Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s5VDitRTeyBKUprhDwp8lI5uyBM.roa
File: s5VDitRTeyBKUprhDwp8lI5uyBM.roa (raw, json)
Hash identifier: isqpKKYfcnad5YERIp+uUfVC2FaR8B3DFcK9Jzl6nlM=
Subject key identifier: B3:95:43:8A:D4:53:7B:20:4A:52:9A:E1:0F:0A:7C:94:8E:6E:C8:13
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A14A8C0C9E20650932BED9B553BAFDCDBC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s5VDitRTeyBKUprhDwp8lI5uyBM.roa
Signing time: Sat 17 Oct 2026 15:47:34 +0000
ROA not before: Sat 17 Oct 2026 15:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219141
IP address blocks: 200.102.88.0/24 maxlen: 24
200.102.89.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.95.0/24 maxlen: 24
200.181.83.0/24 maxlen: 24
200.181.84.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:8c:0c:9e:20:65:09:32:be:d9:b5:53:ba:fd:cd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 17 15:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b395438ad4537b204a529ae10f0a7c948e6ec813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:87:77:1e:f5:bd:16:e2:5e:4a:d7:7f:0a:
51:8d:58:7a:75:39:8c:ed:19:24:00:3c:eb:e6:ca:
f6:0d:f8:e6:e4:37:07:e9:0c:e2:08:9e:9c:58:33:
6c:ee:38:56:20:77:f2:14:f9:0c:59:6c:fb:1b:d3:
38:52:bb:86:da:46:92:66:03:b9:8e:a6:b5:5a:26:
31:16:25:ac:61:1a:45:0f:9f:76:e8:61:ed:03:ba:
c9:79:8c:1d:cd:03:d5:aa:e6:26:19:e8:04:96:74:
62:71:71:75:89:94:f7:a6:7a:ff:54:5d:ba:bf:94:
5c:6d:6a:bf:c1:59:ea:91:5a:83:1a:c4:05:1b:d0:
35:ed:ea:7a:e4:b8:ce:51:ec:50:e8:d7:50:4b:45:
e3:1f:89:5b:e1:6d:80:67:11:14:b2:d7:0f:78:9c:
1d:25:4d:53:c3:b7:c6:1e:a0:3f:fb:32:eb:b0:79:
0f:8f:c6:78:0a:38:ff:04:5c:4a:63:40:79:9a:18:
08:31:ae:45:b0:cf:19:98:91:60:e1:55:37:ae:ee:
dd:2e:0c:40:10:9e:75:e9:fd:d3:1d:a6:8d:80:66:
41:f5:cf:21:17:d8:ea:88:28:ea:97:60:98:96:dd:
27:da:ec:3b:ff:ed:d2:d4:d0:6a:83:9c:90:b6:bc:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:43:8A:D4:53:7B:20:4A:52:9A:E1:0F:0A:7C:94:8E:6E:C8:13
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s5VDitRTeyBKUprhDwp8lI5uyBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.88.0-200.102.90.255
200.102.94.0/23
200.181.83.0-200.181.86.255
Signature Algorithm: sha256WithRSAEncryption
70:c3:7d:b6:57:55:23:3a:84:ba:82:c4:8c:77:a8:8b:d5:4e:
c6:b5:59:67:79:bc:45:90:a4:00:4c:f2:9a:03:c8:42:30:cf:
e3:99:c1:72:60:e0:f5:ef:c1:0a:07:a4:9e:02:36:10:60:89:
bc:16:21:cf:ba:95:1a:c5:7c:e3:e8:e2:33:e3:3f:9c:60:53:
ea:72:83:7e:78:86:10:50:e4:0f:d4:75:59:c9:39:9e:12:5e:
6e:a8:a1:9e:95:e1:00:fb:05:c3:77:e1:9c:e3:21:8d:4e:96:
45:b7:65:fd:2f:aa:14:70:ae:6c:5a:06:cf:53:e0:a0:63:6b:
7e:52:20:e0:10:bd:d4:3d:6f:3c:85:e2:40:b0:6b:5e:f4:e3:
58:74:65:a3:72:99:76:32:01:87:cf:2c:49:35:fc:22:28:17:
de:ae:6e:79:ad:af:76:c9:89:6b:ba:3f:83:bb:1a:ee:f9:58:
07:74:01:50:70:cd:93:85:fa:e0:52:6d:9a:d0:04:4f:31:2b:
b4:11:e8:a7:aa:b1:9d:0e:c1:6e:a3:ee:d9:b6:6c:0a:b5:85:
2d:b4:0a:4f:4e:16:31:2b:a2:fa:fc:0f:1d:a1:0d:bc:3b:3d:
61:11:45:bc:ae:b2:db:e1:32:2f:72:f1:6c:5f:d4:2a:1a:e0:
64:d3:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:21 2026 by rpki-client