Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fS3r7B1zbv4bifmwJ0OqABo0m1w.roa
File: fS3r7B1zbv4bifmwJ0OqABo0m1w.roa (raw, json)
Hash identifier: 19kyeKk3eWwKset2tU7ztGJlSlTX34moGT7D5c4xzLg=
Subject key identifier: 7D:2D:EB:EC:1D:73:6E:FE:1B:89:F9:B0:27:43:AA:00:1A:34:9B:5C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FC8848617F8B110283D83504DADBA6FB9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fS3r7B1zbv4bifmwJ0OqABo0m1w.roa
Signing time: Mon 03 Aug 2026 16:45:55 +0000
ROA not before: Mon 03 Aug 2026 16:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 189.12.50.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:84:86:17:f8:b1:10:28:3d:83:50:4d:ad:ba:6f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 3 16:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d2debec1d736efe1b89f9b02743aa001a349b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:27:07:15:14:85:88:fc:37:57:3b:53:71:
b2:49:05:7b:93:b1:91:f0:ca:32:af:b1:03:05:63:
5b:5a:a2:47:12:1e:5e:cf:aa:45:5b:95:a8:5b:68:
fa:b6:31:96:a2:ab:c9:06:58:b8:55:34:10:c2:2b:
d4:b2:95:8e:58:17:fd:fb:5c:fe:a8:18:6e:4c:fb:
33:cb:36:58:b0:6e:36:6c:e0:30:3d:42:b0:35:75:
2e:c6:ff:fc:d6:76:c5:bd:c3:9c:dd:ea:13:6a:05:
6b:02:81:48:e2:ec:c6:c8:b9:56:f3:ae:72:49:fb:
c6:fd:18:5d:e4:88:62:04:19:9d:90:51:5b:7c:c1:
5e:f8:8e:2a:79:93:20:11:c8:59:0d:41:e8:40:b1:
ed:22:3c:51:84:20:7b:ef:ec:1f:10:30:89:93:1a:
af:f7:d7:ce:46:d7:6f:c7:a9:b5:31:5c:5d:88:2f:
30:77:15:39:a1:e9:72:4f:16:f2:db:1e:c1:1e:fb:
8a:24:db:f7:0e:94:80:d7:d0:f4:ae:ef:0f:1b:f9:
f4:c9:5a:5b:0d:03:9b:8d:a8:34:8b:6f:2a:11:03:
89:29:1f:68:e7:db:21:cc:4e:da:2b:9b:3e:4c:39:
16:f8:3a:99:d2:e4:98:f1:a0:a4:af:9b:cf:2b:b3:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2D:EB:EC:1D:73:6E:FE:1B:89:F9:B0:27:43:AA:00:1A:34:9B:5C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fS3r7B1zbv4bifmwJ0OqABo0m1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.50.0/24
189.12.53.0/24
201.14.208.0/24
201.14.213.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
81:48:a7:e9:4c:71:b6:1b:bf:f5:95:a1:55:34:a8:63:69:a5:
b2:7f:c1:a8:cc:f4:48:e4:55:ef:69:0d:1c:6e:24:4b:7b:c7:
c1:b1:8f:97:96:44:06:77:8f:01:5f:9f:c7:1c:c4:69:60:73:
90:b5:29:fe:81:e2:82:78:d5:f7:c1:04:8d:b8:af:96:82:9b:
b9:21:83:67:c0:fe:14:ad:7c:58:fe:d5:e9:2a:8d:aa:31:01:
7e:ff:b8:d8:f1:6b:17:7c:85:0f:f3:9a:e3:dc:67:b4:10:98:
24:09:6d:eb:af:10:95:b1:84:9d:92:50:9c:25:2e:29:c3:58:
1f:d4:ce:eb:ab:40:8d:c0:7f:96:5c:6d:69:ff:93:54:b5:c5:
69:c0:c7:71:81:69:ee:3c:18:3e:17:b3:d7:fb:06:f2:aa:61:
aa:88:95:a6:05:9e:80:4a:0b:88:7f:d9:3e:b9:f9:b8:d5:28:
5b:48:c3:7b:ff:ce:48:5d:d7:ac:ab:b3:bd:fc:01:16:69:21:
36:bc:ab:19:fe:02:7e:2c:a5:6a:d8:6d:0e:a8:13:be:48:3e:
6d:43:bf:95:00:3e:61:eb:ee:72:90:db:81:1f:b8:2e:4f:fe:
86:68:d6:e8:90:a3:90:b7:b3:98:6a:1d:6c:2a:56:27:ce:8d:
3f:28:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:49 2026 by rpki-client