Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vKiYkNV3156driqPoQmI1xZMbg4.roa
File: vKiYkNV3156driqPoQmI1xZMbg4.roa (raw, json)
Hash identifier: +UUGc2zslYhhIP02IDRvjBwTWMAhI2dxFHnjaLLM/FU=
Subject key identifier: BC:A8:98:90:D5:77:D7:9E:9D:AE:2A:8F:A1:09:88:D7:16:4C:6E:0E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0A6051C62303B8506ADD090612D42D31A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vKiYkNV3156driqPoQmI1xZMbg4.roa
Signing time: Tue 15 Sep 2026 17:02:27 +0000
ROA not before: Tue 15 Sep 2026 17:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 189.12.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:05:1c:62:30:3b:85:06:ad:d0:90:61:2d:42:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 15 17:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bca89890d577d79e9dae2a8fa10988d7164c6e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:de:38:69:7c:2b:5f:71:cb:42:3b:ed:30:
cb:89:59:df:4a:f3:51:63:65:de:d2:17:29:0f:01:
f5:31:91:c9:f3:11:cd:8c:3b:7b:2e:81:52:ba:c0:
02:94:c8:fa:5e:35:51:99:1e:ea:a2:ce:ad:c2:c5:
c5:53:05:ba:b9:f4:61:09:c7:5d:39:02:c2:d2:05:
07:2b:d1:ec:3d:dc:7b:f8:6f:e5:47:46:5c:f2:da:
a9:c8:5f:0f:62:75:3f:91:af:fe:2e:0a:a7:61:62:
d1:38:a3:18:78:16:85:c1:9e:8f:90:e1:8c:56:83:
b0:0f:c2:28:69:5c:2a:80:a7:3b:bc:b4:9a:a8:8a:
cd:50:c5:a5:2d:f4:d3:2c:e9:95:89:07:e0:8a:cd:
93:62:b3:f4:af:e4:99:b9:c0:ec:83:8c:da:9a:53:
58:51:5e:c1:75:05:d8:1d:e3:a2:19:43:2a:20:a5:
11:a7:4e:2c:e6:b1:51:29:0b:34:7a:5b:a5:ad:4b:
88:6f:3b:62:e4:84:b0:03:9b:08:d0:a2:11:53:17:
26:f2:f9:2c:5d:f2:40:3f:25:35:cd:ff:c6:92:b8:
3e:81:3c:a9:a5:8f:5c:7f:56:8e:55:2c:fc:02:ed:
77:cb:9a:de:aa:0e:bb:89:00:ee:cf:04:e0:73:e6:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:98:90:D5:77:D7:9E:9D:AE:2A:8F:A1:09:88:D7:16:4C:6E:0E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vKiYkNV3156driqPoQmI1xZMbg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:31:3b:04:68:7d:35:97:3c:4d:fa:00:2b:8a:f1:b0:59:6f:
1d:df:74:0a:1e:42:a3:cc:39:f4:42:d1:a2:c5:d7:68:75:c9:
34:e6:1b:1b:56:34:29:b0:4d:a7:8a:fe:8c:9b:f5:e0:a3:11:
20:c0:ef:f1:9a:af:23:8b:42:44:36:65:8a:61:75:cc:2e:50:
a1:19:6e:08:6b:e7:c2:a4:0c:57:23:d8:af:f7:d8:dc:a6:e2:
9c:c5:61:a2:47:6d:b9:78:43:0e:37:99:d6:ae:da:0b:07:b1:
ee:3b:0a:6f:48:67:cd:ef:e5:2c:54:b5:da:cd:e9:be:0a:d9:
ac:39:9d:6f:b1:81:73:18:9f:c3:98:61:84:1e:cb:e0:3c:66:
da:20:0d:17:07:28:49:5b:0a:90:54:49:2b:15:c7:46:c8:1a:
6c:1c:b5:5c:ad:93:1c:50:ff:a6:3f:0e:84:fe:b8:f4:00:a8:
e9:c4:53:6c:2e:ea:32:3d:ee:0a:40:24:55:35:e6:b4:f6:c2:
59:1c:69:07:fe:16:2b:c5:be:26:91:46:0c:ef:83:6e:cb:1b:
df:44:58:c4:9f:e1:94:d6:bc:71:28:29:dd:40:c7:a6:f4:a2:
b6:11:26:01:7c:3f:b5:18:15:c8:99:ad:f4:8d:6e:01:9a:1f:
ea:19:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:21:03 2026 by rpki-client