Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oUKN2mlmdJkKkWChnb6_vYew2ZU.roa
File: oUKN2mlmdJkKkWChnb6_vYew2ZU.roa (raw, json)
Hash identifier: Tijir/Uo6kOAksuxT90yioK5CqntCspD0dyxgpaMPjY=
Subject key identifier: A1:42:8D:DA:69:66:74:99:0A:91:60:A1:9D:BE:BF:BD:87:B0:D9:95
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A140586E76AFEC692DF935E1F7BA452C8E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oUKN2mlmdJkKkWChnb6_vYew2ZU.roa
Signing time: Thu 15 Oct 2026 16:14:59 +0000
ROA not before: Thu 15 Oct 2026 16:14:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:58:6e:76:af:ec:69:2d:f9:35:e1:f7:ba:45:2c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 15 16:14:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1428dda696674990a9160a19dbebfbd87b0d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:e8:2d:a0:43:cd:30:97:e1:3f:2f:37:18:
b7:f7:56:9c:ac:38:9b:61:f4:fa:35:5c:ad:7b:bf:
58:6a:b7:67:d1:19:56:cf:a3:f1:d9:d4:de:d8:7f:
8f:58:12:f1:59:1f:e5:e3:fa:89:1b:82:f3:3f:99:
55:7a:e1:af:91:4d:5c:e3:a6:83:ba:02:ee:84:c2:
df:17:fd:24:bb:c8:4a:40:45:07:95:44:8d:20:30:
6e:c5:c6:c7:57:91:1a:e9:c9:db:6d:e2:28:94:ad:
b5:fd:10:64:29:a3:91:17:57:90:7b:ff:39:4e:ba:
c4:ca:cf:b6:1d:1c:db:1f:45:79:00:7c:98:cc:25:
f7:03:78:87:fe:12:a7:26:72:ce:af:3d:97:d3:5a:
bb:3f:a1:d2:02:e7:29:d0:05:42:95:84:fc:57:98:
89:8d:25:41:f8:23:ab:e5:37:ff:3c:fe:85:99:d9:
25:b5:40:9c:17:bd:4a:30:6c:d9:76:fc:a6:bd:d5:
53:f5:27:39:71:ed:b7:56:30:2b:c8:73:88:fc:bd:
e3:2f:a8:a8:4d:3c:90:60:7e:e8:69:60:12:96:9c:
51:e5:e4:3b:09:6e:54:76:36:05:17:c2:df:c5:b9:
9b:80:8b:cf:de:b1:68:76:76:7f:55:a5:ba:c7:d1:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:42:8D:DA:69:66:74:99:0A:91:60:A1:9D:BE:BF:BD:87:B0:D9:95
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oUKN2mlmdJkKkWChnb6_vYew2ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.19.0-191.219.20.255
Signature Algorithm: sha256WithRSAEncryption
92:55:0e:7d:12:75:ce:71:e3:1f:9c:b8:a6:d4:64:6e:25:c3:
77:b0:f1:d1:27:e7:84:35:f1:37:8e:57:06:34:d3:ad:e9:a2:
88:36:df:0d:ae:5c:c1:f8:f3:81:cb:02:e3:d4:20:66:36:d8:
36:26:55:e7:ee:ac:a7:05:18:df:fd:13:04:5c:99:cb:d3:52:
a0:a6:e5:37:fc:e4:c3:63:ee:48:6f:cb:92:d7:35:b5:2d:37:
d9:1d:fa:62:1a:ca:54:36:14:ec:67:84:ab:ba:13:d3:b2:9e:
e4:e4:36:79:fc:c0:26:2f:ac:bd:b1:c6:3f:aa:0c:5b:58:a4:
e7:1e:cf:be:85:17:7b:60:6a:a8:e1:82:03:c2:33:22:53:96:
8e:14:87:0e:ec:06:e0:18:b5:76:b0:06:6f:e3:e0:1e:d3:b6:
9b:b4:aa:81:0d:6c:bd:cb:b2:f5:25:aa:82:a2:e9:d3:84:2d:
0c:e9:de:e3:5f:e0:ef:f3:11:1b:cb:b6:c1:a8:7c:a9:b1:c7:
f0:f4:d7:8d:22:04:1a:bc:23:bb:41:d2:1b:5c:73:f5:4f:40:
f5:a6:ee:c2:eb:68:dd:39:0d:db:7a:85:e9:f6:a8:64:c4:26:
6f:0f:54:00:aa:be:3c:83:b9:f7:cb:19:11:af:2e:54:98:82:
77:ec:ca:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:42 2026 by rpki-client