Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l4w9NU5U78BhvXUIIvJMQok-u_Y.roa
File: l4w9NU5U78BhvXUIIvJMQok-u_Y.roa (raw, json)
Hash identifier: w9pbBxamvvTn6bFUCogBbMMbva3IaOWJp61hdoOdIGI=
Subject key identifier: 97:8C:3D:35:4E:54:EF:C0:61:BD:75:08:22:F2:4C:42:89:3E:BB:F6
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019CAF85CCF2FA9E7E6582B8C4E8C4D18D9D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l4w9NU5U78BhvXUIIvJMQok-u_Y.roa
Signing time: Mon 02 Mar 2026 17:08:27 +0000
ROA not before: Mon 02 Mar 2026 17:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 74.112.152.0/22 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:85:cc:f2:fa:9e:7e:65:82:b8:c4:e8:c4:d1:8d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 2 17:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=978c3d354e54efc061bd750822f24c42893ebbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:45:c8:32:45:5f:9e:7e:b9:2a:9d:2e:31:12:
22:d2:dc:69:74:db:85:9b:f4:80:c7:b0:c6:f2:f7:
f2:ae:18:4a:7b:94:d9:d8:b7:b3:e3:58:76:02:b8:
b5:65:47:eb:63:0d:29:dd:91:4a:1c:7e:00:f0:aa:
04:a3:e0:c7:87:77:0a:d6:52:88:a6:1b:be:22:87:
4a:50:6c:92:85:bb:41:62:af:91:7f:c8:55:79:aa:
76:ad:80:9a:0a:40:60:ee:f6:4e:85:5e:c5:98:a7:
21:db:53:d4:a6:45:1f:8e:ae:75:aa:75:9f:e1:fc:
9d:67:47:02:7c:ae:2a:64:80:ea:43:7c:3e:5d:18:
bf:30:3d:f0:15:60:26:e3:a5:7c:0d:6c:09:13:aa:
6c:17:a1:57:da:8e:18:c4:f3:80:eb:c7:98:c0:a9:
6f:6f:b8:30:db:a4:68:f9:5f:6f:85:c5:a3:2d:5c:
1e:50:55:ea:4a:6a:e1:aa:5a:2a:e6:bd:a5:0c:da:
33:e5:31:15:31:ad:9a:cd:64:55:31:00:f2:4d:8e:
a2:c6:5e:74:4e:63:ec:bb:06:4e:ba:11:01:61:62:
4e:c1:37:a5:bd:30:c8:05:1b:bb:70:2f:ec:93:52:
ec:74:33:8d:72:c6:04:be:8b:95:7a:4a:a6:32:f7:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:3D:35:4E:54:EF:C0:61:BD:75:08:22:F2:4C:42:89:3E:BB:F6
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l4w9NU5U78BhvXUIIvJMQok-u_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/22
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
38:6d:db:35:41:08:16:49:16:bb:73:3d:68:72:0b:8f:23:f5:
f1:35:e5:9d:7e:42:59:85:99:30:2d:2b:ff:3c:b2:c5:26:a1:
a2:2f:7d:39:60:68:e5:a1:fb:e0:dd:87:41:48:09:f3:97:83:
78:b1:2f:be:e8:62:4e:18:2f:e4:81:4c:b8:4b:dc:97:f4:46:
98:54:23:16:ed:1f:36:b4:da:93:a7:ed:da:02:f8:4e:02:62:
44:12:26:ff:db:d1:1b:8f:69:35:b5:29:84:d1:c6:7b:d4:62:
13:49:2d:3e:91:a4:a7:4e:bd:af:b9:70:9b:e8:28:ab:26:2a:
15:d8:be:dd:7c:21:68:ab:ec:83:7e:47:c7:b3:6c:4c:2e:b3:
0d:02:4b:ff:16:de:94:98:fe:db:94:ed:c8:63:24:da:1f:4c:
57:d2:a0:aa:d2:3e:66:04:81:21:59:a5:0a:81:2f:58:98:cb:
a5:0f:13:0f:9e:18:08:ae:98:cd:74:98:2f:00:ec:a5:a6:e0:
0f:04:15:31:bf:eb:ce:4f:60:7e:fd:d9:81:9a:a6:c5:bf:19:
48:3c:bb:79:b2:fa:89:ee:5b:96:61:f1:90:90:d9:9e:c0:53:
80:54:fa:0a:23:03:38:22:cf:2f:5f:33:fc:29:fe:f4:70:9b:
74:6a:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 06:28:30 2026 by rpki-client