Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/d4QW_NN2b0lFnBXt47NUAe4hhbI.roa
File: d4QW_NN2b0lFnBXt47NUAe4hhbI.roa (raw, json)
Hash identifier: W+s8tKyTYhLS0uQYoGi9HSiM052/jyCCMr7ze6wBjoc=
Subject key identifier: 77:84:16:FC:D3:76:6F:49:45:9C:15:ED:E3:B3:54:01:EE:21:85:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F6166D66B32B7A4896AB16D2D9D55381
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/d4QW_NN2b0lFnBXt47NUAe4hhbI.roa
Signing time: Thu 01 Oct 2026 06:11:00 +0000
ROA not before: Thu 01 Oct 2026 06:11:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201407
IP address blocks: 191.44.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:16:6d:66:b3:2b:7a:48:96:ab:16:d2:d9:d5:53:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 1 06:11:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=778416fcd3766f49459c15ede3b35401ee2185b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:45:1b:f1:59:f3:ca:00:16:f8:6c:ee:dc:
c8:f8:42:57:f5:65:33:93:11:12:8e:7f:07:10:de:
eb:9b:f7:d1:b6:cc:02:f2:a4:bb:f9:76:68:e2:93:
10:e4:03:fd:d0:56:a9:0c:f7:8e:6c:0b:23:10:ce:
07:99:dd:bf:67:be:a4:dd:a0:ea:60:0b:21:c2:91:
4a:47:2a:42:f8:5f:32:15:07:56:84:c7:56:71:43:
2b:19:f7:1b:7f:9a:16:41:6c:df:02:47:ef:f1:e5:
66:2e:97:94:d6:2a:1f:69:f9:65:c6:18:0c:48:f7:
b8:85:e3:af:f4:f0:53:74:48:ec:ad:81:a9:c5:7e:
bc:1c:d2:4a:74:99:4f:0b:a5:22:f1:43:ad:21:84:
91:4e:ad:b3:16:74:93:51:70:cc:0f:6f:9c:0c:97:
3f:f3:af:b6:cc:4d:04:16:bd:06:2d:66:65:b2:0c:
3e:41:94:71:2d:4e:b8:49:81:bc:5f:c3:82:55:36:
4d:fb:a4:5a:d5:84:ab:b0:fe:d2:f3:31:91:57:e8:
b9:60:e7:0b:31:ef:22:86:78:f8:d7:54:3a:3d:6d:
9a:27:a4:4a:35:4a:68:97:59:ab:5d:17:58:b0:d8:
a0:2e:53:c7:36:b0:54:ad:34:8c:1c:a4:94:53:52:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:16:FC:D3:76:6F:49:45:9C:15:ED:E3:B3:54:01:EE:21:85:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/d4QW_NN2b0lFnBXt47NUAe4hhbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bb:de:b3:b8:54:47:40:e0:db:dd:8c:da:c3:6f:21:1a:03:
3a:f2:93:65:3f:55:7e:95:0e:87:be:7c:ab:42:b7:aa:a8:c4:
04:c0:63:d8:27:f5:5b:96:db:7b:d2:99:20:09:35:bb:ad:f9:
42:cc:b0:cb:bc:40:41:d4:7d:09:f0:8d:58:91:6b:45:95:cb:
d0:f7:75:47:d6:c8:2b:93:85:85:0b:d6:51:af:77:43:3d:5e:
6a:1f:27:e3:d9:32:57:11:79:4c:c9:a9:f3:30:1a:eb:7b:87:
e8:53:90:b9:13:6d:fd:74:34:51:98:65:08:a4:8d:92:6a:bb:
2d:c9:db:c0:17:ce:d9:28:ef:c6:11:db:f0:02:47:ff:d8:63:
a8:dc:37:4b:2a:d9:64:8b:87:9b:f5:2b:41:f8:c1:10:e4:a9:
ec:93:d1:7b:8e:02:00:98:86:6b:36:50:5f:8d:c5:26:d3:f0:
ef:2e:3e:33:32:68:93:c3:47:15:40:e1:fa:b2:f7:a6:1c:04:
90:b1:8b:ea:f9:1f:d4:a2:9c:23:d4:4a:be:90:a5:5e:b9:89:
84:41:4d:98:a2:78:14:1b:52:ed:ab:6a:ca:f5:50:7f:8f:e1:
a2:08:ef:26:12:37:73:a5:12:4e:b9:3a:04:7f:60:4c:fe:50:
9c:7a:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:55 2026 by rpki-client