Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/n7K8By4LSuVWPsajv_YVl0SH84Q.roa
File: n7K8By4LSuVWPsajv_YVl0SH84Q.roa (raw, json)
Hash identifier: a9sppV+9aqXMYUgDmc2+0Mivqk0QhU5obbBSeTOSsUE=
Subject key identifier: 9F:B2:BC:07:2E:0B:4A:E5:56:3E:C6:A3:BF:F6:15:97:44:87:F3:84
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A174E2D8B7143B312F5AEC9507F8B4F601
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/n7K8By4LSuVWPsajv_YVl0SH84Q.roa
Signing time: Sun 25 Oct 2026 21:06:26 +0000
ROA not before: Sun 25 Oct 2026 21:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 89.106.28.0/24 maxlen: 24
200.165.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:e2:d8:b7:14:3b:31:2f:5a:ec:95:07:f8:b4:f6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 25 21:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fb2bc072e0b4ae5563ec6a3bff615974487f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:12:2d:6a:ba:c0:06:1e:e5:a1:ff:4e:d4:
ff:fc:e7:2b:96:ea:34:33:e2:71:71:09:7a:81:5c:
e8:01:52:64:e7:1d:0b:7b:08:3f:1c:b2:f5:9e:7e:
11:05:d0:d1:3c:6d:b8:31:7f:9b:0c:50:b6:4a:b2:
0b:6d:9e:9a:e5:95:6e:e6:b5:67:a0:52:13:ca:cd:
7f:b1:22:c8:7e:3a:ea:b5:d7:03:b8:f7:4f:37:1e:
bd:e9:4a:6b:e6:a5:88:59:ff:31:7a:fd:fe:a4:45:
21:e4:e0:55:ea:59:71:d8:4d:34:d4:0d:13:fe:58:
0d:8c:7d:b8:0f:70:da:f7:24:d6:4c:9a:2e:1a:4d:
bf:48:ae:0c:ca:af:8c:73:7a:2c:00:7c:39:b3:87:
31:54:17:d7:54:08:2d:bc:a8:c6:7e:f1:a6:53:5f:
f8:fa:3d:8d:2b:0b:61:e9:85:1b:90:93:16:0e:42:
c0:31:a0:a6:df:0b:d2:3f:e0:91:d3:7d:a5:01:48:
05:26:5f:6a:75:b4:fe:bd:96:68:d9:3f:96:aa:ab:
2b:1a:02:63:12:c9:65:19:ad:26:d0:65:7b:e9:d9:
8b:92:a5:fb:25:7d:6e:c9:fc:f2:1c:9b:5b:04:ac:
6f:30:e5:23:41:92:16:60:d5:54:40:88:84:0c:f9:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B2:BC:07:2E:0B:4A:E5:56:3E:C6:A3:BF:F6:15:97:44:87:F3:84
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/n7K8By4LSuVWPsajv_YVl0SH84Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.28.0/24
200.165.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a8:6c:5d:8f:24:02:6b:83:4f:7b:c0:4f:2b:a4:5c:ae:cd:
90:25:1a:1b:70:fd:1f:d2:07:b7:5b:bd:c9:7f:d3:70:4c:8d:
c3:75:ef:62:a9:e9:51:23:6e:06:0b:04:b4:d4:6f:cc:0c:91:
1a:f3:bf:d6:d2:00:14:a1:94:d3:9c:d5:8d:75:4c:26:f0:e7:
22:d1:95:b8:ea:40:2c:d4:26:b9:e5:ee:20:ad:8e:5c:9d:24:
89:dd:a0:4b:36:c0:e3:45:a3:a4:28:96:3a:6e:52:54:8b:cc:
1a:f4:9f:c6:2b:a5:f8:57:9f:ff:b0:81:48:4e:74:cb:1d:54:
a5:25:ef:86:e7:1d:b3:43:de:fe:4d:58:9b:e4:42:2d:2e:50:
87:88:54:a4:b8:1b:74:f7:8b:ee:b8:48:b8:c8:1c:64:ec:ef:
08:a0:7e:47:a7:96:e7:e8:47:fa:bb:45:b2:a2:75:41:1b:ad:
ca:58:a9:19:86:c2:f0:68:56:94:2f:95:ea:b5:dd:32:e3:3c:
51:95:5d:ab:d6:5f:de:df:8c:d9:f9:a1:71:7d:1d:af:bd:a3:
5c:cb:59:5d:6c:3b:7b:ae:8c:6f:b1:64:44:da:0e:0f:67:53:
62:99:5d:5b:10:85:12:40:12:56:db:91:77:fa:a7:61:3f:fb:
9a:c6:3b:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF04ti3FDsxL1rslQf4tPYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDI1MjEwNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmIyYmMwNzJlMGI0YWU1NTYzZWM2YTNiZmY2MTU5NzQ0ODdmMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmASLWq6wAYe5aH/TtT//Ocrluo0
M+JxcQl6gVzoAVJk5x0Lewg/HLL1nn4RBdDRPG24MX+bDFC2SrILbZ6a5ZVu5rVn
oFITys1/sSLIfjrqtdcDuPdPNx696Upr5qWIWf8xev3+pEUh5OBV6llx2E001A0T
/lgNjH24D3Da9yTWTJouGk2/SK4Myq+Mc3osAHw5s4cxVBfXVAgtvKjGfvGmU1/4
+j2NKwth6YUbkJMWDkLAMaCm3wvSP+CR032lAUgFJl9qdbT+vZZo2T+WqqsrGgJj
EsllGa0m0GV76dmLkqX7JX1uyfzyHJtbBKxvMOUjQZIWYNVUQIiEDPmCbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ+yvAcuC0rlVj7Go7/2FZdEh/OEMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvbjdLOEJ5NExTdVZXUHNhanZfWVZsMFNIODRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWocAwQA
yKUSMA0GCSqGSIb3DQEBCwUAA4IBAQCrqGxdjyQCa4NPe8BPK6Rcrs2QJRobcP0f
0ge3W73Jf9NwTI3Dde9iqelRI24GCwS01G/MDJEa87/W0gAUoZTTnNWNdUwm8Oci
0ZW46kAs1Ca55e4grY5cnSSJ3aBLNsDjRaOkKJY6blJUi8wa9J/GK6X4V5//sIFI
TnTLHVSlJe+G5x2zQ97+TVib5EItLlCHiFSkuBt094vuuEi4yBxk7O8IoH5Hp5bn
6Ef6u0WyonVBG63KWKkZhsLwaFaUL5Xqtd0y4zxRlV2r1l/e34zZ+aFxfR2vvaNc
y1ldbDt7roxvsWRE2g4PZ1NimV1bEIUSQBJW25F3+qdhP/uaxjuN
-----END CERTIFICATE-----
Generated at Wed Nov 4 11:12:29 2026 by rpki-client