Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w7v_CxAdQj3GBU4EKjm3kMzX-ms.roa
File: w7v_CxAdQj3GBU4EKjm3kMzX-ms.roa (raw, json)
Hash identifier: GxhFJtGsVi2E/A5VLJtmZ6AG0KUn5Z5WpJ15/uWvM6A=
Subject key identifier: C3:BB:FF:0B:10:1D:42:3D:C6:05:4E:04:2A:39:B7:90:CC:D7:FA:6B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F7176010E3A05C25285CB00F895A7BF8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w7v_CxAdQj3GBU4EKjm3kMzX-ms.roa
Signing time: Thu 01 Oct 2026 10:51:39 +0000
ROA not before: Thu 01 Oct 2026 10:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218722
IP address blocks: 191.44.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:17:60:10:e3:a0:5c:25:28:5c:b0:0f:89:5a:7b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 1 10:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3bbff0b101d423dc6054e042a39b790ccd7fa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:db:5a:9d:e8:34:00:c6:ee:57:75:e4:69:
05:36:63:85:43:73:b1:3b:cc:b7:51:a8:3e:98:df:
cb:34:1d:be:cf:6f:40:3a:b7:9e:db:32:cb:c2:25:
d7:cb:45:23:65:bb:89:ce:3f:02:16:23:45:17:59:
bd:d1:14:41:fa:2c:71:61:5b:1f:e8:2e:0b:6c:c8:
61:5d:f5:0f:c2:bd:1b:2a:5b:16:49:05:93:69:3c:
f1:76:96:d9:e2:69:af:5a:ea:33:79:70:61:c4:47:
77:fb:6c:e4:7d:2d:ab:f5:91:84:2b:8d:a5:8e:c4:
8e:eb:91:4a:a1:31:ac:8d:f4:aa:3a:8a:db:79:9c:
68:4d:73:85:5b:9a:a9:33:26:e2:c1:da:20:ae:9e:
b8:1c:08:a4:05:98:d2:28:2c:91:6a:52:9f:b6:37:
3c:4d:92:3f:cd:a6:df:e8:a4:f5:e4:ff:59:ea:f9:
0b:f8:e8:0c:5b:8f:e5:8c:e3:e7:0a:90:e6:be:09:
7e:39:3e:5c:58:07:82:92:a2:c7:af:1f:1f:27:be:
ef:ab:27:9d:5b:99:6f:e8:d9:0c:c0:33:ea:7a:12:
5f:fc:ab:f2:80:1e:87:dd:05:b4:42:19:9a:fb:a7:
f6:4f:d4:7e:5f:9e:04:59:60:d8:8b:0e:c4:4b:17:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:FF:0B:10:1D:42:3D:C6:05:4E:04:2A:39:B7:90:CC:D7:FA:6B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w7v_CxAdQj3GBU4EKjm3kMzX-ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.18.0/24
Signature Algorithm: sha256WithRSAEncryption
36:80:64:3f:94:5e:d1:73:69:d7:32:ee:a2:5f:3a:ce:59:93:
3c:8a:04:cf:95:9b:9f:2b:4d:15:c9:65:a1:bf:ab:7c:4d:6d:
49:77:b6:f9:1d:fd:71:c2:cd:9e:65:64:bd:c0:9e:00:b1:39:
c4:1a:4b:b3:d3:9b:70:72:b5:e8:04:0d:59:cf:1f:97:c3:55:
1e:48:51:3b:5d:a2:5d:c8:32:2f:d4:96:1c:f5:33:48:d7:09:
fc:d5:ee:35:22:dc:ef:0f:af:a7:81:a1:20:17:ed:e1:94:5e:
51:62:87:06:9f:74:fd:a7:19:f6:de:b0:b9:9b:b8:94:4d:1b:
0b:a3:bd:21:fa:09:10:84:39:78:2b:3d:bb:53:65:f0:d3:cf:
a1:1e:5b:3e:05:fb:1c:bc:c7:7b:14:a1:73:83:c9:f1:60:80:
23:4b:76:ea:d8:52:2a:7d:01:0d:fc:63:d5:6b:d6:74:fd:0d:
69:c0:2f:6f:f1:0f:38:59:61:b8:c6:e9:39:6d:e3:4f:39:57:
7d:aa:76:e4:db:41:d9:54:43:6a:c7:c6:cc:29:52:9a:08:9e:
9c:0b:ab:8f:46:12:5c:b2:97:72:0a:bd:03:ff:c4:2e:d6:e8:
d2:f9:93:0d:86:76:e9:54:c6:cf:62:b4:0a:7e:dd:2b:47:ad:
88:ec:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:53 2026 by rpki-client