Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s7SZghwd2mMs4CREn2SWJ4b5xfk.roa
File: s7SZghwd2mMs4CREn2SWJ4b5xfk.roa (raw, json)
Hash identifier: AIG5zkI1wGs40GF6iD+EA9q5L8yUc8Y9B8VToVN1H9s=
Subject key identifier: B3:B4:99:82:1C:1D:DA:63:2C:E0:24:44:9F:64:96:27:86:F9:C5:F9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0AADFE676FCD0045CAC8EC0B049466CFD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s7SZghwd2mMs4CREn2SWJ4b5xfk.roa
Signing time: Wed 16 Sep 2026 15:39:55 +0000
ROA not before: Wed 16 Sep 2026 15:39:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269098
IP address blocks: 201.11.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:df:e6:76:fc:d0:04:5c:ac:8e:c0:b0:49:46:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 16 15:39:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3b499821c1dda632ce024449f64962786f9c5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:7d:e0:fe:ef:d1:02:0f:76:32:09:a8:6d:
20:20:be:23:03:5f:fb:10:29:5c:c7:87:60:29:2a:
ec:09:d1:1e:9d:75:89:d3:55:d0:58:87:71:84:2a:
71:01:e9:f8:ac:4d:5c:ff:89:6e:57:36:8b:6c:d6:
42:95:04:46:53:ba:39:bd:0e:e3:fe:23:d5:48:23:
8e:b9:a9:6b:de:fe:e7:0c:e0:24:8c:86:4f:0e:64:
92:a9:a1:5f:cb:18:00:67:8a:a9:3f:47:29:49:7d:
24:a6:06:02:47:12:aa:10:77:bd:e4:49:41:ef:44:
0a:70:d0:b8:28:a3:a7:7f:f5:05:45:7d:64:25:8c:
13:39:f6:bf:2a:29:6b:2f:3b:65:62:0a:34:72:fa:
ae:7a:f4:1b:b7:d5:85:b1:cf:7e:45:f4:7b:af:43:
6f:75:6c:e9:f8:65:77:b6:7d:53:fc:1a:55:4e:4c:
35:b7:c4:ee:f9:8e:84:46:d4:95:f7:b2:80:64:f9:
af:87:28:30:ee:6f:ec:4d:56:96:c3:55:3e:e4:73:
3a:c9:65:d8:e2:bc:35:fd:52:bd:78:b0:17:9a:94:
62:cf:b5:d6:e5:ce:57:33:54:0a:22:58:1a:1b:c5:
72:ef:8d:01:af:7b:8f:57:19:30:07:b7:b9:a2:52:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B4:99:82:1C:1D:DA:63:2C:E0:24:44:9F:64:96:27:86:F9:C5:F9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/s7SZghwd2mMs4CREn2SWJ4b5xfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.11.226.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:43:b6:23:da:0e:f9:2a:1d:2a:28:bd:4c:bd:1b:bc:81:b2:
b9:b4:d6:b3:1d:bb:a3:c5:cf:91:66:53:bf:b1:42:34:75:6e:
e5:67:2b:84:2d:db:3c:da:eb:75:27:f0:2f:74:ba:d2:79:99:
5d:28:96:aa:d3:32:1c:13:a5:84:0f:03:53:86:e0:95:2e:ba:
bc:1d:10:54:5c:f5:ae:e0:e9:41:5a:64:aa:2b:11:e3:d8:08:
02:61:be:c9:2c:57:e5:41:e6:90:6a:ee:94:76:56:e7:5c:97:
17:eb:da:f7:b3:a1:0a:2a:4f:fc:73:15:4e:6a:59:ec:e2:e7:
cd:16:a0:b3:78:6b:77:cf:92:e4:19:04:5e:54:59:95:84:d9:
50:c0:b2:9a:35:36:45:94:63:c8:43:eb:60:55:b8:13:e2:02:
b4:6a:55:b8:10:f6:e2:35:aa:e3:3d:70:4b:5b:2c:bf:64:02:
b5:6b:1a:77:9c:a5:57:41:cd:7c:31:9f:f6:44:ae:b2:2b:68:
80:74:7f:2c:00:4b:13:91:b6:4a:a9:c9:76:d5:b7:8c:a5:72:
08:3a:a4:1f:de:c0:14:4a:69:12:3b:1e:35:d2:0c:7d:bb:b7:
8b:ea:08:94:8a:3e:72:33:06:dc:ce:ba:ee:7d:b6:ad:31:d1:
cf:68:b4:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCq3+Z2/NAEXKyOwLBJRmz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwOTE2MTUzOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2I0OTk4MjFjMWRkYTYzMmNlMDI0NDQ5ZjY0OTYyNzg2ZjljNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1594P7v0QIPdjIJqG0gIL4jA1/7
EClcx4dgKSrsCdEenXWJ01XQWIdxhCpxAen4rE1c/4luVzaLbNZClQRGU7o5vQ7j
/iPVSCOOualr3v7nDOAkjIZPDmSSqaFfyxgAZ4qpP0cpSX0kpgYCRxKqEHe95ElB
70QKcNC4KKOnf/UFRX1kJYwTOfa/KilrLztlYgo0cvquevQbt9WFsc9+RfR7r0Nv
dWzp+GV3tn1T/BpVTkw1t8Tu+Y6ERtSV97KAZPmvhygw7m/sTVaWw1U+5HM6yWXY
4rw1/VK9eLAXmpRiz7XW5c5XM1QKIlgaG8Vy740Br3uPVxkwB7e5olK2/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLO0mYIcHdpjLOAkRJ9klieG+cX5MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvczdTWmdod2QybU1zNENSRW4yU1dKNGI1eGZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQviMA0G
CSqGSIb3DQEBCwUAA4IBAQBuQ7Yj2g75Kh0qKL1MvRu8gbK5tNazHbujxc+RZlO/
sUI0dW7lZyuELds82ut1J/AvdLrSeZldKJaq0zIcE6WEDwNThuCVLrq8HRBUXPWu
4OlBWmSqKxHj2AgCYb7JLFflQeaQau6UdlbnXJcX69r3s6EKKk/8cxVOalns4ufN
FqCzeGt3z5LkGQReVFmVhNlQwLKaNTZFlGPIQ+tgVbgT4gK0alW4EPbiNarjPXBL
Wyy/ZAK1axp3nKVXQc18MZ/2RK6yK2iAdH8sAEsTkbZKqcl21beMpXIIOqQf3sAU
SmkSOx410gx9u7eL6giUij5yMwbczrrufbatMdHPaLTP
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:48:09 2026 by rpki-client