Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ee8ttqG1iUF1nh3SKrplVT44Um4.roa
File: Ee8ttqG1iUF1nh3SKrplVT44Um4.roa (raw, json)
Hash identifier: nU5MNeGEV1DRw7woDHYXYv23kOr7l7xhVPeVbm2H+7U=
Subject key identifier: 11:EF:2D:B6:A1:B5:89:41:75:9E:1D:D2:2A:BA:65:55:3E:38:52:6E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0AB36750F8AD872CCF7299135F02FB008
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ee8ttqG1iUF1nh3SKrplVT44Um4.roa
Signing time: Wed 16 Sep 2026 17:14:27 +0000
ROA not before: Wed 16 Sep 2026 17:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 153.76.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:36:75:0f:8a:d8:72:cc:f7:29:91:35:f0:2f:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 17:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11ef2db6a1b58941759e1dd22aba65553e38526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:d5:94:af:88:76:aa:4c:3e:30:28:f2:de:
18:af:bf:05:09:8e:e8:33:d2:8a:7f:13:1a:78:87:
14:4d:7c:60:0e:43:cf:43:f3:27:d1:b8:c5:81:6f:
f7:66:67:01:68:d0:9a:26:ca:2f:6a:d2:76:99:d8:
9f:b2:ae:0a:a2:40:f0:b3:2f:2d:d5:82:f1:f7:a0:
f3:72:55:fa:d3:a0:94:16:0f:47:6c:56:7f:c8:f5:
d8:63:f8:40:ba:7f:28:26:92:19:3a:a4:03:76:6d:
e4:6d:bb:c8:9c:d1:d1:57:a2:31:74:86:90:cf:16:
5a:1c:d7:07:21:ff:05:c2:23:ae:b8:de:98:c7:22:
86:23:d1:f0:57:c5:da:3f:36:65:2f:e5:1a:08:f6:
d1:b5:ef:2f:81:7e:6e:b3:00:5e:bc:67:53:f1:33:
05:bc:52:39:3d:3c:41:83:90:af:91:0d:61:2b:66:
9a:70:bf:21:29:d5:6f:3b:1e:a6:67:7d:70:25:75:
60:cc:2b:5f:49:b2:0b:e6:c4:6d:4d:97:15:3f:24:
53:d5:3d:14:54:e7:e5:32:0d:ad:69:b0:48:6b:74:
15:89:74:77:b1:e1:12:ac:b9:38:9a:e7:88:6e:91:
99:29:f6:2b:9a:a6:6a:ef:31:97:d9:9b:ef:f9:6b:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EF:2D:B6:A1:B5:89:41:75:9E:1D:D2:2A:BA:65:55:3E:38:52:6E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ee8ttqG1iUF1nh3SKrplVT44Um4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b0:62:b8:1e:eb:c0:18:1f:01:04:99:8d:ef:d5:53:0f:b1:
51:b9:ea:d8:ef:44:3b:de:3a:1b:1c:5c:d0:43:46:44:b3:0b:
b9:67:86:05:40:d2:6a:0a:1c:aa:e1:f2:15:89:aa:17:a3:9e:
98:21:22:48:09:2a:93:81:4b:60:c3:05:40:87:5b:a3:c6:4a:
b4:f1:79:83:6a:26:8f:a5:57:ad:94:88:65:ff:10:30:84:54:
e1:8b:94:ff:9d:e7:3f:23:c7:e2:d1:e4:56:81:97:9a:fe:7a:
bc:38:ac:29:d7:e9:33:ab:a0:94:ca:12:11:71:02:8c:8f:48:
06:97:f2:a6:96:e1:65:81:4d:1a:c2:18:5b:a1:86:ba:8a:a7:
d8:06:37:80:0a:84:fb:ff:e8:65:5f:af:3c:4b:df:ab:8b:1c:
4f:3c:9e:70:67:a6:a3:89:6e:a0:64:f5:7e:c1:9a:04:e8:e1:
4c:4d:49:55:68:31:38:a0:77:db:52:72:92:f6:93:70:6c:83:
9a:14:23:58:56:1f:c5:16:46:c4:22:ac:68:4a:7c:bf:a8:9c:
c4:9c:89:9f:53:c7:a1:2e:72:e7:9a:5d:1b:97:fe:86:0d:61:
e3:70:ae:6d:6d:71:79:e6:00:92:62:76:a7:98:a9:1c:5c:97:
16:c5:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:56:59 2026 by rpki-client