Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pHqL3N_6bZ4RRRy5uk0JDJPkSn8.roa
File: pHqL3N_6bZ4RRRy5uk0JDJPkSn8.roa (raw, json)
Hash identifier: SG+q5YX9fU29nxU8q60nNd36nfAEIzM0HDcISkpgEX0=
Subject key identifier: A4:7A:8B:DC:DF:FA:6D:9E:11:45:1C:B9:BA:4D:09:0C:93:E4:4A:7F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A178DD82F950588FAAF4F247D33B64A530
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pHqL3N_6bZ4RRRy5uk0JDJPkSn8.roa
Signing time: Mon 26 Oct 2026 15:39:05 +0000
ROA not before: Mon 26 Oct 2026 15:39:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 191.217.168.0/21 maxlen: 24
191.219.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:dd:82:f9:50:58:8f:aa:f4:f2:47:d3:3b:64:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 15:39:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a47a8bdcdffa6d9e11451cb9ba4d090c93e44a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:83:7f:2c:e6:0e:39:f8:e7:12:dc:94:7d:
ec:8f:f3:4f:af:d6:19:1b:3d:53:c1:34:11:03:ae:
03:d5:cd:d5:be:1d:88:5a:d5:2c:31:f7:5e:f3:5d:
db:b7:91:1b:c0:28:a1:d1:3f:fa:24:90:07:41:77:
28:8e:3a:f4:dd:ea:67:01:78:c1:8f:ec:70:b3:f6:
b3:8b:05:7f:72:88:22:32:7e:45:24:58:fc:94:78:
2d:6b:a3:31:d8:19:91:18:36:10:75:2d:7a:73:a5:
79:ed:bf:92:a9:00:20:b8:9b:30:ad:4d:27:4b:08:
dc:ec:31:0e:a9:da:11:fc:be:23:1e:89:08:d3:8a:
80:79:50:07:3a:00:8d:f8:6d:d7:d2:d6:da:2b:df:
9e:3c:20:66:a1:34:48:c7:ce:45:09:f0:80:ae:57:
48:20:a9:88:c1:b2:7b:70:71:44:e0:8e:9e:f9:e0:
ac:f2:22:ac:8a:a5:1a:5a:3d:41:78:48:e5:f2:36:
b9:2a:f2:0d:4d:fb:21:0a:bc:ad:dd:8d:b5:15:33:
39:2e:1f:60:4d:d2:0e:37:fa:d5:86:35:d7:92:9e:
fd:ee:a2:cb:2c:8c:42:b1:45:d7:ff:e0:40:bc:e3:
9c:e6:8b:cd:bd:72:5c:c1:7f:30:e8:46:f1:f5:72:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:8B:DC:DF:FA:6D:9E:11:45:1C:B9:BA:4D:09:0C:93:E4:4A:7F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pHqL3N_6bZ4RRRy5uk0JDJPkSn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.168.0/21
191.219.18.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cb:76:41:ca:81:56:44:97:63:19:f9:7c:3e:bd:21:d4:5c:
49:81:1e:ca:b4:75:51:7b:10:b8:bf:39:45:9f:b9:68:15:c0:
b3:54:dd:8c:0c:82:ba:4f:e0:1d:9b:d9:84:84:f9:3e:9b:dc:
d0:b5:37:9b:78:19:11:15:47:b4:06:24:8e:aa:6a:e2:ab:59:
09:3d:92:a2:29:63:e5:50:a0:29:0c:6c:0d:ad:a9:de:60:de:
14:95:2d:e0:86:75:84:3b:21:83:8d:9f:ae:d2:da:29:15:7b:
d8:7c:70:b5:ba:6a:ba:1f:1a:05:da:29:33:6a:cb:db:d6:6a:
78:3f:c6:3f:8e:0a:13:88:b2:c8:5a:d9:08:05:f4:ab:59:18:
2c:9e:ca:6c:a6:32:3d:ad:7d:ed:c9:df:cf:b1:18:8b:f8:40:
c7:95:7b:9a:ed:94:ed:bb:05:70:52:5f:3d:fe:e7:b3:c3:f2:
7f:92:dc:52:48:ad:9f:5d:7d:f9:f7:a2:c6:08:8b:17:45:ad:
03:7b:d6:dd:45:93:83:78:75:47:d3:01:2c:0f:df:8d:05:7f:
4e:70:8c:11:77:1b:6b:89:05:e8:d0:ed:93:20:dd:18:9f:f7:
b1:14:d9:ed:10:3e:90:ea:07:db:cb:9c:f4:e0:f6:45:4b:af:
a1:b1:e6:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF43YL5UFiPqvTyR9M7ZKUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDI2MTUzOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDdhOGJkY2RmZmE2ZDllMTE0NTFjYjliYTRkMDkwYzkzZTQ0YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHuDfyzmDjn45xLclH3sj/NPr9YZ
Gz1TwTQRA64D1c3Vvh2IWtUsMfde813bt5EbwCih0T/6JJAHQXcojjr03epnAXjB
j+xws/aziwV/cogiMn5FJFj8lHgta6Mx2BmRGDYQdS16c6V57b+SqQAguJswrU0n
Swjc7DEOqdoR/L4jHokI04qAeVAHOgCN+G3X0tbaK9+ePCBmoTRIx85FCfCArldI
IKmIwbJ7cHFE4I6e+eCs8iKsiqUaWj1BeEjl8ja5KvINTfshCryt3Y21FTM5Lh9g
TdION/rVhjXXkp797qLLLIxCsUXX/+BAvOOc5ovNvXJcwX8w6Ebx9XJTcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKR6i9zf+m2eEUUcubpNCQyT5Ep/MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvcEhxTDNOXzZiWjRSUlJ5NXVrMEpESlBrU244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDv9moAwQA
v9sSMA0GCSqGSIb3DQEBCwUAA4IBAQB2y3ZByoFWRJdjGfl8Pr0h1FxJgR7KtHVR
exC4vzlFn7loFcCzVN2MDIK6T+Adm9mEhPk+m9zQtTebeBkRFUe0BiSOqmriq1kJ
PZKiKWPlUKApDGwNraneYN4UlS3ghnWEOyGDjZ+u0topFXvYfHC1umq6HxoF2ikz
asvb1mp4P8Y/jgoTiLLIWtkIBfSrWRgsnspspjI9rX3tyd/PsRiL+EDHlXua7ZTt
uwVwUl89/uezw/J/ktxSSK2fXX3596LGCIsXRa0De9bdRZODeHVH0wEsD9+NBX9O
cIwRdxtriQXo0O2TIN0Yn/exFNntED6Q6gfby5z04PZFS6+hsebr
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:49 2026 by rpki-client