Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/bQHz1Kp99GjUO8QTnBg6s5wKLT4.roa
File: bQHz1Kp99GjUO8QTnBg6s5wKLT4.roa (raw, json)
Hash identifier: Qv034ivg8VIEPLYNo+bCwMhir8QGuda6FEoMWkROyNY=
Subject key identifier: 6D:01:F3:D4:AA:7D:F4:68:D4:3B:C4:13:9C:18:3A:B3:9C:0A:2D:3E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A18D7484F2D1E564C0D6B7B03BD3FB0EDD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/bQHz1Kp99GjUO8QTnBg6s5wKLT4.roa
Signing time: Fri 30 Oct 2026 15:36:26 +0000
ROA not before: Fri 30 Oct 2026 15:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 74.112.153.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
201.11.237.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
205.237.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:74:84:f2:d1:e5:64:c0:d6:b7:b0:3b:d3:fb:0e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 30 15:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d01f3d4aa7df468d43bc4139c183ab39c0a2d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:6c:76:6e:a6:64:3a:44:43:4c:ce:d6:6c:
5f:e6:5c:f8:2c:16:22:7b:05:20:90:da:ea:a5:8e:
08:dc:df:27:3b:a8:7c:9f:1b:8a:e4:b8:2a:f0:5b:
a0:2e:9a:fa:dc:fd:c5:b1:aa:ad:23:30:a3:6d:6f:
65:cf:a6:65:b2:9f:68:f5:77:9d:90:87:e8:9b:be:
21:2a:70:e7:6b:13:21:f7:25:b2:ad:8b:e2:bb:45:
38:ae:1b:21:57:26:91:76:83:21:0c:11:93:46:52:
9b:91:11:57:96:df:b9:73:cd:ee:53:94:db:88:a6:
35:a0:c8:5b:89:dd:2f:bd:7f:b5:b9:9f:f5:24:19:
d3:f7:cc:37:99:ac:43:74:99:aa:ea:59:5c:5c:5f:
16:ee:ba:d9:e4:63:a1:d4:0e:af:99:2e:fe:41:d5:
10:43:7c:e5:dc:28:f0:03:90:46:8d:19:58:eb:1d:
34:4f:93:b8:ee:b9:62:c0:8c:26:7f:ab:38:8b:0a:
a1:84:30:f5:f4:60:9d:32:02:b5:3d:a7:a4:08:95:
96:31:ba:83:bf:1d:6f:1f:42:82:98:69:4b:ae:53:
84:4e:c5:27:75:12:09:69:9d:f2:aa:41:be:ed:fa:
9e:94:09:d0:a6:bf:31:6c:c4:44:64:7e:49:89:9b:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:F3:D4:AA:7D:F4:68:D4:3B:C4:13:9C:18:3A:B3:9C:0A:2D:3E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/bQHz1Kp99GjUO8QTnBg6s5wKLT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.153.0/24
191.44.24.0/24
191.219.23.0/24
201.11.237.0/24
201.14.221.0/24
205.237.91.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ba:60:8b:30:2e:bb:e7:14:5a:b9:dc:b8:ba:52:87:d9:6c:
11:0f:d6:d5:01:52:64:9c:81:d0:be:b0:2d:d3:b9:60:df:d0:
ba:00:6a:cb:7a:4b:d4:46:9c:2f:c3:5d:65:27:bd:6f:06:41:
85:6e:d9:ff:f9:36:6a:e2:0a:a2:34:bc:14:94:41:9c:7c:8f:
61:c0:78:33:de:33:28:0d:ce:51:70:4f:66:f1:0a:be:85:90:
67:57:b8:31:32:19:78:0d:0b:bf:3b:3e:25:47:49:53:28:af:
a7:8a:c1:64:b2:3d:08:56:7d:6c:b4:5c:e5:13:f2:63:44:66:
e0:e3:ac:86:a4:2d:d0:38:86:71:0f:a3:22:31:61:09:8b:88:
04:c4:e6:cd:44:c9:0b:67:76:82:ab:e1:4b:fc:b7:9e:ae:22:
63:9d:8f:60:40:02:c3:c4:05:c8:74:70:2e:d4:50:67:11:5d:
cb:e6:7a:95:f4:3b:5e:1c:c2:fb:e9:84:7f:0c:92:7b:85:06:
b5:6e:71:73:06:e1:20:98:c7:8d:27:3a:e1:0d:f1:91:74:7f:
03:1a:01:f1:85:40:0c:15:bf:68:1b:e0:be:12:7f:bc:f4:a3:
76:c6:8d:c0:28:db:c0:5f:0c:c4:3c:dd:c4:62:12:78:ac:57:
e4:5f:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:19:26 2026 by rpki-client