Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qZ9o2CnIyprd3-3ExoeFxS9noKA.roa
File: qZ9o2CnIyprd3-3ExoeFxS9noKA.roa (raw, json)
Hash identifier: zFvVQyD+kvc/rCWMeMVFYyat/gkklyS5X3xjbdHIb1M=
Subject key identifier: A9:9F:68:D8:29:C8:CA:9A:DD:DF:ED:C4:C6:87:85:C5:2F:67:A0:A0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1405B2D329DBBFC5B1C7998D1259F246E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qZ9o2CnIyprd3-3ExoeFxS9noKA.roa
Signing time: Thu 15 Oct 2026 16:17:59 +0000
ROA not before: Thu 15 Oct 2026 16:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 189.75.182.0/24 maxlen: 24
200.102.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:5b:2d:32:9d:bb:fc:5b:1c:79:98:d1:25:9f:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 15 16:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a99f68d829c8ca9adddfedc4c68785c52f67a0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:d4:f3:c8:7c:e7:79:f5:86:50:95:61:07:
35:4e:3e:f3:6a:6a:4b:e0:16:d5:4b:b1:92:8d:de:
95:a9:86:6b:85:7d:81:e8:fd:ec:ea:1a:5d:17:de:
e9:61:56:28:35:7f:2b:5a:65:3c:88:aa:2c:b0:7a:
be:ba:a4:8f:e5:5c:04:e6:40:32:2c:3b:65:ff:bb:
4a:98:df:98:2f:6d:38:f6:de:47:83:2d:ae:ed:56:
48:a6:3e:13:4a:00:08:65:2f:e3:9b:2d:42:62:3a:
74:fb:78:71:f1:dd:80:2c:a1:ba:c1:82:34:6d:b0:
b6:eb:c3:52:f2:8c:84:84:4c:f1:7f:89:bb:bf:c9:
c3:ba:d2:2c:c9:40:2f:fe:3d:fa:5e:19:bd:2f:e3:
14:36:ef:e2:e2:a7:75:8a:b1:9b:5f:19:dc:bf:20:
21:95:8c:eb:9b:73:c3:72:1a:b7:a0:5a:58:3e:a1:
1d:fb:b9:8e:66:f4:63:33:69:52:d2:13:e4:bb:6d:
75:46:1a:c2:2c:56:85:dd:d6:eb:24:2f:4c:f5:44:
57:2e:5e:38:81:42:a0:c2:1c:54:1f:d3:44:5d:d6:
5f:25:d6:97:45:87:6e:2f:61:28:ef:10:74:e0:62:
b5:e5:b7:65:e6:5b:33:35:b1:ea:82:03:cb:a1:91:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:68:D8:29:C8:CA:9A:DD:DF:ED:C4:C6:87:85:C5:2F:67:A0:A0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qZ9o2CnIyprd3-3ExoeFxS9noKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.182.0/24
200.102.80.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e8:bc:ee:e3:3c:d2:7e:71:44:09:7c:ee:e7:d8:7c:ba:10:
c9:79:7b:e3:bb:ec:6d:64:45:aa:58:14:ec:59:66:a6:f4:5a:
9c:a1:fb:39:d8:c4:a0:9f:17:51:4b:2a:18:15:14:df:42:fc:
d6:9c:fe:08:5e:c7:bb:58:82:11:63:17:9a:38:99:62:eb:bb:
ea:8f:52:23:12:e3:c8:58:a2:5f:81:08:8c:d9:ba:15:bd:37:
59:35:54:3a:5f:c6:d6:f9:be:fe:d7:02:0a:24:50:8d:f6:57:
53:e3:80:d3:a0:c7:26:e9:22:70:48:f4:62:f7:fe:95:13:f3:
ed:4a:35:97:28:97:6f:cb:18:ac:77:87:1c:2e:ae:23:ab:a2:
b2:2c:a8:4c:03:43:2d:01:6f:5c:be:fe:67:38:ed:8c:19:20:
34:80:d2:aa:06:8a:63:70:b4:12:31:21:b3:b8:f0:40:c8:36:
82:d9:85:3e:22:38:27:61:d5:b0:56:c4:18:c1:c9:4f:5d:99:
7d:d5:86:eb:3f:5d:3a:e6:08:f1:3b:80:dc:45:51:1f:90:87:
19:00:80:ba:cb:16:c1:0e:bc:dd:d0:48:08:6e:cb:5c:05:fc:
98:1c:85:7d:8b:5e:e8:60:11:92:69:da:af:34:3c:03:6a:42:
51:ec:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:12 2026 by rpki-client