Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v5GElocsliK4qO0mtxFFXe7SCVc.roa
File: v5GElocsliK4qO0mtxFFXe7SCVc.roa (raw, json)
Hash identifier: A/URgjAuOfuyfqmbr/uUNM7jnEnYRUKeyc7HKFVGer0=
Subject key identifier: BF:91:84:96:87:2C:96:22:B8:A8:ED:26:B7:11:45:5D:EE:D2:09:57
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EFF963E2860518AA6B556E0386AAE20F8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v5GElocsliK4qO0mtxFFXe7SCVc.roa
Signing time: Thu 25 Jun 2026 16:21:36 +0000
ROA not before: Thu 25 Jun 2026 16:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133253
IP address blocks: 200.165.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:96:3e:28:60:51:8a:a6:b5:56:e0:38:6a:ae:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 25 16:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf918496872c9622b8a8ed26b711455deed20957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:90:d6:68:ab:fb:41:1f:7b:cc:ae:58:af:
05:b2:76:4b:69:c3:5f:4a:d7:e6:b3:87:6c:4c:ba:
d5:41:b2:c0:43:67:c5:e6:49:a4:6e:ad:28:46:37:
36:54:b1:09:50:58:0b:05:89:59:1d:bf:a6:14:3b:
8d:92:10:68:37:31:0d:e7:76:fe:ee:67:8f:e1:1e:
a0:d1:f1:05:19:f5:8c:71:dc:6f:1a:44:7f:e8:3e:
b1:8f:ce:5b:2e:91:00:dc:1d:02:b8:25:ab:5d:ba:
9e:bf:2d:a2:3a:1b:d3:69:76:9e:69:4c:8b:8e:7a:
5c:ee:92:a7:45:d2:20:cc:e4:99:f8:ed:d6:a8:a1:
88:70:d5:47:39:90:ae:9a:b8:e3:30:42:e9:43:f7:
87:75:09:ad:81:31:75:42:ca:1b:5b:ee:3a:a0:b7:
77:e5:7d:b1:00:88:4b:2f:57:b6:2e:f6:d5:39:21:
30:e3:21:c6:8b:b1:98:61:4e:fb:3d:f0:ab:58:9d:
b1:d0:17:9b:c3:10:5e:ba:18:73:be:85:63:a1:c8:
2e:ef:e1:de:22:e4:36:c0:53:9c:93:95:18:34:e3:
b1:c7:45:8b:6f:7c:24:7c:75:c6:58:79:84:37:a9:
40:04:76:6c:2e:42:eb:82:7f:79:35:f1:5a:cf:2d:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:84:96:87:2C:96:22:B8:A8:ED:26:B7:11:45:5D:EE:D2:09:57
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v5GElocsliK4qO0mtxFFXe7SCVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.165.25.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cb:1e:88:dc:b9:df:11:44:b8:5b:4b:c5:8d:d1:4f:30:bf:
66:77:ce:56:58:00:4d:89:ac:3e:4f:eb:92:a5:e0:38:ba:de:
d1:df:fe:de:ba:b2:28:25:83:45:be:25:d5:9a:17:dc:8d:77:
4a:1b:4c:76:be:c7:56:58:77:64:e9:12:cd:bc:bb:9b:fe:69:
fa:a3:e5:15:de:a7:d1:c4:4d:6f:45:ee:99:40:89:e1:d5:3a:
d6:f0:b3:2b:33:9c:df:f4:81:94:75:eb:51:52:ef:0b:a3:fc:
d1:35:05:82:f1:2c:b5:48:b3:f7:bb:98:ea:d2:91:7a:a4:8a:
6e:77:a5:da:1d:c2:85:e6:d6:94:94:99:54:42:cc:c1:ef:60:
6e:93:44:b6:4c:a9:5b:b9:83:fb:22:e7:81:44:9a:7c:90:a1:
99:c3:27:29:9a:5e:65:c8:4b:3d:94:f4:f8:e5:6c:64:c3:f1:
a7:54:17:79:9b:ff:37:9c:4c:ff:49:de:56:2a:bc:68:97:6c:
eb:0d:17:d4:02:ea:b5:c7:d3:6b:f7:8c:76:08:69:0f:f7:dd:
f1:58:45:65:4b:72:a6:c7:88:0b:4a:8e:b4:29:5e:40:ab:c4:
d4:74:2c:43:74:81:66:4d:19:3b:90:1d:2e:61:80:bd:70:30:
d4:a2:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client