Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/igEik0sp0Ab413AX9xT793MGfoo.roa
File: igEik0sp0Ab413AX9xT793MGfoo.roa (raw, json)
Hash identifier: rQZsAvFJiZrs7OyOLFh0xVb+4qzJXGkATE6UfD72oBY=
Subject key identifier: 8A:01:22:93:4B:29:D0:06:F8:D7:70:17:F7:14:FB:F7:73:06:7E:8A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0AADFE5D21A0F181618D675B8BE50F6B2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/igEik0sp0Ab413AX9xT793MGfoo.roa
Signing time: Wed 16 Sep 2026 15:39:55 +0000
ROA not before: Wed 16 Sep 2026 15:39:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 189.12.48.0/24 maxlen: 24
189.75.182.0/24 maxlen: 24
200.102.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:df:e5:d2:1a:0f:18:16:18:d6:75:b8:be:50:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 16 15:39:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a0122934b29d006f8d77017f714fbf773067e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:5a:75:7b:79:05:11:ce:36:fe:ef:20:de:
da:a0:ed:e5:3c:61:8f:2a:43:61:4a:b2:41:a5:4d:
ac:52:1e:2e:42:4f:88:62:b6:1f:45:df:27:fc:9d:
2c:d1:6e:dd:9c:44:4e:82:4d:8b:0b:6b:9c:6a:37:
b8:8e:bb:ae:fe:39:63:40:a1:a4:ad:d2:72:a7:e1:
73:61:e8:5a:bf:1a:89:4a:8c:7f:c0:d4:8e:5c:ee:
a2:5e:79:6f:db:71:d5:15:d7:81:fd:34:83:bd:23:
1e:de:17:af:d6:6d:e3:5e:3e:c4:14:aa:98:05:c5:
d0:be:a1:ad:c0:e0:9f:f5:c2:f9:16:4b:e7:df:f1:
28:d9:e7:37:bf:e0:01:6e:64:2c:98:79:f9:7e:db:
49:fd:aa:1f:80:4e:c1:ee:31:ef:92:1b:a4:61:10:
4b:42:87:1e:9d:f0:87:dd:b2:b0:e1:6c:ac:fc:cd:
68:91:55:f1:61:bc:1c:47:b7:4e:ac:48:80:df:dc:
e5:27:4d:ff:8f:ff:3a:bf:ec:37:ec:0f:e0:bd:a6:
0b:7b:cf:9e:6f:30:a1:de:a5:44:a5:d9:d5:55:7a:
51:fb:94:12:a1:6d:e5:3a:72:3e:33:ba:e5:f1:ac:
e2:cc:ab:de:ac:a3:46:92:c3:9f:84:c4:b8:55:30:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:22:93:4B:29:D0:06:F8:D7:70:17:F7:14:FB:F7:73:06:7E:8A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/igEik0sp0Ab413AX9xT793MGfoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.48.0/24
189.75.182.0/24
200.102.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:77:cc:56:60:dd:df:bb:41:97:b3:99:03:94:bd:2d:e7:21:
8a:f4:c9:c2:bb:54:2c:5b:51:5e:6e:62:e5:d8:8e:f0:f7:6b:
0f:05:6b:18:fd:aa:cb:e6:6d:1a:e8:4c:8a:1b:65:1d:1e:bf:
d8:7a:3d:ac:b0:c5:89:05:31:a2:34:21:d2:51:a2:90:26:02:
84:b0:61:a2:f7:ff:a8:e4:f2:6c:07:a9:ab:15:5c:0c:a0:02:
ee:62:4d:f2:bc:d6:3a:e4:f0:d2:34:9a:35:3f:24:32:82:5b:
11:61:31:83:61:c8:41:cd:6e:3e:e5:86:dd:5e:79:a5:09:35:
a7:64:e3:f9:0e:c9:35:d5:d4:56:c4:e3:e7:a4:cb:23:50:da:
6e:bf:5d:c3:00:1c:f1:9b:71:8a:9b:e6:8d:27:04:9e:9c:99:
77:19:e0:bc:06:72:3a:a7:11:07:cd:31:9e:48:a5:da:9a:1e:
85:19:77:de:de:c8:61:e9:97:e0:d6:5b:cc:97:35:ae:0d:93:
d7:12:64:43:ec:d6:1c:dd:7a:fb:39:72:e3:29:f8:cb:90:d1:
e1:02:99:fe:c2:79:8b:e8:c1:2a:ec:74:28:14:c5:96:47:82:
f0:04:37:30:ec:ae:b9:0a:eb:07:a9:81:8a:33:b7:7a:a2:c8:
d9:ae:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:47:58 2026 by rpki-client