:f9:85:d7:45:8f:9b:f0:28:
db:17:4e:8b:0d:b7:31:2a:ad:2c:7d:a2:49:de:41:03:b1:b7:
74:6c:2b:42:95:f7:f2:c7:c5:5c:0c:a8:d2:f5:12:61:a2:ce:
70:dc:38:f7:79:29:ea:48:a0:c0:43:61:3c:8e:d3:f3:28:6d:
b4:8e:be:8f:65:3d:48:dd:d6:3e:25:e3:03:e1:a1:8d:a2:2b:
d4:a3:f9:b2:2e:d5:af:fb:3f:10:07:b2:46:79:fc:f4:71:7e:
92:ae:88:69:85:02:e2:24:d3:1d:98:ce:2e:3f:ad:98:d6:11:
7e:2e:9d:21:da:33:e7:1c:c4:e8:6e:8e:41:76:7c:b5:27:ff:
98:7d:77:95:c3:a3:cc:6c:b9:5e:6f:1f:2c:14:ee:d9:b8:0c:
38:b5:d8:f0:a2:7b:2b:73:53:ba:cb:e9:ff:a4:a7:68:17:d0:
6f:ae:a7:a5:b7:68:6d:c1:40:48:dd:5a:ee:07:06:46:a6:79:
67:cf:23:9f:07:87:25:5f:68:12:cb:bb:db:a5:c1:b6:e5:1d:
fa:08:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:08:16 2026 by rpki-client