Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i_n-t2GlfGvIx0VlnT7P5kjxRuI.roa
File: i_n-t2GlfGvIx0VlnT7P5kjxRuI.roa (raw, json)
Hash identifier: xis8YbmyA8lBwzyQDhFFBKu00ZIJ2Ar/O3oZhwjIqj8=
Subject key identifier: 8B:F9:FE:B7:61:A5:7C:6B:C8:C7:45:65:9D:3E:CF:E6:48:F1:46:E2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A01056A2D75223F1492FACF2F91519D201
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i_n-t2GlfGvIx0VlnT7P5kjxRuI.roa
Signing time: Mon 17 Aug 2026 15:28:28 +0000
ROA not before: Mon 17 Aug 2026 15:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 89.106.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:56:a2:d7:52:23:f1:49:2f:ac:f2:f9:15:19:d2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 17 15:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bf9feb761a57c6bc8c745659d3ecfe648f146e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:af:28:27:d7:26:cc:7a:c1:b3:3a:a7:b9:
12:ce:cc:1f:59:e7:96:2d:cb:d8:0f:d7:16:cf:17:
ec:e0:26:57:eb:44:e7:6c:43:d9:24:bc:ea:57:40:
71:73:0c:8a:a2:72:32:36:31:fc:78:f6:44:76:42:
23:c2:0c:40:b3:56:5d:eb:bb:30:8e:9d:45:1f:f4:
3c:fc:fc:32:5b:d8:ce:82:b5:83:aa:5a:34:87:67:
25:08:1d:dd:bd:d9:5c:d0:9b:e8:53:37:4d:ed:47:
59:ad:f1:8f:b5:67:e2:37:9e:68:94:9e:f7:ac:f2:
cd:0e:01:13:ce:d1:e4:6c:de:32:7a:c0:d5:6e:5c:
58:22:36:4f:84:f3:f5:64:49:c3:ea:22:2a:1e:48:
ed:bc:fd:f5:6e:19:da:44:29:9a:80:a3:fa:22:fe:
b4:94:10:27:29:b9:42:24:ae:ff:d8:4e:73:dc:9e:
7a:db:d3:7f:ca:d8:19:3e:a0:c1:8c:95:74:74:d6:
86:8b:1e:cd:ba:8a:b1:18:49:31:22:0f:07:3a:0f:
5c:26:2f:9d:71:eb:0b:49:00:e1:ff:39:69:31:87:
e6:23:65:10:70:9f:2a:f9:f9:00:1a:6b:df:67:9d:
e9:8f:b9:74:8b:cd:7d:f8:64:d0:49:8a:72:c4:9b:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F9:FE:B7:61:A5:7C:6B:C8:C7:45:65:9D:3E:CF:E6:48:F1:46:E2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/i_n-t2GlfGvIx0VlnT7P5kjxRuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.28.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3d:ed:f4:c3:f4:1b:a7:e3:05:13:b2:43:40:a0:3b:23:e5:
5a:29:de:77:f0:78:58:c4:3f:30:a7:72:76:45:cc:ee:47:11:
f2:a1:5d:d4:b0:53:fb:9f:48:b5:1f:18:bf:d5:41:26:62:35:
a1:19:d8:69:4d:5f:f4:e4:91:11:f8:5b:ed:bc:ed:b6:e2:47:
dc:6c:dd:74:78:e9:9f:6d:34:f4:a0:d0:85:93:fb:52:bb:c0:
2d:4c:2b:56:7b:a0:14:95:98:4b:a6:c4:60:57:57:8f:54:81:
ae:18:44:d5:be:80:3c:ce:7f:14:a8:fc:81:50:2f:c8:e3:43:
64:33:af:36:b7:dc:f3:5d:3b:07:f3:15:8b:fa:99:33:94:47:
ad:74:19:c0:9b:5b:4d:45:d7:eb:44:82:96:9b:f3:4b:02:78:
11:9a:0a:ac:25:79:0a:17:f0:00:7c:8f:1d:ab:14:b0:15:9d:
8d:5e:58:e2:80:26:f7:6a:fd:ea:65:53:40:c2:7b:49:e2:ce:
5e:60:48:47:9a:13:a8:19:4d:dc:ff:1c:fc:0f:ee:63:57:8b:
67:f0:dd:3b:61:d0:31:53:0c:86:af:71:0c:81:72:34:55:fe:
7a:f4:63:77:c0:b6:d4:d1:fa:ff:b0:7e:18:9e:fe:e8:d5:96:
fb:51:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:41 2026 by rpki-client