Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v1xZt91OU227aLWBvEZhSbQuM9c.roa
File: v1xZt91OU227aLWBvEZhSbQuM9c.roa (raw, json)
Hash identifier: aKC+eesgjuvmTmHXawV1nMcPLCIOJ/WTSq9f4A1tNQI=
Subject key identifier: BF:5C:59:B7:DD:4E:53:6D:BB:68:B5:81:BC:46:61:49:B4:2E:33:D7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FBE132EF46CD7D5082B0C4A8DBBEE646E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v1xZt91OU227aLWBvEZhSbQuM9c.roa
Signing time: Sat 01 Aug 2026 16:05:55 +0000
ROA not before: Sat 01 Aug 2026 16:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 103.102.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:13:2e:f4:6c:d7:d5:08:2b:0c:4a:8d:bb:ee:64:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 1 16:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf5c59b7dd4e536dbb68b581bc466149b42e33d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:b1:c4:c3:e3:85:c2:c5:18:36:62:56:7a:
61:69:1c:54:b0:58:ba:93:82:a3:07:89:e0:87:75:
e6:75:21:9f:7d:34:98:71:c8:21:32:8d:86:5a:3e:
12:82:cf:b5:06:94:60:83:8a:26:78:bb:aa:0d:5f:
f4:11:d2:4b:28:7e:f8:53:26:21:b7:83:a9:3a:92:
26:5e:f2:e2:ce:d2:37:89:a9:21:09:70:93:ea:05:
d1:a2:8e:f4:4c:1b:11:1f:46:d4:f1:0c:b9:ee:57:
a9:19:00:74:b0:93:30:62:02:46:ab:de:2c:3c:e0:
5e:0d:90:b9:0b:18:20:cd:31:4b:c0:b2:fa:b8:9a:
1c:c0:12:f5:9a:72:b9:35:49:f9:61:61:90:87:10:
aa:6f:2d:e6:7c:e9:ba:12:a4:53:0b:7f:da:59:6c:
e4:23:ec:5c:d6:39:8f:10:e3:93:34:65:93:2b:0d:
d9:ae:2c:2e:1c:35:b5:41:61:58:f5:8d:54:13:27:
5b:8f:09:38:dc:7e:f8:c0:68:fa:e6:a9:74:67:fd:
38:89:be:74:9c:06:90:cd:25:e9:d3:62:fd:ea:22:
6f:ad:1e:39:80:22:26:67:18:04:41:d5:e2:53:13:
7b:a3:20:b6:d9:a6:0d:2a:08:72:8c:cf:b1:3b:ea:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:59:B7:DD:4E:53:6D:BB:68:B5:81:BC:46:61:49:B4:2E:33:D7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v1xZt91OU227aLWBvEZhSbQuM9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:39:29:fe:e1:43:ac:b7:79:7c:8f:00:35:59:be:37:96:32:
76:d5:e0:ee:49:b4:5d:af:18:32:00:fd:f5:17:e8:27:7b:64:
3d:40:41:f4:c2:c5:dd:1a:f0:ec:7b:66:40:25:f3:99:7f:6e:
bc:85:33:26:e1:56:bf:cb:75:45:e3:93:23:7c:c1:e5:b7:c1:
5f:9b:82:47:c0:83:3b:c9:03:46:9c:84:3a:3b:72:10:39:00:
e6:1c:10:ea:b4:3e:a9:a4:84:e3:6c:8f:b7:cf:8b:c6:3e:01:
61:26:30:e1:71:3d:5e:f5:3d:f2:f7:5b:8d:4c:a8:19:b3:e4:
f7:8b:c6:02:65:00:0f:ae:a6:a4:46:df:aa:85:27:28:07:4b:
98:dc:6c:1b:e5:cd:8a:a2:b0:48:44:19:8b:82:48:89:74:e8:
d5:8f:f5:8e:f3:dd:8b:72:33:48:4a:86:f2:2c:16:fc:fb:65:
ce:5d:af:b6:38:3a:29:47:de:26:6b:f5:84:56:56:b3:3e:58:
25:49:ff:07:d9:6b:8f:8d:c6:18:bf:f5:df:a5:dd:b3:f0:06:
55:4b:fa:48:82:01:16:b4:b1:00:d6:1e:d9:b1:a9:56:89:a4:
82:2e:ef:f3:53:02:14:a2:e0:f7:60:58:5c:17:94:24:12:1b:
a8:25:61:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ++Ey70bNfVCCsMSo277mRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwODAxMTYwNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjVjNTliN2RkNGU1MzZkYmI2OGI1ODFiYzQ2NjE0OWI0MmUzM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAWxxMPjhcLFGDZiVnphaRxUsFi6
k4KjB4ngh3XmdSGffTSYccghMo2GWj4Sgs+1BpRgg4omeLuqDV/0EdJLKH74UyYh
t4OpOpImXvLiztI3iakhCXCT6gXRoo70TBsRH0bU8Qy57lepGQB0sJMwYgJGq94s
POBeDZC5CxggzTFLwLL6uJocwBL1mnK5NUn5YWGQhxCqby3mfOm6EqRTC3/aWWzk
I+xc1jmPEOOTNGWTKw3ZriwuHDW1QWFY9Y1UEydbjwk43H74wGj65ql0Z/04ib50
nAaQzSXp02L96iJvrR45gCImZxgEQdXiUxN7oyC22aYNKghyjM+xO+pjxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL9cWbfdTlNtu2i1gbxGYUm0LjPXMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvdjF4WnQ5MU9VMjI3YUxXQnZFWmhTYlF1TTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2aFMA0G
CSqGSIb3DQEBCwUAA4IBAQBsOSn+4UOst3l8jwA1Wb43ljJ21eDuSbRdrxgyAP31
F+gne2Q9QEH0wsXdGvDse2ZAJfOZf268hTMm4Va/y3VF45MjfMHlt8Ffm4JHwIM7
yQNGnIQ6O3IQOQDmHBDqtD6ppITjbI+3z4vGPgFhJjDhcT1e9T3y91uNTKgZs+T3
i8YCZQAPrqakRt+qhScoB0uY3Gwb5c2KorBIRBmLgkiJdOjVj/WO892LcjNISoby
LBb8+2XOXa+2ODopR94ma/WEVlazPlglSf8H2WuPjcYYv/Xfpd2z8AZVS/pIggEW
tLEA1h7ZsalWiaSCLu/zUwIUouD3YFhcF5QkEhuoJWEi
-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:23 2026 by rpki-client