Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ls6I3aHS_wtq4PAhi82jruIM9-w.roa
File: ls6I3aHS_wtq4PAhi82jruIM9-w.roa (raw, json)
Hash identifier: 7Yk5gKKjEJIXQt5/Hqx3gbVNX94AQmbmk1wB/TqyfeY=
Subject key identifier: 96:CE:88:DD:A1:D2:FF:0B:6A:E0:F0:21:8B:CD:A3:AE:E2:0C:F7:EC
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0E8BAD9A1F7B089BF5DEDBE8D6815019C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ls6I3aHS_wtq4PAhi82jruIM9-w.roa
Signing time: Mon 28 Sep 2026 15:55:54 +0000
ROA not before: Mon 28 Sep 2026 15:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55821
IP address blocks: 124.158.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:ba:d9:a1:f7:b0:89:bf:5d:ed:be:8d:68:15:01:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 28 15:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96ce88dda1d2ff0b6ae0f0218bcda3aee20cf7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:aa:86:8f:50:0b:96:1f:ea:e4:4b:df:4e:
a9:bf:27:36:4d:82:84:7b:af:31:8c:08:b0:12:99:
59:d2:42:cb:31:92:dd:a8:6b:bb:38:7a:bd:80:c4:
47:62:33:69:2c:d0:4c:eb:41:d4:22:d3:b8:1e:3e:
23:89:d8:50:76:a8:72:db:ce:09:19:fd:0e:29:8d:
f0:c2:02:7a:d4:13:8a:78:c1:90:46:66:ac:db:27:
5c:43:3a:de:a9:f7:ab:88:51:e6:f9:4c:78:cf:a0:
e3:77:c1:54:b8:7d:c8:e8:ae:9a:a4:55:9d:96:c4:
24:7e:7f:f5:8e:99:8f:44:30:01:95:96:69:d8:17:
74:c7:66:c4:e7:de:55:c0:7e:69:86:cb:d5:0e:66:
13:0f:e6:38:aa:58:b1:7c:c8:f2:3c:69:f3:25:b0:
27:ad:36:5d:d0:2f:f4:93:de:69:5e:26:ee:39:98:
31:3d:7c:c1:9f:55:a3:ca:43:52:44:12:9d:e4:69:
cc:11:59:b8:5c:31:5a:8d:81:75:4d:7b:c4:11:92:
96:77:fb:81:a2:66:a2:96:68:78:1c:65:46:4c:66:
0d:69:d1:77:28:33:89:73:de:b7:eb:fe:18:65:e3:
2c:7e:c1:0d:d5:75:03:53:cd:bb:4a:50:7d:87:4c:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:88:DD:A1:D2:FF:0B:6A:E0:F0:21:8B:CD:A3:AE:E2:0C:F7:EC
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ls6I3aHS_wtq4PAhi82jruIM9-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.115.0/24
Signature Algorithm: sha256WithRSAEncryption
55:08:ed:87:41:74:be:81:99:84:bb:82:24:a3:5c:c5:43:5d:
5c:8c:49:7d:64:3f:82:99:a7:68:45:21:e4:cf:1d:75:98:2b:
9f:28:15:61:54:fb:d1:b3:99:1b:67:7d:47:ce:76:f0:30:1b:
de:3b:9a:e8:2d:c4:ca:6d:23:3f:dc:96:0f:4d:e5:b7:5f:3a:
32:67:11:6a:fd:55:05:b3:80:8e:39:51:b3:fd:1c:bb:0e:55:
a7:2c:2a:53:c3:5c:21:60:b2:28:69:39:b6:e3:d9:99:9f:f3:
11:71:90:2d:89:5d:1a:8c:91:07:e4:e1:c8:ec:84:fb:8a:d7:
95:e0:de:a5:b8:ef:44:22:52:8c:c4:5f:93:80:a3:c8:7c:01:
0e:95:66:aa:4f:e4:26:df:0f:5a:28:50:a3:b0:52:b1:29:3a:
f6:c0:39:b4:06:f5:92:46:85:00:e1:b7:eb:98:4b:20:9d:ce:
c1:f2:c6:a0:60:e8:32:ea:21:eb:8e:0c:b2:84:08:1e:fb:19:
05:4d:fb:63:c5:98:ec:3d:22:df:fa:ce:61:28:76:e4:0f:e5:
e1:a2:c0:df:6c:f6:62:59:3e:f9:59:a2:f6:49:58:c1:5f:04:
32:66:ce:63:56:f1:20:c5:61:83:18:83:58:d7:eb:b7:91:87:
2b:81:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:47 2026 by rpki-client