Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5WvgGpv7H2NTTPehX5oUttTTJAo.roa
File: 5WvgGpv7H2NTTPehX5oUttTTJAo.roa (raw, json)
Hash identifier: Q73Y7sUBxY+2bwSSLahpzwwOnsWncrF+lHqdaZmqjeM=
Subject key identifier: E5:6B:E0:1A:9B:FB:1F:63:53:4C:F7:A1:5F:9A:14:B6:D4:D3:24:0A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F952E6B07128290D7CA265AB4E8A0B697
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5WvgGpv7H2NTTPehX5oUttTTJAo.roa
Signing time: Fri 24 Jul 2026 17:31:14 +0000
ROA not before: Fri 24 Jul 2026 17:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212633
IP address blocks: 103.84.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:2e:6b:07:12:82:90:d7:ca:26:5a:b4:e8:a0:b6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 24 17:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e56be01a9bfb1f63534cf7a15f9a14b6d4d3240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:96:6e:79:f1:a2:00:3a:45:c6:4c:05:6e:
9d:d5:37:e6:3f:30:c1:26:86:5f:10:86:8b:28:32:
31:85:aa:c1:9d:b9:18:a3:3a:4e:5e:21:2d:b9:d8:
d3:19:09:2b:1f:ec:1d:24:45:1f:1b:ae:50:8e:b9:
5d:f3:91:83:f2:b3:1d:65:33:57:5a:b0:e7:5b:56:
2f:36:7d:ce:9a:97:b8:eb:aa:a9:82:be:3b:08:88:
51:ad:88:fb:76:64:9f:be:42:e7:8a:9a:42:8d:1e:
46:9f:b4:16:75:49:de:61:58:d0:9a:ca:1b:ba:4e:
1e:60:8f:37:e1:34:50:84:91:6c:09:7e:c5:89:86:
e9:41:f7:d9:c5:3a:f9:84:67:5b:d2:ee:4d:3a:12:
da:33:e8:e5:98:6b:6b:61:ed:c3:3b:d2:41:65:27:
fa:99:de:f1:32:ba:a7:b2:98:3b:f9:e1:c0:ec:e1:
10:10:73:fd:10:55:e8:9f:61:30:a8:4b:eb:a7:d3:
32:1d:1a:05:d1:45:4a:f5:e7:b3:4b:20:71:61:7b:
ce:54:90:03:6d:5f:be:b2:1b:f1:93:fe:04:4a:45:
92:56:79:74:3b:ea:cb:56:2e:31:ea:1c:88:9f:71:
14:4b:fc:74:0d:32:93:33:f7:98:3c:68:b1:d2:69:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:E0:1A:9B:FB:1F:63:53:4C:F7:A1:5F:9A:14:B6:D4:D3:24:0A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5WvgGpv7H2NTTPehX5oUttTTJAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:63:29:80:c5:44:22:05:ee:f1:50:ea:fb:20:98:13:1b:97:
cd:b0:be:c6:21:84:00:08:8f:bf:3c:4a:ac:d5:b6:43:a3:47:
09:8a:bd:62:b6:ce:1a:76:63:f3:dc:92:33:09:fe:e2:bc:64:
75:53:c9:48:76:ea:37:ae:c5:19:eb:85:c8:67:5e:cf:8b:67:
26:e5:11:15:5b:e9:aa:c0:2e:65:52:73:2f:e5:e7:84:13:85:
c6:f9:d9:d4:a7:50:e0:c1:f4:de:d9:46:b7:57:7a:fa:99:00:
8e:8d:8d:0e:85:bf:14:ef:fa:80:4f:18:ee:6b:63:5a:8b:4c:
54:f6:48:1f:6a:bd:ac:f9:96:05:e7:4f:03:68:56:7a:99:0c:
23:da:c9:7d:f0:2f:34:d7:71:8a:84:3c:14:67:77:78:6a:23:
c3:02:7a:ac:00:1f:5f:bf:82:a0:d6:94:d2:31:3c:c3:9d:da:
b9:80:56:38:30:33:ae:ef:44:68:27:65:b3:c5:af:cf:da:cb:
0d:71:ef:cd:a9:3d:f9:e6:1e:e5:77:9c:1c:de:ca:5c:06:96:
b4:dc:70:d8:60:01:8b:fa:6b:01:2f:69:cb:86:eb:df:e9:4d:
a1:ac:b0:1d:d2:b1:41:d9:a2:91:95:e1:5a:7b:f5:32:fa:ae:
f2:52:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:47 2026 by rpki-client