Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tOaxEZ6aAkzTE3BGHWj5pOSXXak.roa
File: tOaxEZ6aAkzTE3BGHWj5pOSXXak.roa (raw, json)
Hash identifier: ebds1TzaudEORJz1lY9nNIKl0VSdttbBYnhfoHAWd5Q=
Subject key identifier: B4:E6:B1:11:9E:9A:02:4C:D3:13:70:46:1D:68:F9:A4:E4:97:5D:A9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0587A6BBA1DB08470496866B6A00714E5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tOaxEZ6aAkzTE3BGHWj5pOSXXak.roa
Signing time: Mon 31 Aug 2026 15:40:13 +0000
ROA not before: Mon 31 Aug 2026 15:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 191.222.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:7a:6b:ba:1d:b0:84:70:49:68:66:b6:a0:07:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 31 15:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4e6b1119e9a024cd31370461d68f9a4e4975da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:4d:c8:8d:b1:e9:9e:af:ba:76:23:76:3b:
7c:72:e9:4a:05:19:89:f1:44:e6:17:e6:d8:e7:16:
56:92:9c:da:86:3e:21:2e:eb:51:8a:1e:ab:d8:ae:
13:73:cb:da:a3:ce:25:54:d6:98:91:96:b6:2a:ed:
09:12:e3:69:c3:1a:f5:98:a8:9c:fe:29:b6:d5:94:
8e:88:7a:d8:94:33:ec:47:3e:b3:65:da:71:2b:fc:
b9:f3:cb:e3:b4:2d:c7:35:5f:a4:9f:5c:a0:a6:c4:
7a:d5:e1:81:6e:19:43:92:8a:da:f7:58:ac:e4:62:
69:6a:bc:b7:6d:0a:83:11:ad:3b:2e:9d:fa:07:6b:
7e:99:41:f1:5a:f7:97:26:3b:c8:1a:97:cc:47:c8:
f5:a4:52:03:be:64:c0:1a:7c:60:df:03:a0:d9:83:
b2:e4:2c:da:3a:4f:5a:a2:03:dc:c7:70:28:dc:6a:
6d:1b:7c:1b:e8:a2:27:40:5e:a1:42:18:ed:02:e3:
6b:32:16:9e:c1:4c:d7:0f:52:94:74:8c:50:66:85:
79:ec:59:30:ba:0e:94:75:ed:42:2e:90:45:03:c3:
9e:77:cf:ce:07:f1:e8:ac:c2:93:10:8f:35:88:e1:
37:cb:0f:ce:f0:72:39:dd:a2:ef:33:12:f5:19:87:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:B1:11:9E:9A:02:4C:D3:13:70:46:1D:68:F9:A4:E4:97:5D:A9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tOaxEZ6aAkzTE3BGHWj5pOSXXak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.249.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0e:82:aa:f0:5d:54:5d:6d:0f:68:46:24:66:12:58:97:88:
08:6e:77:31:8a:a4:31:61:95:64:ee:24:7f:df:d0:ea:41:af:
f5:ee:10:06:c5:a8:c0:6f:15:de:73:49:f3:bd:5f:f2:fb:e9:
81:9c:22:dd:78:29:ee:9e:86:e9:1f:4a:22:60:40:9f:03:b0:
5b:a1:05:ee:49:39:96:db:c8:a3:3b:e1:02:52:21:ec:8e:98:
a5:83:03:30:9f:fd:0c:bb:1a:33:4e:60:2c:80:71:bd:01:ce:
0e:03:36:42:4a:f4:60:4d:1d:46:e4:05:ff:f8:9d:68:35:c0:
09:99:71:72:64:ba:42:f7:63:54:c9:c1:f6:cc:77:06:ff:da:
db:18:07:f6:a7:21:28:b3:a0:9d:7a:90:61:e0:e9:1c:83:65:
6c:4f:57:0c:ee:d1:0a:b5:85:12:8b:b1:b6:e2:97:9b:87:43:
d8:23:b8:69:6b:2c:ab:3c:51:da:00:15:bd:cc:91:0a:c1:fc:
e1:5a:bb:a4:d2:ff:49:e9:52:3c:5e:56:cc:bb:92:9e:16:2d:
5b:b6:ce:c6:55:97:ee:2e:59:e8:72:f9:f5:4f:fb:eb:d6:a0:
63:f1:c8:ce:f2:c8:3b:69:da:08:a1:fa:ae:7a:9d:50:7a:2f:
bd:a2:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:06 2026 by rpki-client