Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sLBV_kEtyw7BW_4pM4reRVuete4.roa
File: sLBV_kEtyw7BW_4pM4reRVuete4.roa (raw, json)
Hash identifier: kHvgw53fP1lR4cJh4+XUqKg5n+2SQkT9j+wPVrHAcZM=
Subject key identifier: B0:B0:55:FE:41:2D:CB:0E:C1:5B:FE:29:33:8A:DE:45:5B:9E:B5:EE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0E8B9EF19423B528986B03355E908D18D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sLBV_kEtyw7BW_4pM4reRVuete4.roa
Signing time: Mon 28 Sep 2026 15:54:54 +0000
ROA not before: Mon 28 Sep 2026 15:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45960
IP address blocks: 77.111.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:b9:ef:19:42:3b:52:89:86:b0:33:55:e9:08:d1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 28 15:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b055fe412dcb0ec15bfe29338ade455b9eb5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:b7:30:9f:f6:97:e2:35:8f:ef:06:43:ad:
e7:77:1c:4b:6d:5e:6f:38:16:83:e9:57:05:65:7f:
a2:79:bd:54:e8:33:ea:38:b4:e5:0e:19:bd:0a:09:
08:e1:75:72:f5:a0:34:98:cb:db:1d:d6:0b:c4:6e:
e6:40:66:69:df:29:66:1f:24:7a:14:2d:1e:1b:1b:
d7:42:8d:38:70:f2:4b:29:c8:14:d1:83:da:75:00:
0d:da:f4:27:86:c1:91:0e:d1:9d:67:39:e0:e8:36:
b1:34:ad:33:83:6d:a8:a0:8c:12:82:63:da:49:1a:
d4:eb:db:b6:6f:98:15:fc:00:15:c4:d8:94:e0:82:
03:86:f0:2b:21:60:9a:6b:bf:ff:33:c2:12:1e:90:
4f:46:76:5c:05:5d:63:e5:c9:3d:4b:b9:a5:2f:e6:
45:c8:43:29:d9:d6:a3:14:48:68:47:bd:87:84:95:
9e:73:27:16:37:03:b1:97:ac:3b:21:bc:d8:73:a5:
04:d1:e3:35:a4:7f:9d:4c:ca:9c:4d:2a:60:4e:76:
f0:74:b1:5f:2b:59:ee:c1:90:48:07:50:08:4b:2d:
9c:8c:4d:a2:39:02:1c:d0:06:16:37:c6:f9:e5:1f:
cf:42:e9:bf:f4:e0:2b:f7:b2:d1:84:81:15:69:08:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:55:FE:41:2D:CB:0E:C1:5B:FE:29:33:8A:DE:45:5B:9E:B5:EE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sLBV_kEtyw7BW_4pM4reRVuete4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.108.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:ad:98:45:ca:78:cd:76:df:b7:12:27:77:56:90:4b:59:e7:
c3:4d:07:bb:a2:65:17:2c:4e:bb:15:a7:f7:49:fc:b5:cd:1b:
11:95:a2:ca:4b:88:e1:3b:8d:22:d8:83:54:26:8c:59:58:5f:
6d:51:37:ce:2b:e5:20:58:59:61:2f:97:bc:ab:c8:cc:70:80:
63:b0:59:37:ca:b5:de:7c:05:ae:e4:e2:a1:2a:dd:ce:5c:94:
de:ce:aa:53:3f:fd:a2:06:d4:98:35:28:87:f8:f0:67:ea:c2:
fa:75:58:69:ed:bb:35:68:65:08:24:1f:ed:d4:14:b5:d3:39:
ba:69:98:83:de:66:2d:2c:8e:cf:74:c5:63:c0:fa:99:c0:90:
ba:f7:6e:68:ee:15:ea:18:8b:92:5f:cb:5e:4c:ec:28:38:09:
11:85:59:33:5d:f5:c9:c6:43:51:91:50:ee:81:77:77:d5:9c:
b9:68:66:93:e8:ea:15:ad:08:59:7a:a3:3e:63:87:4c:52:f3:
c8:88:ce:40:a5:b8:e7:1a:e1:73:03:0f:9d:24:a3:d6:07:1b:
68:f9:f5:7b:0a:6e:aa:f9:14:1d:b9:10:d5:01:c8:ee:6d:46:
fb:25:ea:a7:18:19:80:d9:50:cf:17:d1:1e:3a:49:d5:39:5f:
cf:70:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:22 2026 by rpki-client