Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hy1VfGDLbwN091pNFXVeyXOPu9c.roa
File: hy1VfGDLbwN091pNFXVeyXOPu9c.roa (raw, json)
Hash identifier: SvoiNIgJSSTGkwOrZDIbTPexzZysUX6l6YiOkdhKUrE=
Subject key identifier: 87:2D:55:7C:60:CB:6F:03:74:F7:5A:4D:15:75:5E:C9:73:8F:BB:D7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A02514B0891EA3E9F25643CA6B4CA41258
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hy1VfGDLbwN091pNFXVeyXOPu9c.roa
Signing time: Fri 21 Aug 2026 16:08:27 +0000
ROA not before: Fri 21 Aug 2026 16:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4022115
IP address blocks: 89.106.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:14:b0:89:1e:a3:e9:f2:56:43:ca:6b:4c:a4:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 21 16:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=872d557c60cb6f0374f75a4d15755ec9738fbbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:b0:64:ea:c9:07:21:34:82:13:0a:b2:86:
5b:89:82:a8:3f:15:98:fb:e9:13:28:cb:b5:5d:68:
2e:37:43:5d:d9:2b:9b:e2:57:88:41:92:7c:c1:fe:
9e:cd:63:00:5e:f5:b8:e8:7e:25:05:96:34:b5:af:
7e:dd:b2:4c:b6:a8:72:f6:cf:a8:47:ef:59:8f:f0:
10:2e:38:98:4f:2c:27:a0:d6:82:98:f7:cc:f1:a5:
27:b6:59:1b:5d:d6:8e:84:c3:52:59:43:41:58:7a:
8d:eb:7e:f7:8c:38:95:5e:54:44:66:ef:a4:52:c3:
f8:ef:4e:0f:51:68:8f:dd:a7:55:d7:3b:fe:14:4e:
2d:96:f4:a0:64:50:ef:b6:ac:95:71:5b:cb:03:5a:
39:5e:e8:8c:1e:b7:c2:0c:ad:c2:1f:6d:88:9e:30:
2b:8e:9d:42:4c:bd:24:de:ad:3f:4d:9a:04:4f:c6:
72:0f:83:7d:d3:51:85:36:db:a4:8c:81:c2:36:aa:
00:f4:a1:3b:44:f9:35:44:96:bd:8e:f3:00:ec:f5:
d1:cb:d2:06:95:3a:de:82:99:c6:1c:ec:5b:76:bd:
21:b9:f1:c2:26:8c:13:a2:e6:85:ea:0b:3b:70:b5:
82:62:1c:30:c5:e9:8d:e1:30:de:4d:46:70:1d:3e:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2D:55:7C:60:CB:6F:03:74:F7:5A:4D:15:75:5E:C9:73:8F:BB:D7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hy1VfGDLbwN091pNFXVeyXOPu9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e0:27:42:84:1f:d5:ca:ab:0d:f2:8e:fc:af:76:8b:9d:b5:
e9:c2:e7:3c:78:f3:c3:87:e0:52:5d:39:e3:8f:da:82:df:b1:
09:f2:be:b1:1d:b1:70:82:30:86:e9:98:38:f4:56:fc:7b:a5:
fa:dd:2f:23:3c:85:56:5d:de:e3:7a:10:bb:c1:b5:89:fb:30:
1a:a0:56:83:cf:e3:c3:c7:ac:c7:17:65:7c:c1:dd:90:e8:66:
fb:d5:90:76:17:ee:fb:93:88:18:a7:92:95:bf:b2:d7:2d:e9:
97:49:d2:fd:5a:98:9f:a2:1c:08:21:1a:b1:e4:43:d1:a5:9d:
dd:fc:04:30:28:6f:8d:44:1a:44:3d:e5:f4:ed:e1:49:15:8b:
8a:ed:90:20:38:75:97:41:f1:6d:cc:69:f2:24:15:48:ae:2e:
45:a8:66:bd:ee:d0:76:f5:db:af:5b:db:d0:f7:de:8c:60:36:
ae:6a:79:1d:db:74:c7:d6:41:6a:71:73:b9:14:82:d2:82:1d:
bc:9b:09:8c:14:23:9d:4e:e3:2d:a6:f2:8b:07:9b:91:d0:ed:
91:23:90:a1:ed:5a:b4:38:a3:13:37:07:d6:cd:b8:55:e2:32:
a7:ce:5b:64:b2:e7:6e:fa:9f:cd:a5:61:cd:b0:84:74:2f:9f:
3f:6b:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:58 2026 by rpki-client