Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oA4mmqzBCeqlHWAQDx3hb4DZyZM.roa
File: oA4mmqzBCeqlHWAQDx3hb4DZyZM.roa (raw, json)
Hash identifier: g2W/1YPACjBVerXE5q2z4Gsdm8qY4JCcOaTl/pcet5Q=
Subject key identifier: A0:0E:26:9A:AC:C1:09:EA:A5:1D:60:10:0F:1D:E1:6F:80:D9:C9:93
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F9C2B5A5716FBA62CCF52E37AEFE74E1A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oA4mmqzBCeqlHWAQDx3hb4DZyZM.roa
Signing time: Sun 26 Jul 2026 02:05:14 +0000
ROA not before: Sun 26 Jul 2026 02:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 189.31.219.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.190.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9c:2b:5a:57:16:fb:a6:2c:cf:52:e3:7a:ef:e7:4e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 26 02:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a00e269aacc109eaa51d60100f1de16f80d9c993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:fe:f5:60:9b:39:67:9d:fb:b7:f7:a9:d9:
67:78:d2:5a:3e:8b:6d:15:43:00:c6:3d:ae:d6:d3:
82:a9:b8:51:79:f3:bf:e9:b0:c8:6b:5f:63:d6:4f:
38:e2:76:c8:85:5b:68:32:8a:a7:3b:50:4f:7b:91:
af:c8:80:41:b2:7f:7e:a2:4b:40:76:14:e7:98:77:
8d:24:08:db:37:d6:40:97:32:dd:9b:1c:27:45:82:
d7:db:78:18:b2:35:63:f4:8b:c9:2f:b8:5c:61:ef:
33:3a:4c:f3:82:4a:9d:a6:7b:a9:dc:a4:c1:e6:35:
3c:7d:34:c6:af:1f:a9:90:5b:cc:16:05:c3:64:cb:
4a:cd:64:1c:cc:81:bf:de:29:f1:2a:16:57:4f:97:
d8:f6:0b:e1:7a:e8:82:1e:40:32:3f:0f:cb:b6:35:
4f:a3:b9:ff:b0:4a:b2:cd:2b:a2:b9:72:2d:b4:93:
42:71:29:eb:da:ba:5a:6e:01:ff:e4:3e:fa:f2:cf:
16:4a:ab:e9:3b:f9:82:6f:fd:45:3c:4e:ce:9e:a8:
f7:a8:3c:f8:0a:07:1d:6b:c0:2d:22:11:02:99:7b:
94:e1:0b:dd:ba:34:73:e3:ac:44:41:1d:a5:f5:6b:
19:67:9e:10:1c:4c:5d:2b:b3:ef:1a:3d:5e:fb:c3:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:26:9A:AC:C1:09:EA:A5:1D:60:10:0F:1D:E1:6F:80:D9:C9:93
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oA4mmqzBCeqlHWAQDx3hb4DZyZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.219.0/24
189.75.179.0/24
189.75.190.0/24
191.44.17.0/24
191.217.167.0/24
191.217.172.0/24
200.181.86.0/24
201.11.225.0/24
201.11.231.0/24
Signature Algorithm: sha256WithRSAEncryption
59:27:41:cc:6b:67:86:9b:09:d9:8b:6d:e4:52:a9:3e:1a:b6:
2a:e9:3d:49:0f:56:a6:ae:c3:50:4f:85:82:1c:88:02:dc:7c:
f9:7c:3d:a6:4d:80:20:0f:de:2c:c9:99:27:17:21:73:73:97:
89:f8:96:c9:5c:31:6b:06:28:51:04:bf:21:94:15:e5:83:f1:
0f:13:fc:4a:47:20:4e:0a:86:51:25:4e:f4:da:6a:b5:c7:c4:
f1:76:a3:45:aa:fc:66:10:cb:2f:8d:75:3d:11:d0:89:3d:13:
d7:41:b2:0b:b4:0f:46:0a:aa:f1:40:38:64:cd:59:df:f5:91:
28:34:4f:0f:56:82:c7:bb:08:72:d9:3c:9f:e8:9c:63:fe:b1:
b7:48:71:5e:67:77:a6:07:c1:ae:51:15:59:25:89:f2:d6:0b:
2c:3f:dd:a0:77:7e:a3:81:d3:8e:11:2d:59:44:99:01:b9:22:
f8:a9:08:17:56:1d:fb:45:d5:c0:23:6d:f1:e6:26:dc:90:df:
41:8c:9f:72:04:bb:06:99:37:15:9c:10:d2:e4:76:b7:19:d4:
1b:ac:d8:69:e7:51:16:a8:ef:58:42:9b:61:aa:d4:50:d5:b2:
18:0c:df:74:49:13:0d:41:d1:55:4e:df:39:35:64:71:15:93:
aa:a4:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:29:18 2026 by rpki-client