Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p-1sdmkMHsCpJyUdEuERPASgPfM.roa
File: p-1sdmkMHsCpJyUdEuERPASgPfM.roa (raw, json)
Hash identifier: 7S1z6+M5NVTMnLOX51A3/Zsr5wfDt1zWgXdsDmuUH4E=
Subject key identifier: A7:ED:6C:76:69:0C:1E:C0:A9:27:25:1D:12:E1:11:3C:04:A0:3D:F3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F312EE29FB5B83F647D12899FB8954BCE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p-1sdmkMHsCpJyUdEuERPASgPfM.roa
Signing time: Sun 05 Jul 2026 07:29:43 +0000
ROA not before: Sun 05 Jul 2026 07:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31924
IP address blocks: 191.44.26.0/24 maxlen: 24
191.219.29.0/24 maxlen: 24
200.102.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:2e:e2:9f:b5:b8:3f:64:7d:12:89:9f:b8:95:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 07:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7ed6c76690c1ec0a927251d12e1113c04a03df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:29:e0:b8:0d:99:6a:4b:01:ba:cb:f1:85:
94:0f:4c:4d:5d:9b:0a:6d:41:c7:84:bf:0d:1f:86:
cd:50:11:79:2a:bd:25:45:72:8b:6e:1c:80:d7:d0:
f9:ce:ca:1f:29:57:db:06:bd:51:94:81:cc:bd:11:
5d:51:87:b3:b9:c4:e8:cb:ba:65:31:9e:e7:28:54:
55:b4:7d:fc:f5:80:4f:95:9c:c1:69:ee:61:71:0e:
a5:f2:a8:bf:1f:cf:70:a3:a3:c7:2b:af:1e:12:74:
71:dc:f6:c4:c6:0a:a7:f6:5f:33:ad:7e:19:04:a9:
ea:4b:af:db:46:f0:53:2c:69:d7:12:36:0a:2e:7e:
38:be:82:fa:d2:72:bc:74:f9:75:3e:a3:7c:01:76:
22:b0:48:0c:89:2c:74:1c:c1:e5:fa:7f:9e:cf:99:
c3:c7:f0:67:cf:9b:8b:6d:09:1c:f4:b9:2a:20:9e:
8d:59:10:a1:bd:ff:0c:c8:2a:46:4e:e4:02:68:c2:
51:f8:c3:d1:9b:52:e4:ea:7f:09:d5:be:8c:0e:cb:
50:a9:48:da:d8:86:41:cd:fb:90:9c:d6:d6:2d:ea:
a9:47:e7:de:df:59:dc:be:ed:f6:14:e7:e1:83:a2:
84:d2:8c:81:9d:76:58:fa:d4:e9:9e:4c:5e:77:a5:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:6C:76:69:0C:1E:C0:A9:27:25:1D:12:E1:11:3C:04:A0:3D:F3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p-1sdmkMHsCpJyUdEuERPASgPfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.26.0/24
191.219.29.0/24
200.102.186.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:fd:bf:9f:a9:93:6f:36:57:45:20:12:29:68:87:15:05:df:
88:a6:e2:14:18:12:7d:b2:3c:d5:23:eb:12:c8:6f:4a:50:94:
af:e8:ca:b8:33:a3:46:06:0b:a8:f0:a7:a8:11:bd:c5:3a:ce:
88:10:be:e5:b0:e3:a4:92:91:60:83:b8:8c:1f:1c:cb:cd:75:
bf:f7:de:fc:26:c6:ca:c5:45:5a:6b:72:5e:ef:86:ea:eb:16:
cf:34:73:86:93:8c:ae:18:9f:f5:dd:c4:24:39:93:55:82:d1:
3f:00:01:51:b2:7e:9d:92:cd:06:a1:01:e2:80:10:64:4e:b2:
f6:46:cc:b2:6b:98:b9:6e:1d:b3:0e:29:1c:7e:97:e4:d6:60:
3f:26:df:00:ce:3b:ce:21:74:3a:f6:23:32:1d:fd:c5:64:dd:
5c:0f:42:cb:96:6a:ed:18:8f:dc:db:02:ec:7b:d9:bd:79:8c:
0a:e0:92:3a:bc:dc:ed:66:97:9b:4e:7f:ec:ad:06:22:80:11:
1d:cd:bb:b8:66:9f:4a:41:46:d8:d0:65:82:62:43:81:63:8b:
e7:26:3c:d0:4e:ea:a4:bb:9b:93:d9:78:2b:29:73:6e:5b:c7:
3c:b2:e6:9d:15:ca:42:1e:54:bd:3e:b0:11:7a:7f:5f:e0:97:
e2:63:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client