Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qYcYoIY2UVuLhIo8gAvve7YU1-Y.roa
File: qYcYoIY2UVuLhIo8gAvve7YU1-Y.roa (raw, json)
Hash identifier: 54mfS8HeYPxxFcEAffsP+THWCLsTlnB/uzarbkv4Af0=
Subject key identifier: A9:87:18:A0:86:36:51:5B:8B:84:8A:3C:80:0B:EF:7B:B6:14:D7:E6
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A178EDFDA35A6AB25B1363C09ED1392892
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qYcYoIY2UVuLhIo8gAvve7YU1-Y.roa
Signing time: Mon 26 Oct 2026 15:57:05 +0000
ROA not before: Mon 26 Oct 2026 15:57:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214720
IP address blocks: 74.112.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ed:fd:a3:5a:6a:b2:5b:13:63:c0:9e:d1:39:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 15:57:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a98718a08636515b8b848a3c800bef7bb614d7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:6c:02:e7:68:54:42:10:26:62:f5:4e:59:
62:49:af:7a:4b:f6:72:5c:bb:18:b5:33:55:d6:e4:
96:84:d2:89:ef:fd:bc:07:77:a1:ae:e7:15:98:28:
6e:34:1e:04:12:27:9c:18:b7:f4:2d:5c:40:ac:b9:
71:e1:c5:bb:fd:a0:9e:63:37:9c:ca:cd:f5:bc:f7:
28:7d:a1:45:43:06:08:e2:72:78:e8:6b:5b:7d:da:
5d:e4:54:d1:35:a2:f6:26:c0:cc:8b:bb:51:68:87:
62:84:88:f0:41:1f:1e:6f:4e:d9:cd:7d:2d:d6:5d:
91:cd:8b:ee:58:6a:46:7a:b2:4d:49:8f:8e:dc:47:
dd:84:8c:27:84:47:86:e8:1d:64:7e:88:81:97:c0:
a0:b5:14:6e:5a:a9:af:5a:4d:a8:fe:2e:5f:db:38:
47:31:06:e3:05:c8:0b:28:3d:9f:cb:65:1b:ed:ec:
99:cd:b0:e7:7d:c4:17:d8:c1:f0:75:b9:f7:ba:79:
82:89:d7:d6:a7:34:15:dc:6d:2d:7f:38:b7:46:0b:
33:10:58:cf:79:b3:0b:59:0c:ef:31:ad:48:d0:fb:
9b:d0:2e:d4:c6:1b:d3:f7:6f:99:bf:ba:a2:55:26:
f1:bf:24:de:d0:e9:70:50:df:bf:ec:22:6d:6f:c4:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:18:A0:86:36:51:5B:8B:84:8A:3C:80:0B:EF:7B:B6:14:D7:E6
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qYcYoIY2UVuLhIo8gAvve7YU1-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.153.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d1:bd:84:e6:0b:0a:3f:cc:2a:84:4a:9d:c5:70:d6:33:c7:
d5:01:15:44:7e:0a:02:f8:25:44:74:86:e4:b3:47:d7:05:ea:
94:54:e1:be:ed:b1:ca:56:dc:9b:c2:7b:71:84:67:34:ff:38:
7a:f4:45:9a:07:b6:68:f2:03:26:47:02:fc:f0:93:78:e4:cd:
3b:e9:79:5b:71:77:dc:03:01:c1:b6:de:91:03:fa:0b:2e:74:
45:01:12:4d:66:93:04:ea:6e:7d:eb:bb:41:4e:17:aa:ba:c7:
cb:63:93:15:b1:c9:f2:99:40:ac:f2:9a:21:5c:d0:b6:79:1c:
a0:40:67:da:57:ce:f7:01:42:78:5a:81:bf:da:6e:d1:6a:38:
53:10:ab:d8:22:64:d1:6f:ff:57:87:c2:25:11:6e:c5:88:1f:
eb:b8:aa:7f:bf:56:bd:0f:72:e6:4f:be:a7:5f:8f:3c:78:39:
89:0d:a2:55:2c:f4:ec:3c:4a:a3:b4:ac:0b:9e:09:7a:8b:c1:
00:2c:64:2a:61:1b:41:7e:0f:6e:67:10:f1:a2:13:ef:84:68:
d9:72:1c:83:d6:b1:7f:eb:e9:20:ae:bf:50:7e:2b:47:0c:ce:
e6:64:e8:c0:c4:38:02:eb:80:02:74:b5:c5:78:6b:0e:31:f0:
09:05:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:52 2026 by rpki-client