Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oUX82cXFbe951ou31gDt1SfXEVo.roa
File: oUX82cXFbe951ou31gDt1SfXEVo.roa (raw, json)
Hash identifier: sGMrea0mAgkHkPR1bSYk2lsi4jmEWykohjN0d9BJoL8=
Subject key identifier: A1:45:FC:D9:C5:C5:6D:EF:79:D6:8B:B7:D6:00:ED:D5:27:D7:11:5A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1884ED4C6D1F677FA3B3A4B002E1A5683
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oUX82cXFbe951ou31gDt1SfXEVo.roa
Signing time: Thu 29 Oct 2026 15:37:10 +0000
ROA not before: Thu 29 Oct 2026 15:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 191.219.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:4e:d4:c6:d1:f6:77:fa:3b:3a:4b:00:2e:1a:56:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 29 15:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a145fcd9c5c56def79d68bb7d600edd527d7115a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:5b:2d:8b:46:0b:d2:67:2e:3b:41:13:39:
5a:c0:6c:b7:e3:24:21:01:94:ad:44:ee:0d:f9:dc:
ab:28:9c:7d:99:0a:84:8a:7f:26:84:d0:5b:26:a7:
9b:b0:ee:6e:9d:20:44:2d:d0:ca:73:8d:60:24:b0:
0f:6b:5a:50:02:d0:b7:4b:67:4d:cb:9d:7c:e6:92:
84:06:f1:9d:6f:3d:9f:b3:55:72:5d:f1:d2:89:fe:
d4:7c:ff:4f:81:14:ed:79:e0:b2:29:2d:0e:92:59:
54:bd:2c:37:23:d8:fc:6b:94:c6:db:63:69:93:be:
23:bd:05:e0:76:af:b2:20:44:d7:15:18:8e:be:a3:
aa:e9:c2:e5:05:65:bc:55:78:fb:6b:3b:6b:e8:60:
9a:1c:c7:ae:00:f2:3f:43:38:5b:eb:e4:72:1d:e6:
d6:31:14:0e:b1:5a:3c:70:63:7f:ab:36:f6:44:a9:
ea:8f:7a:22:7c:64:06:78:9f:0b:b9:ea:e9:9f:92:
87:49:9e:75:1e:2d:82:07:76:ca:0b:6e:ba:5d:61:
26:20:a2:fa:39:20:d0:c6:ef:d6:16:33:7c:63:70:
6f:0a:bc:b0:98:9a:36:1f:14:46:67:89:58:82:bd:
1b:e0:c6:d3:ef:f7:2d:d8:43:2a:57:64:4d:88:dc:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:45:FC:D9:C5:C5:6D:EF:79:D6:8B:B7:D6:00:ED:D5:27:D7:11:5A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oUX82cXFbe951ou31gDt1SfXEVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:63:a7:1a:1b:07:9b:1a:c5:7e:a7:7f:3c:0d:d5:54:31:c9:
d5:18:17:06:4f:fa:09:94:f6:15:94:d3:55:e6:12:75:bc:50:
b2:1f:5b:be:eb:3d:07:b4:6d:c7:a0:0c:b2:a4:1f:91:12:2a:
38:fa:fe:98:a1:d0:df:3a:8e:9e:d4:56:d7:4f:69:5e:37:b6:
41:18:4f:8b:02:74:48:58:c0:82:84:e2:3c:33:55:72:99:46:
9a:2f:a7:96:a9:3f:99:7e:66:da:6e:be:2d:ad:79:73:71:de:
a6:1d:23:4c:4a:2b:37:e8:02:0f:03:fe:ae:0a:aa:81:e5:50:
2a:dd:af:45:57:2d:3d:f4:e0:f6:e3:d3:42:fa:f8:d9:72:33:
cc:22:21:c6:71:9e:23:ae:57:68:f8:2a:65:71:ec:64:1d:ff:
f7:59:dc:77:35:db:9e:f6:3f:b2:ff:b7:da:4f:40:12:08:a7:
b6:ca:97:f8:92:0b:4f:27:2d:92:8c:e5:1e:02:ca:9b:79:4a:
88:32:bc:64:18:09:27:53:c5:d5:46:1b:ee:88:e8:70:2a:78:
6f:a0:c7:79:7d:dc:4b:85:61:8a:46:dc:f8:6e:c6:48:a3:39:
25:ac:ff:48:6d:b6:8c:f6:ef:95:81:98:62:53:79:14:bd:f7:
5a:ee:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:51 2026 by rpki-client