Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jmDlYYNN4V6vT7J_kftls-vf9HI.roa
File: jmDlYYNN4V6vT7J_kftls-vf9HI.roa (raw, json)
Hash identifier: 4KXrWT/2Y9SrDtC22vqvYWrzPqMCaa5mcu0y3TZLZ+w=
Subject key identifier: 8E:60:E5:61:83:4D:E1:5E:AF:4F:B2:7F:91:FB:65:B3:EB:DF:F4:72
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0A10063DEA0B8D2F13CBA6693EAFA725A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jmDlYYNN4V6vT7J_kftls-vf9HI.roa
Signing time: Mon 14 Sep 2026 17:39:12 +0000
ROA not before: Mon 14 Sep 2026 17:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 77.111.107.0/24 maxlen: 24
89.106.14.0/24 maxlen: 24
89.106.22.0/24 maxlen: 24
189.75.178.0/24 maxlen: 24
191.222.37.0/24 maxlen: 24
200.165.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:00:63:de:a0:b8:d2:f1:3c:ba:66:93:ea:fa:72:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 14 17:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e60e561834de15eaf4fb27f91fb65b3ebdff472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:19:d4:9c:bf:1e:a4:b7:55:ee:1a:33:d3:1c:
fc:d9:ab:a0:2d:00:87:83:75:ef:0c:49:27:4f:8f:
7c:81:56:47:1e:f3:45:f2:c8:c8:6f:1f:81:53:14:
72:6b:dc:c3:fe:d3:dc:f8:06:eb:ba:25:7b:51:06:
35:d0:88:e0:05:32:d8:bb:58:8f:06:43:5b:13:b0:
bc:e6:fe:c7:d2:59:d2:55:9f:30:76:3c:17:9f:97:
e8:52:8d:1d:23:e8:43:99:11:6e:97:7b:c0:1b:9c:
f3:89:8c:18:c7:8f:a0:68:27:a7:91:da:9c:22:aa:
e0:25:4f:c8:71:59:e2:29:8f:6b:d5:54:3b:2f:be:
f1:41:67:21:a0:58:21:6c:df:7e:f6:19:5d:d4:f4:
3e:26:7d:37:d2:7b:03:f7:a1:33:ab:e6:68:64:64:
b9:48:30:b4:4d:9f:d5:fd:dd:e2:4d:98:7c:5e:44:
5b:86:40:fd:17:e5:44:4a:b3:5a:d9:26:8a:dd:2f:
ed:d3:5f:17:04:ad:e2:55:c2:49:78:4a:9c:d3:95:
78:e1:d5:44:f5:e7:92:b4:4e:cb:8e:9b:8b:17:f6:
a3:48:20:57:b4:23:9f:68:de:7e:ca:64:90:f8:08:
f0:ab:d2:27:dd:51:56:7d:06:1b:92:b1:89:e7:3b:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:E5:61:83:4D:E1:5E:AF:4F:B2:7F:91:FB:65:B3:EB:DF:F4:72
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jmDlYYNN4V6vT7J_kftls-vf9HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.107.0/24
89.106.14.0/24
89.106.22.0/24
189.75.178.0/24
191.222.37.0/24
200.165.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:72:00:df:26:16:c8:fd:5d:69:99:2d:e3:91:d2:48:fe:d9:
8f:ad:2d:b2:83:05:23:dc:a4:7b:52:bc:c3:68:00:b4:65:79:
aa:31:b1:b1:54:28:c5:9e:d1:c3:0a:ee:21:20:d8:2f:b2:5b:
d7:34:ea:d1:3f:8b:4f:07:65:a6:48:b4:92:e4:25:1c:fd:1e:
b9:17:d3:40:98:0b:b5:f9:6f:d8:83:ce:95:62:41:b2:08:d5:
7e:e0:bd:64:28:d5:35:a3:ef:43:e5:10:96:03:e5:83:ec:45:
cf:3e:d6:aa:4b:d9:c6:0c:e8:24:95:84:d1:7c:f2:63:9e:d0:
64:a3:df:2c:57:e7:96:8a:07:ad:1d:31:fd:50:14:b7:0e:f1:
a3:d5:8c:14:9d:99:f9:13:94:52:c6:53:4b:48:34:a9:d6:37:
46:02:8b:88:45:03:4d:e2:70:fc:ad:be:7d:28:63:36:93:b9:
26:09:2f:a7:83:6b:66:a6:fa:9a:34:a3:a5:d4:94:e9:d6:1c:
7a:66:eb:6d:3c:17:07:0b:fc:bc:76:e2:94:25:9d:26:be:b5:
d8:f1:e4:de:c9:f4:f2:36:0a:ab:ce:1a:d1:10:a1:80:78:34:
b7:6d:8a:bd:b6:2a:96:70:65:31:97:14:74:21:11:70:ef:fe:
16:7a:60:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:47 2026 by rpki-client