Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/llN3E2Mq9ut1NzmwxjGNSOaSK1k.roa
File: llN3E2Mq9ut1NzmwxjGNSOaSK1k.roa (raw, json)
Hash identifier: a+srUL4+yGtFks433dai1MD1OPvejX+iUjzaMKHBPtY=
Subject key identifier: 96:53:77:13:63:2A:F6:EB:75:37:39:B0:C6:31:8D:48:E6:92:2B:59
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F75B132CFC23FC98058F930A49E77BF12
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/llN3E2Mq9ut1NzmwxjGNSOaSK1k.roa
Signing time: Sat 18 Jul 2026 14:46:14 +0000
ROA not before: Sat 18 Jul 2026 14:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152930
IP address blocks: 189.31.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:b1:32:cf:c2:3f:c9:80:58:f9:30:a4:9e:77:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 18 14:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96537713632af6eb753739b0c6318d48e6922b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:f8:a5:2d:c3:ac:be:b6:6a:0c:50:0c:0f:
c6:8c:35:d7:d6:89:52:79:45:d7:9d:fa:60:63:9b:
de:3d:22:b2:f6:61:33:2e:33:76:e5:82:b2:fd:77:
d3:53:97:d2:a6:36:d7:50:2e:46:d6:46:8c:4e:f7:
a0:46:46:40:1f:2b:22:a7:ea:ee:03:06:90:f0:a0:
11:45:2f:2f:d4:99:86:2d:1a:25:1e:a5:b8:f0:ab:
20:54:1a:76:1d:c4:57:5f:2e:b5:8d:99:8b:cb:b7:
97:27:07:84:e5:ff:07:cc:fc:5d:26:39:15:49:8f:
e6:ec:d9:3d:6b:5a:82:60:c6:e5:59:c0:d7:72:b0:
b9:c6:ca:04:b1:27:b1:22:d9:47:2e:bb:41:49:30:
7f:b0:74:70:a9:fb:90:86:be:6a:9b:a8:14:25:29:
3d:e6:12:ef:23:28:91:a0:4e:e5:55:aa:44:10:5f:
16:4f:6f:53:4a:61:6e:ae:94:64:b1:4c:12:ba:3d:
57:8a:78:7c:01:bd:8c:34:08:06:94:69:25:ad:69:
e8:b9:e6:00:96:c9:b4:e1:f6:05:10:9b:cd:8c:db:
f3:39:b7:8d:69:23:d2:f1:f3:51:8c:d4:e0:b9:28:
84:25:03:97:c5:da:c9:6e:a4:74:1a:21:ff:2b:a3:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:77:13:63:2A:F6:EB:75:37:39:B0:C6:31:8D:48:E6:92:2B:59
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/llN3E2Mq9ut1NzmwxjGNSOaSK1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:dd:1b:e6:34:30:3a:0b:73:4e:93:27:1e:6f:b4:91:95:21:
15:e4:33:b8:2b:cf:63:ee:f0:c4:f3:ce:98:90:b9:e2:93:4b:
76:da:4a:50:3d:e7:53:f7:b5:cd:91:80:42:52:21:b2:aa:42:
9f:d4:e3:10:fa:c7:13:f8:83:5c:57:37:16:45:8a:e2:7d:b8:
17:fb:7a:29:77:60:92:64:f3:d6:9c:33:fc:66:50:81:0a:bf:
33:eb:12:9c:c9:83:70:b0:23:af:bb:9e:58:b2:71:c4:dc:c0:
84:6c:f2:a6:ea:e4:50:65:e5:37:c2:55:e9:45:71:6b:d5:e5:
65:49:76:03:83:f1:e4:19:ac:41:18:65:ac:1d:2d:a5:0f:c1:
25:39:00:d0:dd:54:bc:96:60:6c:3f:bd:48:df:b5:f3:2d:0a:
74:55:4e:8d:0c:4d:df:43:fb:ec:22:d6:ba:20:74:0b:cf:24:
f7:1f:bf:4c:16:71:4b:87:7f:a9:33:ad:b3:05:b7:8c:be:50:
1a:10:db:e4:04:2d:ae:30:2a:a2:7a:fd:f8:ee:f8:72:2d:f3:
ff:ff:b0:9c:81:97:bd:e3:0c:0c:c4:b7:c7:3d:87:d6:f0:00:
d5:3f:6b:f4:91:c0:b5:54:d7:81:03:44:53:d9:a3:a7:a6:76:
9f:23:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:54 2026 by rpki-client