Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wtNdDukkx22bPoPRU8QD3FCKN9c.roa
File: wtNdDukkx22bPoPRU8QD3FCKN9c.roa (raw, json)
Hash identifier: A3plac0uGHHykKVUqGCiOTzkHhWAKEC493drez5HVLc=
Subject key identifier: C2:D3:5D:0E:E9:24:C7:6D:9B:3E:83:D1:53:C4:03:DC:50:8A:37:D7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EF6EF926955B75CBA10AAC784DC361C5B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wtNdDukkx22bPoPRU8QD3FCKN9c.roa
Signing time: Wed 24 Jun 2026 00:02:36 +0000
ROA not before: Wed 24 Jun 2026 00:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141429
IP address blocks: 191.222.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:ef:92:69:55:b7:5c:ba:10:aa:c7:84:dc:36:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 24 00:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2d35d0ee924c76d9b3e83d153c403dc508a37d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:9c:98:4a:e4:06:af:29:2c:62:9f:9c:5c:
af:01:56:64:79:a3:6b:c5:7d:00:75:83:da:56:d7:
b3:a4:af:e4:14:77:ea:5c:ac:1c:5b:97:2a:bc:13:
58:d8:23:6c:dd:01:c0:48:30:8e:e8:5e:79:65:39:
12:9f:00:68:4e:f1:ab:84:c2:98:da:8e:27:e0:12:
5d:b8:a3:80:a7:6a:8b:6a:01:4d:c5:58:93:f2:78:
e1:41:cc:a9:a6:bd:38:b1:e8:8d:28:74:df:91:39:
0e:75:96:b8:a6:ab:d1:22:a2:23:cf:0b:71:1b:44:
cd:10:a5:e8:de:43:fa:c7:b0:cd:b4:f5:cd:a1:f6:
4a:c2:ba:b7:4e:95:2d:5f:c7:e8:cc:63:19:cc:3b:
8e:5c:4d:83:c0:ae:25:28:3c:df:ad:d6:6c:a8:03:
ef:e4:21:09:cd:70:c5:29:c9:37:7a:64:f9:06:e2:
9b:ad:56:0f:28:e2:57:33:09:c2:fc:bb:db:19:bb:
1b:fd:29:4e:fa:93:b0:72:a6:92:cc:40:d7:37:37:
cb:84:52:10:68:d9:a5:6b:ef:d7:91:a9:9c:bf:19:
8d:4b:52:38:1c:07:63:3a:d1:cd:85:39:af:b1:1d:
73:81:ad:68:00:e3:f5:ec:46:42:e5:50:8d:91:d3:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:5D:0E:E9:24:C7:6D:9B:3E:83:D1:53:C4:03:DC:50:8A:37:D7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wtNdDukkx22bPoPRU8QD3FCKN9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.245.0/24
Signature Algorithm: sha256WithRSAEncryption
32:22:eb:4e:30:ca:c3:5d:07:a4:89:1a:6a:6c:b9:51:a4:d8:
ba:a8:06:1e:42:55:ba:a7:db:66:e0:ad:cc:f8:81:20:ee:6b:
15:1b:f2:00:04:5b:74:41:bc:d5:1b:a9:1b:99:ea:a9:dc:e8:
e2:9d:8b:d0:34:d2:45:da:4d:ba:6d:9a:62:21:3c:b8:6c:3d:
c6:2f:ba:e1:69:ba:87:cc:c6:cc:28:57:28:a6:6a:01:bd:e2:
a3:c6:b2:31:b3:d8:af:cb:ba:10:fb:a2:fa:a9:f1:20:bb:a0:
98:82:24:a3:31:50:ba:f9:25:32:02:0e:cd:24:82:f2:a0:de:
e1:8f:2c:6d:96:ed:2e:96:26:e5:85:67:44:43:3a:28:71:3a:
ca:e1:fc:70:64:b8:df:74:28:0b:a8:1d:c9:2a:f9:72:db:8f:
9c:0a:0c:e1:73:c1:46:f7:56:b7:a4:a2:5e:3a:33:74:1a:ea:
38:7f:29:2d:92:f8:8f:d8:25:cd:a6:6a:e3:74:76:95:ff:63:
23:cb:cc:e3:9c:50:ea:52:4b:f6:b5:b0:9c:03:11:3d:01:d4:
df:78:63:e4:62:6e:36:52:f4:c9:7c:ba:7f:27:25:26:4e:1c:
f8:78:91:f2:2b:53:8c:27:60:4d:30:17:0e:98:c7:2c:54:4f:
fc:fc:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:46 2026 by rpki-client