Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/koEWngLWgtrJ4HO2ityO8noYPhk.roa
File: koEWngLWgtrJ4HO2ityO8noYPhk.roa (raw, json)
Hash identifier: kxjhVkndELXalSiY6JtaCDnC77NzfAz8lL/IGNYaDN4=
Subject key identifier: 92:81:16:9E:02:D6:82:DA:C9:E0:73:B6:8A:DC:8E:F2:7A:18:3E:19
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FAEE24EC99A89C2E33B9400C06D133058
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/koEWngLWgtrJ4HO2ityO8noYPhk.roa
Signing time: Wed 29 Jul 2026 17:18:14 +0000
ROA not before: Wed 29 Jul 2026 17:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 200.165.19.0/24 maxlen: 24
201.24.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:e2:4e:c9:9a:89:c2:e3:3b:94:00:c0:6d:13:30:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 29 17:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9281169e02d682dac9e073b68adc8ef27a183e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:0f:78:c1:71:4c:83:5c:13:8e:b3:75:c5:
3f:7c:36:43:68:e6:97:01:ba:9c:06:ad:b1:4a:24:
ec:45:4a:13:a8:a6:30:a2:17:07:90:ef:8e:b6:1c:
ea:2b:c2:a8:9c:04:6e:f7:bd:3e:44:14:e8:2a:11:
e5:89:73:da:c8:af:31:df:67:57:d7:5b:ed:d1:f1:
f5:bd:94:31:f2:ae:df:04:f4:14:4a:cb:4c:10:72:
2e:4c:b6:42:7b:ea:cd:c8:64:fb:f0:20:06:a9:a2:
76:d0:55:91:79:0a:a7:a7:d2:cd:ab:3b:9d:f8:ed:
b6:8c:3d:40:28:d3:ce:95:0e:0d:90:48:c2:78:c9:
25:e6:56:59:e8:7c:e1:e8:65:2e:28:00:69:13:e9:
a9:c1:9c:9f:5e:06:55:b3:0e:93:38:d7:51:61:b4:
18:0b:12:50:82:63:37:20:9d:73:70:57:7f:1f:7e:
33:22:6f:14:89:4b:4f:59:b7:32:ec:14:d7:ca:74:
5a:23:a0:5e:f7:89:30:0e:78:f3:af:32:dc:b3:e7:
03:b5:b5:f3:0f:68:7e:16:34:00:5d:b2:39:0e:7e:
a5:ba:4b:95:be:28:72:2d:11:81:84:58:cf:33:7d:
8a:94:23:4c:9b:24:81:95:59:aa:d9:f6:a0:a9:22:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:81:16:9E:02:D6:82:DA:C9:E0:73:B6:8A:DC:8E:F2:7A:18:3E:19
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/koEWngLWgtrJ4HO2ityO8noYPhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.165.19.0/24
201.24.206.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d4:cb:5a:ef:86:45:2a:f6:2c:91:42:c7:a8:48:c6:67:03:
a5:7c:06:4d:55:a0:30:98:ef:d4:7f:ae:83:15:bc:f6:b3:7f:
28:a3:09:90:a2:06:41:a1:83:3c:f0:65:2e:e0:31:90:20:ad:
61:27:11:9b:33:96:87:d4:bc:f4:77:9b:ca:10:79:fe:50:d1:
1f:92:bc:5c:b6:07:0a:7e:bf:b3:17:9c:00:9e:2b:27:d6:40:
83:14:b5:c1:73:b6:f9:cb:4a:72:3d:9b:bb:be:24:31:ad:3e:
7e:e5:cf:a6:0b:12:53:86:50:59:5b:95:4c:64:c0:fb:74:91:
f9:8c:1d:98:14:07:72:b7:fa:b3:b8:9f:d0:a7:cf:f3:5a:72:
a3:f2:61:bb:cd:c4:ed:0a:f9:79:76:3d:14:15:d1:7c:ee:fc:
d7:f2:9f:7e:65:ea:76:b1:5b:e2:d6:fa:47:48:bf:25:fd:fd:
e6:05:c8:80:5c:e9:95:f1:cf:89:59:35:f7:14:d9:88:ae:60:
60:81:06:36:24:2e:78:af:1e:c9:ee:9a:88:5d:c4:81:b9:3d:
02:ce:82:6d:d1:35:f4:22:fb:0f:cb:50:81:db:58:23:9c:39:
ae:be:fc:22:1c:d0:4f:d4:44:5d:6c:e7:76:67:a8:d5:4d:67:
a3:5c:22:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+u4k7JmonC4zuUAMBtEzBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzI5MTcxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjgxMTY5ZTAyZDY4MmRhYzllMDczYjY4YWRjOGVmMjdhMTgzZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HYPeMFxTINcE46zdcU/fDZDaOaX
AbqcBq2xSiTsRUoTqKYwohcHkO+OthzqK8KonARu970+RBToKhHliXPayK8x32dX
11vt0fH1vZQx8q7fBPQUSstMEHIuTLZCe+rNyGT78CAGqaJ20FWReQqnp9LNqzud
+O22jD1AKNPOlQ4NkEjCeMkl5lZZ6Hzh6GUuKABpE+mpwZyfXgZVsw6TONdRYbQY
CxJQgmM3IJ1zcFd/H34zIm8UiUtPWbcy7BTXynRaI6Be94kwDnjzrzLcs+cDtbXz
D2h+FjQAXbI5Dn6lukuVvihyLRGBhFjPM32KlCNMmySBlVmq2fagqSI5DwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJKBFp4C1oLayeBztorcjvJ6GD4ZMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEva29FV25nTFdndHJKNEhPMml0eU84bm9ZUGhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyKUTAwQA
yRjOMA0GCSqGSIb3DQEBCwUAA4IBAQAB1Mta74ZFKvYskULHqEjGZwOlfAZNVaAw
mO/Uf66DFbz2s38oowmQogZBoYM88GUu4DGQIK1hJxGbM5aH1Lz0d5vKEHn+UNEf
krxctgcKfr+zF5wAnisn1kCDFLXBc7b5y0pyPZu7viQxrT5+5c+mCxJThlBZW5VM
ZMD7dJH5jB2YFAdyt/qzuJ/Qp8/zWnKj8mG7zcTtCvl5dj0UFdF87vzX8p9+Zep2
sVvi1vpHSL8l/f3mBciAXOmV8c+JWTX3FNmIrmBggQY2JC54rx7J7pqIXcSBuT0C
zoJt0TX0IvsPy1CB21gjnDmuvvwiHNBP1ERdbOd2Z6jVTWejXCKP
-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:22 2026 by rpki-client