Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/chyw13bbFkh4PjpVHeAJYWt9Z-Q.roa
File: chyw13bbFkh4PjpVHeAJYWt9Z-Q.roa (raw, json)
Hash identifier: UgFIfbYPxnalfQOgP+Zr6lOfuHfXTpQjRUoPA0/+CT8=
Subject key identifier: 72:1C:B0:D7:76:DB:16:48:78:3E:3A:55:1D:E0:09:61:6B:7D:67:E4
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0159EDE3AC77A75FCB3FC73E909474FBD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/chyw13bbFkh4PjpVHeAJYWt9Z-Q.roa
Signing time: Tue 18 Aug 2026 16:05:28 +0000
ROA not before: Tue 18 Aug 2026 16:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 77.111.98.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:9e:de:3a:c7:7a:75:fc:b3:fc:73:e9:09:47:4f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 18 16:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=721cb0d776db1648783e3a551de009616b7d67e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:ec:f3:d5:57:ca:04:3d:06:1a:ab:04:bf:
c4:f3:36:92:62:71:70:bb:5f:17:a8:a1:25:c9:a6:
54:51:4d:c9:4d:f1:85:6e:e2:11:80:f6:30:0e:26:
10:34:51:0e:e8:94:be:77:8f:d9:21:05:67:12:90:
de:92:b3:9c:24:7d:ce:01:98:f8:ec:71:58:86:f4:
6c:ef:ae:80:aa:f7:48:32:87:75:43:5a:2f:4d:e0:
5c:34:d1:62:82:08:ac:41:77:45:ab:89:03:08:17:
71:6d:90:70:67:f6:05:d1:6a:ad:ab:3d:01:68:c3:
b3:51:59:d2:71:bc:30:f8:4c:91:ad:01:cb:71:ac:
76:77:ac:fc:bc:f2:b3:93:29:10:a1:8b:ce:b1:be:
36:f4:13:0e:d1:32:82:ff:e4:ff:08:30:3d:5c:39:
01:c7:c3:c1:22:0f:e1:cb:ed:ef:b4:34:2e:06:d7:
3d:04:d8:0e:48:c6:a6:44:53:9f:e5:7b:48:92:29:
74:f9:51:d7:c0:8d:0a:9e:07:fe:d0:ec:84:40:33:
94:bc:6d:81:47:49:79:da:42:63:18:4a:33:e2:f0:
f9:e2:e6:ae:4a:fc:89:5e:be:c2:50:2f:cb:05:ec:
f2:a8:93:d1:99:e6:c2:83:23:0b:a7:bb:f1:e4:2c:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:B0:D7:76:DB:16:48:78:3E:3A:55:1D:E0:09:61:6B:7D:67:E4
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/chyw13bbFkh4PjpVHeAJYWt9Z-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.98.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6e:2b:1a:b1:7a:ab:ab:7a:e6:8a:8c:9d:47:90:7c:62:20:
1c:a6:25:98:56:57:fd:b4:ac:ed:86:90:9f:0b:75:b7:d6:51:
81:47:5f:8a:65:41:b6:f2:74:a3:59:f8:6f:cf:b0:0d:8e:e5:
41:34:64:b1:67:16:3a:89:37:15:3c:43:da:5c:30:29:e9:f8:
a5:d5:85:c2:9d:47:e4:b3:a3:b7:53:41:1e:b1:00:1c:7d:f9:
cd:b2:b5:62:f3:f9:e5:aa:9f:ea:f0:a4:8e:8b:b4:e9:a5:22:
7c:23:e6:dc:ba:f1:52:bd:51:19:5b:f5:17:9a:6e:54:20:25:
7c:cd:86:d9:81:e5:30:db:ee:0d:f3:e5:d8:66:d5:e6:d7:35:
f6:ba:90:a0:40:8d:7c:19:0f:48:f1:39:c0:17:d3:8e:05:82:
ae:f6:00:fb:16:cb:6b:20:dd:59:13:67:3d:69:ed:91:96:11:
0e:e9:71:ad:6d:6f:d4:d0:47:41:12:2c:3a:c3:3f:88:9e:ec:
89:57:7c:e9:be:ba:97:20:61:c9:9e:03:f7:cd:40:16:5e:6d:
8f:82:9a:21:e1:41:49:ed:89:11:8f:fe:03:95:e8:b6:bf:79:
42:19:50:34:2e:6c:16:f7:ce:a1:60:54:77:20:74:56:f2:e4:
fa:9e:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:48:11 2026 by rpki-client