Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yqbc7sYlDw_o7Y6McEJt-e4kyUA.roa
File: yqbc7sYlDw_o7Y6McEJt-e4kyUA.roa (raw, json)
Hash identifier: /2Kb0DAEav5snJUYYeYkPl5Akvc7PxyVYtWP+I5yuJE=
Subject key identifier: CA:A6:DC:EE:C6:25:0F:0F:E8:ED:8E:8C:70:42:6D:F9:EE:24:C9:40
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A18355C9EFCC6A2343C7B2E6B9331BD58F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yqbc7sYlDw_o7Y6McEJt-e4kyUA.roa
Signing time: Wed 28 Oct 2026 16:26:39 +0000
ROA not before: Wed 28 Oct 2026 16:26:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 74.112.154.0/23 maxlen: 24
94.229.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:55:c9:ef:cc:6a:23:43:c7:b2:e6:b9:33:1b:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 28 16:26:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caa6dceec6250f0fe8ed8e8c70426df9ee24c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:10:a8:72:94:cb:51:7f:55:fd:3d:fe:57:
9f:16:84:83:b4:49:f3:6d:20:d5:c7:0b:d3:53:6b:
73:10:86:dd:0b:89:28:00:21:e3:56:bc:e1:de:50:
af:55:6c:23:78:60:ef:55:b9:da:2e:8a:b9:ef:3e:
9e:66:da:cf:37:f3:2b:4c:55:1e:e6:98:1e:c9:fa:
7e:10:b5:2e:fb:ea:5b:8b:ba:31:7f:a4:be:88:99:
6f:41:d7:1a:b1:1b:61:a2:ac:31:ae:35:e2:7c:06:
18:74:c2:2a:8a:59:8e:72:cf:e2:fc:52:ae:c3:77:
17:91:9a:84:66:63:fa:ee:25:fb:9c:7b:0f:49:cf:
50:32:92:e1:1e:b2:10:05:e8:8b:ae:10:20:7b:5c:
47:98:5b:a8:db:5a:1a:06:b3:91:bf:31:73:ec:e7:
33:f2:ca:a1:19:7b:2e:a3:db:11:79:cc:ee:fd:21:
a1:3e:6b:da:35:15:9d:d3:28:80:3a:a8:d3:66:81:
1c:32:7d:46:95:f4:61:64:b9:40:7f:66:32:06:bd:
87:31:16:7d:5e:e4:86:bd:2d:7a:83:55:61:a3:90:
2d:63:91:97:80:b5:16:ef:69:5e:14:5c:85:a9:06:
af:e9:13:54:45:bb:52:b4:84:a0:3f:e7:fb:a5:5f:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:DC:EE:C6:25:0F:0F:E8:ED:8E:8C:70:42:6D:F9:EE:24:C9:40
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yqbc7sYlDw_o7Y6McEJt-e4kyUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.154.0/23
94.229.222.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:b9:bc:99:89:b5:79:03:94:09:a8:85:7b:1b:d9:d2:ce:22:
6f:03:84:1a:e5:df:5f:e0:43:3a:10:39:ee:fe:a2:18:17:43:
20:95:99:f6:de:df:20:46:90:3b:32:51:a3:46:0e:c0:1a:8d:
b4:5c:0b:a1:71:c7:68:2c:8a:b3:54:0f:00:d3:cb:69:b2:c4:
68:96:d7:0f:f7:bb:7b:0f:1d:f0:87:01:bb:30:ab:d6:38:4f:
8e:3c:97:dc:15:59:e5:90:68:aa:6f:2f:b3:69:9b:f5:72:4d:
81:d8:8b:ab:10:5f:2b:e1:ed:34:9b:d0:a7:a4:f7:e5:93:24:
8d:a5:1a:e7:12:cd:60:5c:87:cc:70:3d:f5:68:4a:00:01:65:
b8:2a:30:72:3d:ef:ca:bd:71:ba:8b:2e:55:b4:1d:24:44:19:
0b:95:36:35:3c:03:8b:fa:8b:55:62:93:91:3c:09:d5:f4:b0:
3f:5c:58:7c:f7:e4:e3:1c:5f:1d:d3:21:dc:45:46:a9:e8:46:
fc:71:4f:fb:c8:79:22:e8:6c:a3:d1:1f:47:e0:a2:e5:2b:70:
d3:f3:36:b9:e3:97:5c:cd:72:9f:2c:56:d0:03:2c:09:e6:2f:
86:fd:9d:e0:ff:cd:a9:a3:4e:a2:c1:3c:2c:1a:f4:08:ac:32:
7f:74:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:56:15 2026 by rpki-client