Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5jRiM3WL9uXgsVdfS_-k_Evzz0s.roa
File: 5jRiM3WL9uXgsVdfS_-k_Evzz0s.roa (raw, json)
Hash identifier: nSlsFtjH47qL5vLnrmLRA9jICgfDKqiHn+B8H31OIoQ=
Subject key identifier: E6:34:62:33:75:8B:F6:E5:E0:B1:57:5F:4B:FF:A4:FC:4B:F3:CF:4B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019D97010A0AB49E618E87F6A3DCE4322E2D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5jRiM3WL9uXgsVdfS_-k_Evzz0s.roa
Signing time: Thu 16 Apr 2026 15:55:20 +0000
ROA not before: Thu 16 Apr 2026 15:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.234.0/24 maxlen: 24
43.242.139.0/24 maxlen: 24
45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.41.46.0/23 maxlen: 24
103.47.59.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.113.0/24 maxlen: 24
124.158.114.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:01:0a:0a:b4:9e:61:8e:87:f6:a3:dc:e4:32:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 16 15:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6346233758bf6e5e0b1575f4bffa4fc4bf3cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:17:f3:c6:52:64:e6:a9:61:4f:2c:b6:7c:
69:50:34:b5:74:2b:86:03:26:59:d3:10:14:53:1d:
04:bd:74:5d:38:0f:56:fe:04:84:cb:c5:b0:db:da:
05:9b:ee:a5:ad:9a:b8:55:a8:5f:dd:37:ac:2c:b1:
6f:d8:50:93:51:58:91:3f:de:11:cb:3f:c1:7f:9b:
6a:58:90:6d:40:d4:77:15:ff:99:23:e7:e9:d0:f2:
d0:6c:1c:01:4a:bf:7d:d3:e6:2a:e5:c8:0c:b4:dc:
00:b8:d3:c4:95:66:4f:a4:21:8c:6a:b9:32:ac:9b:
59:6e:dd:05:af:b4:b1:47:e8:f0:a9:ba:68:c7:18:
50:6c:b1:56:4d:bc:db:9c:7d:b2:f1:ee:64:74:fb:
c6:2a:6c:7d:41:3c:aa:e0:eb:5e:a6:9b:23:49:ce:
9f:dc:9a:15:98:d4:cd:f3:94:e1:76:8b:0f:f3:a6:
29:f8:33:ed:9b:6e:96:b0:9f:a1:10:38:a1:8c:83:
85:d8:e0:e9:c2:9b:91:bb:fe:cc:b2:83:33:a6:70:
f7:0c:c8:8b:4f:5f:96:ea:9e:14:2b:c2:4a:fd:76:
8f:e0:ff:71:46:c9:ad:2e:dd:b2:53:b7:a9:27:d5:
81:c9:2b:2f:ea:1f:28:6f:eb:98:24:1c:7e:47:7e:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:62:33:75:8B:F6:E5:E0:B1:57:5F:4B:FF:A4:FC:4B:F3:CF:4B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5jRiM3WL9uXgsVdfS_-k_Evzz0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
43.242.139.0/24
45.151.140.0/24
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
94.229.209.0/24
103.41.44.0/22
103.47.59.0/24
103.102.133.0/24
124.158.113.0-124.158.114.255
194.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
35:80:78:11:29:93:2d:3d:f8:69:08:1f:83:1f:de:13:4b:a9:
5d:d5:c9:91:51:7a:44:4d:f6:a2:bc:c8:04:37:9a:44:96:b8:
5b:c1:59:9a:3c:6d:6f:14:fb:8d:4e:46:8c:eb:ca:3d:01:67:
21:7a:24:d0:f8:da:ab:d7:2d:ac:2d:92:7b:7c:a7:9a:55:c9:
61:dc:38:98:ec:3e:c0:b9:87:1c:52:b2:9d:d2:70:7a:0b:1c:
2f:db:eb:76:7e:d6:0a:88:88:45:00:ef:b6:74:9b:06:12:e4:
1f:a4:9b:af:91:ee:3d:c9:81:a5:f6:92:36:f6:16:a1:9f:ee:
a9:28:9e:1e:37:7a:bf:2c:21:74:f7:2c:3d:f7:40:83:71:9c:
09:73:6f:ce:90:b4:92:2a:2d:42:90:71:b7:79:47:d2:52:55:
e4:ce:c8:a6:8b:4b:6b:44:23:98:ad:33:28:b9:0d:b8:9e:c8:
b0:f9:35:5c:54:30:46:07:ba:34:ee:3b:a5:bc:03:ea:70:e1:
97:5d:18:30:57:66:c5:c7:1e:60:fa:63:eb:27:28:d5:02:c7:
55:cb:ed:f7:11:c2:0d:79:a5:1f:81:26:2a:70:60:8d:e1:82:
cb:4d:50:3b:98:2a:82:de:a8:b7:13:42:32:a2:6c:08:ad:37:
79:fe:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:27 2026 by rpki-client