Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qGlhWrVHk5Brjxp-rCDlsvkgMBE.roa
File: qGlhWrVHk5Brjxp-rCDlsvkgMBE.roa (raw, json)
Hash identifier: L+z8QutUc/ELy9FrYLeyJI9xmrOtDw6Gya7ZPhfbngI=
Subject key identifier: A8:69:61:5A:B5:47:93:90:6B:8F:1A:7E:AC:20:E5:B2:F9:20:30:11
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F2FF88622EE7983944C9D3AF78C447B3D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qGlhWrVHk5Brjxp-rCDlsvkgMBE.roa
Signing time: Sun 05 Jul 2026 01:50:44 +0000
ROA not before: Sun 05 Jul 2026 01:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 191.219.16.0/24 maxlen: 24
200.181.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:f8:86:22:ee:79:83:94:4c:9d:3a:f7:8c:44:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 5 01:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a869615ab54793906b8f1a7eac20e5b2f9203011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:b6:9d:3a:ac:d9:c2:89:bd:36:f1:5b:a3:
7b:59:aa:f2:d4:24:d3:7c:23:9c:07:c0:e8:ae:e4:
cc:45:64:d7:69:71:8b:eb:e9:2a:a4:2a:24:3f:83:
87:5a:90:da:45:bb:be:7a:47:e0:27:69:a9:2b:df:
45:7d:ff:ad:a3:86:a7:92:da:72:d9:44:52:78:c2:
b6:a3:60:08:13:43:c6:50:cb:b5:f3:d0:1f:e6:26:
f0:42:fa:cb:8e:26:b7:fa:8c:20:ea:c0:85:3e:47:
40:bf:4b:f2:22:7b:17:7d:1b:02:54:70:b9:39:01:
49:a4:fe:77:49:1f:22:1c:ca:0d:25:17:7a:12:f2:
80:d2:69:45:4f:aa:5f:bf:b9:3c:28:21:e7:65:87:
93:bb:64:1b:1e:86:de:77:8b:1d:0e:3c:be:e5:1c:
21:14:ac:81:50:a6:b8:a1:8b:0a:c6:cd:b5:83:f0:
43:0f:e9:e3:3d:44:df:33:b1:55:48:06:33:f8:88:
0e:39:54:a4:22:13:02:29:e9:11:14:33:3c:47:8b:
0c:59:aa:67:b7:9f:3c:5d:db:2a:e5:6d:ca:76:ae:
ae:2e:5d:1e:7f:82:7b:c8:c1:b0:2e:52:2f:d6:72:
6c:35:c0:ed:9b:7f:51:5e:a9:b3:b8:37:a8:65:8b:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:61:5A:B5:47:93:90:6B:8F:1A:7E:AC:20:E5:B2:F9:20:30:11
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qGlhWrVHk5Brjxp-rCDlsvkgMBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.16.0/24
200.181.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2f:78:ef:24:9c:23:98:71:08:60:36:d8:21:b1:79:8e:dc:
ad:e1:52:b2:1b:b1:68:04:9a:0a:07:bf:9e:15:bc:1b:46:bd:
9a:6e:3e:1a:58:d7:d6:db:3a:6a:85:2b:6b:85:65:b6:60:cd:
d5:c8:fb:3f:fd:4d:95:ee:61:07:94:f6:c7:da:59:51:c0:33:
cc:73:d5:5f:dc:34:e8:e1:c7:a0:63:81:87:9a:76:c0:76:bf:
6d:4e:e2:63:ac:47:18:56:74:b8:bb:45:a7:08:01:10:e9:95:
d8:e9:49:0b:92:ca:6c:8e:4d:5d:1b:ef:e8:6d:47:fa:8e:79:
67:07:82:22:e4:73:fc:db:d8:9d:88:7e:74:d2:2e:7a:db:bd:
30:21:a4:9e:0a:f2:26:04:b1:d1:b1:c0:03:be:ca:2b:30:50:
23:7a:7f:cd:72:45:d4:80:48:7f:1f:8f:8f:03:7e:79:c3:49:
9f:5d:2d:ab:95:85:ad:b1:2a:ea:cc:57:93:ea:3a:2b:08:90:
9b:65:30:91:b4:e8:9f:2e:61:80:7d:0a:5a:a5:18:11:da:6f:
16:a3:d2:a5:0b:c3:b8:b8:53:65:f1:c4:b1:ba:a1:61:34:34:
be:bd:dc:27:f5:e8:69:48:38:0a:0a:8d:99:ba:2a:91:8e:ab:
c0:e6:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 02:20:53 2026 by rpki-client