Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iqOI4DO2TycjWzLJZG_2YWrAEkg.roa
File: iqOI4DO2TycjWzLJZG_2YWrAEkg.roa (raw, json)
Hash identifier: U+eErq7hBaZpvg9PNI4tnPGPMf52fUfwlzSlnPrXmm8=
Subject key identifier: 8A:A3:88:E0:33:B6:4F:27:23:5B:32:C9:64:6F:F6:61:6A:C0:12:48
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FAEE9A2EB7EA684F2CC195F669F41B78A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iqOI4DO2TycjWzLJZG_2YWrAEkg.roa
Signing time: Wed 29 Jul 2026 17:26:14 +0000
ROA not before: Wed 29 Jul 2026 17:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 191.222.39.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.181.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:e9:a2:eb:7e:a6:84:f2:cc:19:5f:66:9f:41:b7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 17:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aa388e033b64f27235b32c9646ff6616ac01248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:32:06:db:00:fa:72:87:19:c4:41:76:84:
bb:00:86:29:b0:06:38:00:5c:cd:e5:18:df:26:4e:
60:f6:f3:b4:5b:a9:31:ab:b2:f8:14:c6:e7:59:cf:
f9:2c:55:82:ef:df:ad:97:de:16:33:32:18:56:13:
5f:54:f1:01:bf:8d:6a:e8:33:7a:bc:8a:1b:c5:99:
38:c2:da:ac:d8:bf:08:f1:b7:2f:4b:b7:43:1a:bb:
e2:36:eb:b7:34:9c:12:22:4e:29:8a:71:cc:7a:a1:
4b:78:73:72:be:64:59:ea:1e:fc:7a:05:c7:3d:bc:
65:69:37:b4:b2:d1:57:2c:81:99:0c:51:e7:53:ae:
66:df:fc:21:aa:c5:e0:9a:16:e2:01:64:c6:4c:a3:
95:f8:68:be:1c:27:40:29:ca:b5:97:ff:5a:3a:61:
be:b9:b2:74:a9:cc:88:86:37:86:3a:b4:49:2c:69:
67:72:4f:f5:ab:94:99:42:37:08:d3:1d:b2:e6:56:
36:38:23:2c:81:9f:fc:f0:e2:c5:04:e1:e2:96:55:
60:8c:20:69:92:80:38:91:06:16:6b:b6:f9:e0:74:
c5:1a:a9:77:7a:c8:cd:6f:29:c3:ed:3a:2c:55:4e:
28:c1:0d:65:d8:03:87:14:32:cb:48:75:0a:a6:71:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:88:E0:33:B6:4F:27:23:5B:32:C9:64:6F:F6:61:6A:C0:12:48
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iqOI4DO2TycjWzLJZG_2YWrAEkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.39.0/24
200.102.188.0/24
200.102.191.0/24
200.181.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:26:31:67:8d:37:6d:c6:35:c4:0d:cd:97:0e:97:6e:70:24:
8c:6e:46:41:d7:6d:57:4a:d2:dc:e6:27:b3:11:f7:e1:28:ea:
27:6b:93:f4:bb:b6:e1:f1:ea:58:90:1d:56:e1:35:59:7c:4c:
0a:53:ee:d7:0d:39:48:e4:fe:17:cb:ab:2f:7f:0b:0b:90:d3:
78:39:11:ea:c7:2e:48:94:94:9a:e7:54:f1:8a:ab:41:01:97:
5e:a2:ec:7a:4e:62:91:5b:24:16:a5:cf:d5:a0:d5:eb:75:de:
be:1d:4a:04:e2:71:9e:2f:ce:03:1b:40:cc:b7:7c:5e:df:0c:
08:e4:1e:65:ab:a9:1e:ee:92:ad:da:df:d2:da:35:4f:7d:4b:
f1:11:c1:f3:8c:9f:8e:c2:63:cc:52:f1:a1:56:ee:41:b5:21:
cd:c8:25:80:66:0f:42:15:57:53:87:b2:a7:97:3b:2a:ec:4a:
94:59:81:2a:a1:a0:bb:6e:2c:82:7f:a3:bf:61:9c:6a:2f:7f:
e8:06:0e:33:72:65:22:1a:ee:77:97:26:e9:6b:a3:75:49:3b:
c1:dd:6b:83:13:a1:bb:c7:c2:84:0a:f3:11:2a:9a:76:dd:37:
ea:f7:1a:3a:79:a0:6f:8b:fa:a2:bb:2c:cc:aa:f4:0f:29:d6:
c9:54:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:22 2026 by rpki-client