Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_qhcAzyfoYLloN3S_Qeuf2FDTBk.roa
File: _qhcAzyfoYLloN3S_Qeuf2FDTBk.roa (raw, json)
Hash identifier: syW1/1G9WyUcArhJw9+MPMiD5d3Eepml2cgY3eM0YVc=
Subject key identifier: FE:A8:5C:03:3C:9F:A1:82:E5:A0:DD:D2:FD:07:AE:7F:61:43:4C:19
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ECC92338973CA96ABFDBE4020AAD28270
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_qhcAzyfoYLloN3S_Qeuf2FDTBk.roa
Signing time: Mon 15 Jun 2026 18:36:33 +0000
ROA not before: Mon 15 Jun 2026 18:36:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142222
IP address blocks: 189.31.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:92:33:89:73:ca:96:ab:fd:be:40:20:aa:d2:82:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 15 18:36:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fea85c033c9fa182e5a0ddd2fd07ae7f61434c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:f3:99:0a:80:11:63:03:11:82:28:ef:c5:
b8:df:6d:b7:b5:7a:66:04:64:c5:da:71:0b:d8:20:
ec:a4:eb:86:01:a8:f8:80:93:8a:1e:38:9c:27:3c:
eb:2a:a1:4b:fd:94:83:88:35:0c:3e:42:8a:5e:d0:
41:52:52:df:88:29:4f:73:2b:83:2d:e9:00:60:62:
d5:9b:f3:0c:3d:5a:f8:1d:4c:d5:a9:40:a8:37:9f:
d1:53:8b:db:56:d5:87:6d:4a:09:f1:9e:00:c8:13:
a8:d8:b2:9a:d9:ec:39:4e:35:ff:c0:ba:2b:54:90:
c8:24:b7:6a:73:20:f4:92:3a:0f:01:7e:bb:69:f8:
fa:57:b9:22:32:73:1d:67:e5:02:fd:53:b4:07:7c:
9b:37:a3:96:b4:e2:b4:1c:cd:ec:57:dd:5c:53:2e:
de:25:d2:c9:8d:6f:46:ed:79:df:88:45:f1:7e:69:
b7:f8:5a:4c:2d:b5:4f:cc:c6:f3:4c:42:3d:81:4e:
d3:8c:c0:81:8d:4a:a8:0b:a8:3c:cb:8e:1d:a8:85:
77:49:d6:26:ce:00:7b:45:c1:70:83:00:88:9d:01:
d7:c5:bd:b8:48:87:d8:9f:b4:a4:ce:67:ea:e7:62:
ac:97:89:13:bc:fb:61:aa:47:77:95:d6:cd:5d:cc:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:5C:03:3C:9F:A1:82:E5:A0:DD:D2:FD:07:AE:7F:61:43:4C:19
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_qhcAzyfoYLloN3S_Qeuf2FDTBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ab:95:74:1f:b1:65:7e:23:ef:0c:83:90:0e:ed:2a:fa:ea:
84:f6:e4:15:18:79:10:87:46:c0:eb:60:bb:f4:b4:c1:3f:3a:
89:2c:41:a1:d1:79:e3:b7:56:09:ce:f3:5a:62:d9:9c:16:fd:
32:f0:ef:5f:09:65:b9:d2:a3:07:50:9c:c9:ae:36:87:14:a7:
41:95:0b:eb:f5:c0:7e:8c:f7:33:32:ea:88:0b:d0:6c:72:f0:
55:e8:97:fe:b2:19:35:06:6d:33:0c:b3:84:da:f3:5f:33:7d:
b7:a9:3e:69:7c:4b:70:af:52:7b:6f:31:82:a3:1c:58:b6:5b:
ab:be:7e:3b:cf:b8:40:01:f5:ba:8a:26:04:87:2b:c9:ce:c4:
74:ab:a2:93:cf:02:2f:64:41:ce:97:23:e7:4d:92:a2:15:82:
94:92:18:11:1d:f1:29:8a:fd:70:61:8c:d4:59:3b:da:09:7a:
02:9c:41:0d:3b:76:af:b3:fd:20:f6:56:e7:f8:53:aa:9e:21:
3a:bf:32:05:24:c0:a0:23:e8:99:41:c7:49:e2:2b:35:55:6c:
21:ee:55:01:4f:44:2c:13:5b:db:8f:35:7e:29:ad:31:66:8c:
4d:7b:c9:a7:ae:d0:9e:9f:fd:22:2f:6d:30:0d:b6:e4:34:c5:
9a:a2:c7:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7MkjOJc8qWq/2+QCCq0oJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjE1MTgzNjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWE4NWMwMzNjOWZhMTgyZTVhMGRkZDJmZDA3YWU3ZjYxNDM0YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OTzmQqAEWMDEYIo78W43223tXpm
BGTF2nEL2CDspOuGAaj4gJOKHjicJzzrKqFL/ZSDiDUMPkKKXtBBUlLfiClPcyuD
LekAYGLVm/MMPVr4HUzVqUCoN5/RU4vbVtWHbUoJ8Z4AyBOo2LKa2ew5TjX/wLor
VJDIJLdqcyD0kjoPAX67afj6V7kiMnMdZ+UC/VO0B3ybN6OWtOK0HM3sV91cUy7e
JdLJjW9G7XnfiEXxfmm3+FpMLbVPzMbzTEI9gU7TjMCBjUqoC6g8y44dqIV3SdYm
zgB7RcFwgwCInQHXxb24SIfYn7Skzmfq52Ksl4kTvPthqkd3ldbNXczmfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6oXAM8n6GC5aDd0v0Hrn9hQ0wZMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvX3FoY0F6eWZvWUxsb04zU19RZXVmMkZEVEJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvR/fMA0G
CSqGSIb3DQEBCwUAA4IBAQBAq5V0H7FlfiPvDIOQDu0q+uqE9uQVGHkQh0bA62C7
9LTBPzqJLEGh0Xnjt1YJzvNaYtmcFv0y8O9fCWW50qMHUJzJrjaHFKdBlQvr9cB+
jPczMuqIC9BscvBV6Jf+shk1Bm0zDLOE2vNfM323qT5pfEtwr1J7bzGCoxxYtlur
vn47z7hAAfW6iiYEhyvJzsR0q6KTzwIvZEHOlyPnTZKiFYKUkhgRHfEpiv1wYYzU
WTvaCXoCnEENO3avs/0g9lbn+FOqniE6vzIFJMCgI+iZQcdJ4is1VWwh7lUBT0Qs
E1vbjzV+Ka0xZoxNe8mnrtCen/0iL20wDbbkNMWaoscM
-----END CERTIFICATE-----
Generated at Tue Jun 16 20:09:31 2026 by rpki-client