Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uufbPU7z1-xXfnUYps0cb-n2JhU.roa
File: uufbPU7z1-xXfnUYps0cb-n2JhU.roa (raw, json)
Hash identifier: 1Toywu7fFGL1Gno4uUSNzGnx4UZTK24Rwb61I6u41Tw=
Subject key identifier: BA:E7:DB:3D:4E:F3:D7:EC:57:7E:75:18:A6:CD:1C:6F:E9:F6:26:15
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A07CB34DE8CFAB85B8D817C9ECAD9A9274
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uufbPU7z1-xXfnUYps0cb-n2JhU.roa
Signing time: Mon 07 Sep 2026 16:28:40 +0000
ROA not before: Mon 07 Sep 2026 16:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 189.12.57.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
200.165.25.0/24 maxlen: 24
201.11.230.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
201.24.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:b3:4d:e8:cf:ab:85:b8:d8:17:c9:ec:ad:9a:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 7 16:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bae7db3d4ef3d7ec577e7518a6cd1c6fe9f62615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:0a:62:88:44:ac:55:db:68:0e:52:02:ce:
14:f1:6b:d0:72:8c:d9:da:13:fd:31:b9:ca:e5:b0:
8a:e5:8d:bd:f3:5c:a5:1b:5d:93:47:3d:48:e8:05:
8b:f4:52:06:9b:85:00:57:2b:1b:c2:25:4c:47:52:
6e:ef:77:0c:b5:3e:11:f5:6f:c0:14:20:32:1e:9e:
6b:2f:64:26:c4:1b:fa:ba:b4:96:80:67:c2:d9:4c:
0b:79:d4:6a:f2:ef:15:eb:49:8e:e2:2e:81:a4:9d:
f9:9a:03:f0:02:7c:eb:6e:67:cd:f7:40:5d:3f:1a:
bb:7e:36:08:c4:de:88:04:25:b2:12:e7:a1:56:0f:
48:4e:f4:23:fd:2d:8a:90:77:31:5d:8f:b5:a3:e7:
34:88:c3:e9:e5:b5:59:a7:b4:f3:25:a9:52:5c:2a:
32:51:81:fa:d9:07:4f:f4:1d:eb:aa:23:8a:da:27:
5c:ea:57:92:05:f6:db:a6:23:a3:c1:b3:fe:63:1e:
54:ec:c1:a6:a8:b5:a4:69:d1:c1:29:e6:6b:c4:b5:
73:0c:12:09:ba:73:22:43:e4:f1:99:ac:5a:1d:bb:
a3:96:93:1c:18:f6:7e:c5:e0:36:79:22:5f:f3:42:
28:27:0c:d3:c1:7c:7c:45:0c:4c:84:90:53:f0:25:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:DB:3D:4E:F3:D7:EC:57:7E:75:18:A6:CD:1C:6F:E9:F6:26:15
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uufbPU7z1-xXfnUYps0cb-n2JhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.57.0/24
189.31.212.0/24
189.73.22.0/23
191.44.19.0/24
200.165.25.0/24
201.11.230.0/24
201.14.220.0/24
201.24.196.0/24
201.24.202.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f2:74:e9:83:a7:58:7d:3c:66:05:04:dd:4d:4b:97:9b:6f:
22:87:e6:88:87:29:c2:19:b7:91:60:1c:0e:c8:3f:6b:16:2f:
46:9e:cc:22:25:d0:02:90:c4:66:8a:5b:f5:8e:3f:c7:15:3a:
60:32:32:7a:a0:01:2a:49:7f:f1:fd:20:e0:b8:42:42:91:07:
d1:e6:4b:ea:e0:c6:51:78:34:8e:8c:1d:b5:0c:47:27:b4:ad:
59:40:40:3e:cc:a1:9e:10:e1:f2:e3:eb:26:ca:27:2a:0d:b6:
bc:82:e1:e1:fd:05:4a:d3:b5:53:98:21:e0:98:79:bf:a4:38:
00:9e:66:f0:fe:82:76:7f:57:11:a1:2f:0b:1e:59:0a:b1:14:
63:59:c7:ca:f2:59:d9:7b:1b:46:a7:3c:4a:2c:51:2b:48:5b:
05:80:13:3e:41:11:d2:19:85:e3:26:fd:eb:e4:c0:ff:33:c0:
b1:82:4b:bf:4b:84:32:36:13:8b:0a:17:0c:1f:97:e9:57:93:
57:57:7f:1f:14:2a:01:a5:72:08:ed:52:c6:6f:dc:9f:20:31:
c7:95:df:89:6e:1b:7b:49:5f:45:5d:d1:52:bd:44:62:1e:7f:
43:b7:f8:a5:8a:43:43:3e:eb:c4:61:85:33:03:a2:2b:dd:99:
61:12:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:55 2026 by rpki-client