Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6UJBba331ilb8ftl7fXOdGA-9TY.roa
File: 6UJBba331ilb8ftl7fXOdGA-9TY.roa (raw, json)
Hash identifier: MiSdlw+YF19dSpsr2J4xIyePM4B9ManC1ZcqISeQG+w=
Subject key identifier: E9:42:41:6D:AD:F7:D6:29:5B:F1:FB:65:ED:F5:CE:74:60:3E:F5:36
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA96E22C24FD6EA18CDCCB390AE146FF4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6UJBba331ilb8ftl7fXOdGA-9TY.roa
Signing time: Tue 28 Jul 2026 15:53:15 +0000
ROA not before: Tue 28 Jul 2026 15:53:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 191.222.246.0/24 maxlen: 24
201.11.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:6e:22:c2:4f:d6:ea:18:cd:cc:b3:90:ae:14:6f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 28 15:53:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e942416dadf7d6295bf1fb65edf5ce74603ef536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:6d:ef:62:17:7f:1d:6e:e3:87:97:82:b2:
90:e4:bd:2f:6d:c1:ca:d5:33:8b:cb:a2:3b:14:c4:
e5:24:25:27:81:74:2c:2a:c9:7b:8d:c9:ea:91:74:
3e:78:8d:a4:19:e5:15:87:36:ae:5b:f6:dd:f5:b6:
c5:b4:3e:ae:e8:47:7d:0d:7e:d3:1e:6f:94:97:09:
0c:a4:4a:ff:58:a7:de:fe:1c:c4:a4:ba:a2:c7:d7:
af:84:80:57:bc:86:b5:8c:b1:dc:6b:01:a5:94:a9:
b0:79:d4:21:9c:eb:d2:80:2c:f6:33:da:53:6a:20:
7a:55:f7:0f:46:d5:cc:df:7a:80:0f:bf:02:34:a5:
20:f1:42:d2:cf:b0:d6:61:5a:4c:ac:d2:fe:03:7b:
f0:07:9f:ed:cd:df:c2:9c:9b:97:03:f7:17:94:e9:
55:84:10:6a:94:53:aa:94:6c:eb:7c:17:04:75:f4:
26:60:d9:ea:05:c6:62:1f:ac:42:1f:f0:4f:39:d6:
8d:50:e6:a9:9d:55:63:22:12:f1:a5:4b:76:1a:f4:
fd:d7:98:ce:e7:61:1e:be:86:6c:87:43:23:da:46:
d7:05:47:b1:ad:43:fb:56:d3:ad:fa:9c:22:07:2a:
9d:c3:ef:1b:a7:fd:9a:7d:da:59:0a:a1:24:39:d7:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:41:6D:AD:F7:D6:29:5B:F1:FB:65:ED:F5:CE:74:60:3E:F5:36
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6UJBba331ilb8ftl7fXOdGA-9TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.246.0/24
201.11.239.0/24
Signature Algorithm: sha256WithRSAEncryption
33:38:9b:14:34:5b:72:fd:f5:a7:50:2c:58:a4:fb:37:7f:0f:
46:e5:e5:15:32:4b:93:7a:7c:e9:12:3c:f9:2b:9e:df:1e:c0:
dc:1b:ce:0a:31:b1:00:be:ca:8c:9a:b5:53:fe:35:b8:11:1d:
8c:5b:1f:d4:b5:10:17:2f:42:c4:dc:a4:4a:cd:a4:bd:9d:77:
3f:5c:21:7e:c0:16:76:0d:1c:9a:3b:4f:f4:6a:a4:ba:6c:ff:
46:74:aa:95:d9:85:de:a3:66:55:5e:92:2a:72:04:ed:29:08:
4a:a2:63:a3:f6:8b:ab:8b:8c:66:32:b3:ac:87:2c:07:e1:6f:
df:ac:5e:8c:67:24:e8:d2:ee:6d:52:bc:b1:38:00:ac:71:ab:
19:c6:b3:0c:7e:38:a4:f0:16:b7:9b:7e:09:86:a5:75:14:35:
a8:d4:79:a0:2c:40:b2:42:36:69:96:fa:62:6d:06:4b:a1:5b:
7e:76:b2:f8:e8:d6:60:00:55:7d:20:30:bb:f3:f4:5e:68:88:
14:95:b8:14:37:03:24:9e:6b:7c:23:9a:d5:9d:dc:e0:39:50:
32:37:ae:3c:d3:97:a7:b3:ff:2b:0b:0f:e2:bd:75:e4:ef:39:
3c:59:4b:44:9e:47:e3:81:02:45:cd:6d:fb:ab:b6:63:46:79:
fd:c9:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:34:48 2026 by rpki-client