Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yF2qdG5bKYP69onqZP4X221jIoQ.roa
File: yF2qdG5bKYP69onqZP4X221jIoQ.roa (raw, json)
Hash identifier: rUt7MaZZw2kKwkJNsUliSJDCc5Lj1jCaFrnRRK3fKB8=
Subject key identifier: C8:5D:AA:74:6E:5B:29:83:FA:F6:89:EA:64:FE:17:DB:6D:63:22:84
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A178E87F82F11370FF280975FEDC1EFBE3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yF2qdG5bKYP69onqZP4X221jIoQ.roa
Signing time: Mon 26 Oct 2026 15:51:05 +0000
ROA not before: Mon 26 Oct 2026 15:51:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 191.219.28.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:e8:7f:82:f1:13:70:ff:28:09:75:fe:dc:1e:fb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 26 15:51:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c85daa746e5b2983faf689ea64fe17db6d632284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:e3:44:bd:fa:78:a6:14:a3:1f:cc:c8:6e:
73:bb:fe:91:31:a2:d7:04:1f:b0:92:05:6b:b7:cf:
5e:44:f9:3b:49:f7:1a:ef:5d:9c:85:4c:d4:fd:58:
3c:26:fc:02:e7:c8:b8:a7:87:07:30:79:0a:80:34:
05:32:51:8e:44:87:d1:a0:8e:5f:7c:03:a9:75:bd:
7a:9a:68:56:6f:2a:6e:e5:59:30:e5:a7:e4:b1:53:
b8:69:70:06:18:c5:35:a6:f0:46:88:86:1b:48:7e:
31:6e:5e:2d:6b:7e:ad:61:11:68:7c:7b:24:7e:d7:
7c:5b:24:2c:be:ee:e1:78:40:01:8e:60:17:f2:39:
e5:23:31:7d:5d:84:f4:e0:fb:dd:af:d9:86:bc:ff:
3a:b0:08:73:ab:5b:11:60:43:4b:78:b2:0d:d6:c6:
21:5f:7d:7c:7d:aa:ec:1b:28:29:4b:4a:2a:f8:af:
d7:74:22:4d:cd:7b:ae:e8:2a:5d:45:41:42:89:5c:
03:10:6d:51:e5:94:54:d0:ab:ce:1c:c8:a1:84:2b:
28:ce:cf:59:ac:49:83:5d:95:fa:33:22:17:2a:a7:
55:af:d7:18:b6:e1:05:f2:13:39:20:10:12:90:d8:
5c:e7:fc:7d:6b:c9:0e:d5:65:fb:ad:1c:13:8e:5b:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:AA:74:6E:5B:29:83:FA:F6:89:EA:64:FE:17:DB:6D:63:22:84
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yF2qdG5bKYP69onqZP4X221jIoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.28.0/24
191.222.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9c:c2:5f:36:2e:97:1e:8c:94:c8:c6:8f:20:48:a8:1e:8d:
dd:0a:79:29:7d:6e:e2:9c:90:5d:bd:da:27:e4:71:e9:2e:36:
3f:ac:14:f5:09:f7:08:a7:27:e4:4a:de:23:71:d4:d9:62:f2:
3d:48:95:e1:3b:95:2a:71:e3:4f:ce:2a:3e:b3:48:7b:08:4a:
95:1c:37:02:7d:85:77:cd:d4:0a:9e:6c:72:b9:17:4b:68:b7:
af:9e:1d:78:9d:eb:3f:3c:1f:eb:11:22:f0:f6:67:d5:55:0a:
63:8b:2b:1f:c2:ea:8a:48:59:6c:5b:77:fb:a9:a6:8e:26:5d:
e1:c8:bc:19:88:b0:3b:28:78:7e:06:a3:38:52:8e:fe:18:ec:
71:79:9f:f3:e5:84:09:20:1d:56:3d:e6:61:12:67:f8:da:e1:
8b:41:89:ab:d8:b7:e9:f6:d3:76:31:c3:1c:1f:d7:18:62:60:
e4:2d:6d:71:f4:96:e3:c4:1e:a0:31:03:ee:24:ee:05:2f:09:
e1:02:27:4a:9c:ad:56:ea:c2:10:d0:50:62:cd:30:57:a0:25:
6a:51:56:92:76:26:7e:c4:68:61:62:47:13:a5:cc:bf:3f:4b:
13:8c:97:2a:5d:a6:fd:fe:da:96:04:9e:53:7b:0c:2a:e0:b9:
77:05:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:47 2026 by rpki-client