Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rOxwUsBfTjSnNcbppD3-vEhY08o.roa
File: rOxwUsBfTjSnNcbppD3-vEhY08o.roa (raw, json)
Hash identifier: hYv4I5d5nXclfK7t8h7vJdM71dTttx3KkTh3a8frUFc=
Subject key identifier: AC:EC:70:52:C0:5F:4E:34:A7:35:C6:E9:A4:3D:FE:BC:48:58:D3:CA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0AADFE53FFE13D9B3F3C80FB54B7052D0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rOxwUsBfTjSnNcbppD3-vEhY08o.roa
Signing time: Wed 16 Sep 2026 15:39:54 +0000
ROA not before: Wed 16 Sep 2026 15:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 189.12.51.0/24 maxlen: 24
189.12.54.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
191.217.173.0/24 maxlen: 24
191.219.30.0/24 maxlen: 24
191.222.248.0/21 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.186.0/24 maxlen: 24
200.181.92.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:df:e5:3f:fe:13:d9:b3:f3:c8:0f:b5:4b:70:52:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 16 15:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acec7052c05f4e34a735c6e9a43dfebc4858d3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:2a:c3:43:ce:bd:e1:34:c5:4f:51:08:3c:
a1:8d:2a:5b:fa:92:58:3b:40:f1:83:88:23:0d:33:
13:b7:e9:01:f8:c3:9b:cb:95:23:b3:aa:b9:a1:c1:
73:a3:0e:a5:d7:d5:b1:73:26:c6:4a:73:0d:8e:93:
e9:bc:94:dd:c5:0c:ce:8e:91:f1:2b:2d:45:e9:cc:
12:d8:f2:b6:82:b6:75:60:43:b3:c5:f2:9e:c9:77:
0f:37:8d:08:c3:22:2c:f2:90:b1:1a:43:7b:a5:58:
59:09:84:66:c3:02:5f:2e:62:54:9f:ba:d2:0e:6e:
9c:23:f2:31:1a:46:f3:1f:dc:40:62:b4:9b:e4:c3:
a3:4d:6d:e9:bf:a2:78:fd:3d:ef:07:86:81:a1:91:
2b:5e:1b:39:2f:c2:29:a2:d9:4d:52:a4:a9:23:09:
8e:14:ac:04:d2:60:f8:de:db:65:65:4e:d8:5f:b4:
8b:8b:2c:f9:d5:68:59:7a:7d:24:19:06:53:00:35:
3b:a9:57:b7:84:a1:0d:eb:cc:8e:1e:2b:22:27:aa:
c7:fa:b0:31:56:df:fe:21:7f:59:fe:4e:75:d2:ad:
7b:01:46:7d:30:df:00:17:35:46:ab:a1:c4:cd:1c:
39:24:26:28:1f:24:82:37:31:df:c4:73:ac:d0:13:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:70:52:C0:5F:4E:34:A7:35:C6:E9:A4:3D:FE:BC:48:58:D3:CA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rOxwUsBfTjSnNcbppD3-vEhY08o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.51.0/24
189.12.54.0/24
189.31.211.0/24
191.217.172.0/23
191.219.30.0/24
191.222.248.0/21
200.102.185.0-200.102.186.255
200.181.92.0/24
201.11.224.0/24
201.14.222.0/24
Signature Algorithm: sha256WithRSAEncryption
76:dd:e2:dc:ac:31:69:8d:8b:da:1b:76:3d:c6:20:6f:f5:1b:
61:56:b3:6e:6c:40:a3:b2:7f:b0:2f:c7:4c:6c:da:fb:58:52:
ac:df:ac:fb:c1:d0:c5:ae:a3:c5:1a:48:1d:57:f7:e8:4a:93:
92:1f:99:a3:64:5f:db:9b:83:27:eb:af:6d:cc:db:32:d8:67:
8c:c0:8a:2c:b6:b1:2e:7d:38:53:a7:ac:11:c4:14:2f:44:35:
19:8e:d8:4e:18:a2:12:55:c9:71:64:51:fc:f3:79:7c:f9:bd:
c2:6a:5c:72:c8:b6:b4:cf:97:a3:8b:b7:b2:62:cb:8b:02:1a:
77:fe:0a:ac:76:e5:55:ce:f6:52:29:b4:09:a9:95:e5:4b:92:
ab:e2:a6:32:31:c5:29:a3:88:72:e5:b4:27:e6:f5:1f:cc:58:
b5:e1:16:4f:ce:c6:98:1b:f0:54:07:ab:af:2c:06:90:a4:76:
32:26:e1:e9:08:dc:c0:c4:3a:7c:18:1e:7b:eb:22:37:d1:90:
0d:e7:cc:d6:53:ec:60:65:dc:4e:16:46:0b:ef:d4:c2:ae:33:
dd:c2:dc:13:59:f2:f5:0a:b6:cb:80:01:9c:61:02:bf:c6:b5:
a8:fc:d4:3a:73:3f:ff:21:fd:4b:31:49:06:70:75:c0:be:ad:
5b:13:b1:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:38 2026 by rpki-client