Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jwbKOqfLe6nxzQ8J30pJI1HRhgI.roa
File: jwbKOqfLe6nxzQ8J30pJI1HRhgI.roa (raw, json)
Hash identifier: nc3zjsKjHiCA5ED3W4sXoGCU8z+S3ts30v65/o5SGAA=
Subject key identifier: 8F:06:CA:3A:A7:CB:7B:A9:F1:CD:0F:09:DF:4A:49:23:51:D1:86:02
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FBE3A8CD2DF5480A94B841E3EAFFBE388
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jwbKOqfLe6nxzQ8J30pJI1HRhgI.roa
Signing time: Sat 01 Aug 2026 16:48:55 +0000
ROA not before: Sat 01 Aug 2026 16:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402276
IP address blocks: 200.102.89.0/24 maxlen: 24
200.181.80.0/24 maxlen: 24
200.181.83.0/24 maxlen: 24
201.24.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:3a:8c:d2:df:54:80:a9:4b:84:1e:3e:af:fb:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 1 16:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f06ca3aa7cb7ba9f1cd0f09df4a492351d18602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:e6:3e:b2:23:52:2c:99:18:97:88:87:e6:
d0:37:95:60:d9:ad:2a:25:17:b5:be:4a:58:3b:4b:
c9:54:2f:9a:27:5e:ab:98:10:90:52:d7:87:cd:95:
84:33:c9:bd:a9:55:29:29:84:0f:15:d5:f6:fc:8a:
3f:b9:ad:6b:ca:c8:51:d7:9b:5a:d7:75:c7:d0:d8:
01:06:ef:22:21:5e:2b:a3:89:e0:ea:ad:08:3a:51:
6b:bc:a2:34:ae:02:f0:7b:d4:97:5c:c0:ac:29:6c:
c9:1a:b9:76:b8:17:46:f4:0a:2a:01:10:ee:68:8b:
32:c2:57:e2:89:85:8d:58:a6:59:e3:69:63:a5:6f:
3d:0c:ad:2f:52:4c:99:c1:91:bb:93:3c:08:d1:68:
42:bb:5f:94:4a:f6:62:c5:57:4a:52:4a:00:f7:bf:
d5:2d:3d:ae:df:8d:b9:80:58:0c:01:8a:5d:f6:bd:
99:06:ac:fe:88:59:6f:5b:3a:6d:9d:57:ba:51:b8:
b5:f2:3d:7d:7c:30:23:aa:1e:fd:c1:3d:f4:b0:38:
d4:1f:61:f2:b3:71:ca:b9:e0:eb:84:fe:df:97:2c:
35:bd:db:b1:90:ad:57:ff:ec:ac:a5:fd:69:cf:8c:
92:c2:f5:78:4d:c5:68:bc:38:ed:e5:ee:83:ce:81:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:CA:3A:A7:CB:7B:A9:F1:CD:0F:09:DF:4A:49:23:51:D1:86:02
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jwbKOqfLe6nxzQ8J30pJI1HRhgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.89.0/24
200.181.80.0/24
200.181.83.0/24
201.24.200.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0c:b1:6f:20:84:91:3a:6b:ec:f9:b5:ae:46:3a:f2:f7:ff:
0b:4c:66:80:47:d8:ad:7b:3b:7d:c5:b1:a5:5f:0a:22:00:e5:
c7:fa:69:53:c7:b6:01:83:c1:a4:0b:83:d2:45:52:b4:4a:94:
7a:11:45:85:a3:24:ea:bb:3e:29:25:15:47:a7:83:b7:6b:9c:
fa:e8:04:16:2c:fa:22:35:f4:9f:94:c8:f1:8b:e2:78:98:69:
41:a7:58:5a:2a:19:a6:3b:b2:a6:9c:fd:c9:11:df:1c:0c:b8:
cb:e7:b5:11:0e:05:b9:16:5e:8a:b2:4d:49:8c:64:33:f4:f0:
21:15:29:fe:5a:0c:23:f1:85:14:01:aa:d2:64:db:68:4e:2d:
d9:72:f9:33:73:63:dd:d4:3b:5e:d7:bd:88:4e:83:bd:a0:ab:
4e:0c:fc:e3:d6:10:35:0a:eb:9e:7a:36:dc:11:3f:67:d2:e1:
b7:12:cc:87:8f:e2:06:87:7e:7e:c4:fd:c4:04:de:13:ed:48:
dc:59:89:1a:e2:6d:82:9d:95:6a:e5:77:99:59:c3:b1:46:18:
09:3e:43:f6:bd:e1:84:1e:ec:b9:23:47:88:68:3a:d3:84:f1:
0e:fe:7e:a0:8a:f3:ad:ef:aa:a6:64:ee:7f:8c:ea:8a:a6:21:
b8:1f:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:20 2026 by rpki-client