Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gQkN2c9AQJMzRN32DVoFxZ-g6PU.roa
File: gQkN2c9AQJMzRN32DVoFxZ-g6PU.roa (raw, json)
Hash identifier: EO7xWeqDGIkC7UZj1ejAHDvRpv3+5q8A7Q8vCIFo004=
Subject key identifier: 81:09:0D:D9:CF:40:40:93:33:44:DD:F6:0D:5A:05:C5:9F:A0:E8:F5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FC8848728FD9EB25998C8F75317282517
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gQkN2c9AQJMzRN32DVoFxZ-g6PU.roa
Signing time: Mon 03 Aug 2026 16:45:56 +0000
ROA not before: Mon 03 Aug 2026 16:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 189.12.50.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:84:87:28:fd:9e:b2:59:98:c8:f7:53:17:28:25:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 3 16:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81090dd9cf4040933344ddf60d5a05c59fa0e8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:d6:b9:34:da:5c:42:0e:bf:f2:f9:f7:42:
c6:e3:c0:04:80:30:f3:97:0a:2c:23:ad:37:8a:da:
83:f6:bf:14:41:80:48:91:00:83:55:1e:2d:ea:2b:
17:85:d7:49:6f:e8:e3:5e:dc:a1:cd:58:a4:b1:c3:
39:85:b9:b7:af:87:a7:89:13:af:6c:f9:f0:a8:0e:
ae:a7:06:a5:31:df:ff:6e:5d:bb:84:8a:e7:64:38:
df:bf:49:34:d5:0c:5b:50:f6:95:0a:85:b2:bc:f9:
fc:36:e3:fa:d3:a7:ea:80:80:18:3e:03:a1:9d:9d:
bb:55:57:9f:8b:c5:bf:b4:e5:e3:61:c5:e3:0a:e2:
ba:5c:01:7c:f8:a4:e6:a4:ea:5f:bd:2d:6d:93:a6:
62:d9:4d:eb:36:e3:8a:3d:2b:9d:7a:3e:e8:bc:9a:
e4:be:c7:84:b1:90:d6:f2:e1:4e:33:ff:ce:43:21:
45:c1:88:fc:72:b7:a4:54:77:da:a1:b8:7a:0f:bc:
7b:dd:19:e8:f4:2d:b8:11:7d:a1:dd:3a:cf:d9:49:
1b:67:0d:c9:3d:9f:bb:68:a3:50:09:d2:3c:26:a4:
19:29:c7:c2:22:5e:89:fd:28:ad:88:75:cd:d9:ac:
5e:d1:fc:ce:8d:f6:bc:d9:6e:99:13:dc:64:b6:e1:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:0D:D9:CF:40:40:93:33:44:DD:F6:0D:5A:05:C5:9F:A0:E8:F5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gQkN2c9AQJMzRN32DVoFxZ-g6PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.50.0/24
189.12.53.0/24
201.14.208.0/24
201.14.213.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:28:fa:ae:67:41:da:33:07:c8:38:65:71:81:03:0e:ad:48:
0a:5d:9b:2e:e2:a3:b4:d9:be:f4:5e:49:46:e7:21:4a:83:9f:
15:c7:06:25:71:ff:58:35:f2:36:1a:5e:d1:f5:d4:d8:fb:d0:
62:fc:af:1f:bd:7f:a1:10:81:1d:b7:dd:8d:70:4e:4e:32:42:
02:db:87:1c:9b:67:34:cb:5e:ff:f5:09:39:d6:90:60:52:52:
c5:b8:a7:6a:1d:4c:7e:d0:25:19:aa:e3:80:6c:85:c8:e3:81:
1e:36:04:99:95:fb:ac:09:20:a4:34:15:50:90:86:b3:34:f9:
a9:e1:7b:b8:4e:5d:98:ec:8e:52:45:37:2e:60:24:3d:e5:d0:
73:c2:02:5b:a9:6b:fd:17:bd:a5:c6:e8:97:22:88:e5:c0:ee:
8f:d8:04:7b:31:69:eb:57:7d:b1:dc:30:bc:d0:7a:e7:7c:61:
50:20:6d:b8:8d:2f:8d:4c:c1:ef:fc:f6:5f:64:96:43:30:b6:
8d:d9:2c:fe:f3:e5:09:aa:e0:6d:d3:bd:c5:b7:dc:80:9f:b3:
0c:ed:92:71:fa:e6:d3:ed:52:84:c0:7e:48:d6:cb:ea:50:3f:
b0:13:ad:82:fd:36:03:48:03:78:e2:f1:b3:b0:ce:c2:e5:aa:
00:d5:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:30 2026 by rpki-client