Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nEFsGzMCYeg2ah4u-BstBxeym3Q.roa
File: nEFsGzMCYeg2ah4u-BstBxeym3Q.roa (raw, json)
Hash identifier: gaurU/Xqcd3HATYo5sDrpdtWvGD9jqHd+thXUyPuIQU=
Subject key identifier: 9C:41:6C:1B:33:02:61:E8:36:6A:1E:2E:F8:1B:2D:07:17:B2:9B:74
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EE07B29E07215C0765D6AF83B7F5FAD28
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nEFsGzMCYeg2ah4u-BstBxeym3Q.roa
Signing time: Fri 19 Jun 2026 15:23:48 +0000
ROA not before: Fri 19 Jun 2026 15:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 189.73.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:7b:29:e0:72:15:c0:76:5d:6a:f8:3b:7f:5f:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 19 15:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c416c1b330261e8366a1e2ef81b2d0717b29b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:2a:7b:21:1c:d2:14:99:ae:af:1f:e9:ff:
97:90:1e:b7:a9:14:0e:e2:27:9f:c9:f7:e4:a4:50:
98:66:6f:60:cb:1a:e1:d0:25:6b:d2:a0:ae:5f:53:
36:0d:aa:e3:1c:b0:06:37:49:7f:85:95:48:0d:36:
e8:3b:3d:d4:4c:0c:a6:f3:3a:f2:cb:6b:95:0c:0a:
14:1b:f7:7d:c6:fa:e3:4e:d1:74:3f:df:97:eb:39:
c5:78:3a:15:96:14:ee:fb:93:a5:3c:59:e2:5d:47:
50:3f:43:9d:93:1e:fd:08:d3:dd:9d:13:fa:a3:49:
45:28:30:5c:56:78:4d:f5:08:36:25:9a:7a:da:af:
8b:40:e2:a4:8b:32:71:70:a7:bb:60:28:eb:f6:34:
14:d8:bb:67:87:d7:0c:f9:4f:25:ff:28:e8:a5:70:
94:1c:69:0f:15:3f:a1:41:47:da:fe:2f:d3:1c:7b:
ab:1f:5f:03:03:d1:d6:4c:21:59:15:b1:4f:ef:f4:
2d:d7:62:cd:ad:f5:60:83:8f:b1:60:a8:2f:36:39:
08:4f:a1:b2:95:43:b8:a1:3a:1e:61:e5:56:5f:54:
3e:f6:ad:82:df:71:2e:3f:ff:0f:a4:13:f6:36:e7:
5c:3f:3a:8b:bf:b6:8f:e2:e3:db:31:88:9b:4c:5f:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:6C:1B:33:02:61:E8:36:6A:1E:2E:F8:1B:2D:07:17:B2:9B:74
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nEFsGzMCYeg2ah4u-BstBxeym3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.20.0/23
Signature Algorithm: sha256WithRSAEncryption
56:8a:95:d3:20:32:2c:a1:16:a7:c4:a0:25:c0:86:a4:1f:63:
1f:16:07:9f:71:5c:6a:a9:3c:f4:53:7c:59:18:f1:5c:b9:51:
fd:71:da:1a:9c:c7:f7:e7:3c:ff:bd:4e:fd:0b:fe:2f:a2:85:
8e:5f:66:ee:58:43:b3:9b:d2:96:34:d2:c8:d7:2c:92:39:db:
69:c1:9c:dd:26:6b:68:3e:7c:09:88:8a:7e:e5:4a:71:21:12:
ed:cf:43:60:65:92:6b:8d:51:fb:73:10:90:64:4f:d3:cc:8f:
1c:cb:0d:6c:04:b0:33:05:62:e8:23:78:28:0a:aa:71:af:32:
36:96:ba:8d:bf:87:9a:d3:aa:35:55:a6:f9:f6:d0:82:51:ed:
2a:8f:5c:01:42:ad:c0:e1:a7:f7:8b:a6:1e:e5:7c:2f:65:22:
a4:91:48:cb:01:1d:53:c5:36:79:e7:ea:83:b8:b4:cc:ab:6e:
bc:a7:45:46:c1:8a:a2:86:fa:82:17:fb:72:8a:9f:b5:cb:86:
7b:45:04:bb:ac:2a:f7:19:91:bc:c2:f8:41:21:b3:3a:41:02:
2a:62:f1:c9:3c:8d:7c:65:e5:da:9f:a0:be:c1:6e:c8:65:dc:
1d:a3:da:78:a4:20:4c:26:4c:23:25:b3:fc:f8:2a:9c:ab:18:
c7:4d:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:33 2026 by rpki-client