Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vHKVzCY3WyZTMSxtpM8-Nr68kIU.roa
File: vHKVzCY3WyZTMSxtpM8-Nr68kIU.roa (raw, json)
Hash identifier: BCL21zVfJVyOdxp8jldTn9JmSLBxgSwbbAV6UdNpBiY=
Subject key identifier: BC:72:95:CC:26:37:5B:26:53:31:2C:6D:A4:CF:3E:36:BE:BC:90:85
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A130BDAB78219BA3F37AE8BE70FB81C246
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vHKVzCY3WyZTMSxtpM8-Nr68kIU.roa
Signing time: Mon 12 Oct 2026 15:31:38 +0000
ROA not before: Mon 12 Oct 2026 15:31:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 14.102.227.0/24 maxlen: 24
43.242.137.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
94.229.215.0/24 maxlen: 24
103.102.134.0/24 maxlen: 24
194.36.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:bd:ab:78:21:9b:a3:f3:7a:e8:be:70:fb:81:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 12 15:31:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc7295cc26375b2653312c6da4cf3e36bebc9085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:07:c8:59:3f:fe:e6:93:96:8f:71:22:05:
79:e3:4b:f1:95:e0:23:29:5f:99:88:d2:c2:c2:26:
b1:7d:1b:d3:50:e9:b7:43:9c:0e:0b:71:17:8f:42:
cb:3b:4f:d2:23:13:49:63:d9:38:e2:6d:65:dc:74:
8b:60:9d:89:ff:14:6c:00:81:4f:48:cf:8a:09:0e:
3b:b3:ee:96:06:0f:b5:ce:33:f2:3c:1b:16:aa:c1:
23:78:a9:c3:e0:7c:68:26:89:3b:9b:8b:a1:aa:b8:
7e:82:9b:77:47:72:c7:c1:d3:ba:82:af:0f:b3:63:
0e:82:0a:81:06:c2:04:7c:66:92:02:8e:31:33:69:
15:ec:d0:ae:3e:0a:61:c9:e2:ec:f1:a3:12:13:7a:
40:3e:50:24:d5:dd:9f:84:3f:68:a3:f6:95:da:cb:
eb:88:c9:f8:ca:d5:33:2f:84:df:62:98:ea:32:d4:
4d:38:bb:97:f6:a4:32:82:76:03:c4:c6:ba:b4:8e:
c0:df:61:71:73:6f:2d:1e:7b:65:84:85:ae:3f:3f:
1f:e8:84:5c:87:d2:ab:d2:cf:f4:04:9f:d1:e2:78:
e9:05:4a:db:00:e1:ff:62:56:a6:10:c0:ae:8e:8d:
67:d8:3a:d0:39:de:4e:0c:7b:31:cb:c6:8b:df:1e:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:95:CC:26:37:5B:26:53:31:2C:6D:A4:CF:3E:36:BE:BC:90:85
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vHKVzCY3WyZTMSxtpM8-Nr68kIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
43.242.137.0/24
45.151.141.0/24
89.106.23.0/24
94.229.215.0/24
103.102.134.0/24
194.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
99:82:cb:e9:11:20:2e:b4:41:c0:3f:d1:d3:33:44:d1:0f:f0:
f4:5b:7c:54:2e:bc:45:5a:cf:fe:fd:9f:56:ac:bf:0b:a5:29:
88:b5:1d:87:09:e6:4e:26:56:34:e0:66:f2:ba:ce:ba:27:1a:
85:c5:61:81:11:08:ca:6f:15:fe:27:a2:6f:3d:ba:2d:46:9b:
66:34:e7:56:34:97:98:fb:d6:c7:1a:72:4f:97:34:c8:28:6a:
3a:18:01:53:8a:4d:9d:64:ce:1e:00:ce:ef:ca:a0:4f:81:7d:
62:4b:cf:d3:d2:e6:7f:e4:60:5d:24:04:fe:0d:28:84:94:77:
db:4a:fc:54:3b:65:a5:e9:4a:30:2c:97:38:fc:da:9c:a6:65:
e1:14:73:be:bd:91:6f:1c:65:0d:7e:48:3a:69:04:1d:09:ee:
a8:b7:aa:78:d5:af:17:53:26:b2:91:74:49:7d:27:fd:0f:91:
a8:0e:41:c1:01:14:49:b7:3d:2e:ae:49:c0:95:a8:9e:db:75:
08:91:c2:0e:b1:36:d5:04:65:e8:53:67:e6:de:e0:78:4a:ab:
b3:fd:07:45:87:64:6f:91:16:93:f3:e5:d1:e8:d3:13:7b:76:
c5:1a:b1:c4:bc:eb:6f:80:6f:a7:f1:24:fc:ef:8e:f7:2d:12:
33:cc:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:25 2026 by rpki-client