Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7pldBgGlWqCPEf1XXIbqYEu-1nc.roa
File: 7pldBgGlWqCPEf1XXIbqYEu-1nc.roa (raw, json)
Hash identifier: U/ay0JKa5+EVkANz9vjsuv93A8ZcZYeMxs+Prf27OEs=
Subject key identifier: EE:99:5D:06:01:A5:5A:A0:8F:11:FD:57:5C:86:EA:60:4B:BE:D6:77
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EAD1EB82524F74348A016243C5C7B1154
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7pldBgGlWqCPEf1XXIbqYEu-1nc.roa
Signing time: Tue 09 Jun 2026 16:02:11 +0000
ROA not before: Tue 09 Jun 2026 16:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 191.222.243.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:1e:b8:25:24:f7:43:48:a0:16:24:3c:5c:7b:11:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 9 16:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee995d0601a55aa08f11fd575c86ea604bbed677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:ae:b9:d4:53:f0:c4:03:53:20:5f:ee:d2:
e9:99:b0:75:3a:c9:da:7b:77:c4:5e:e3:0c:4e:9c:
65:0b:c0:8a:af:01:1d:4c:b1:9e:1e:e6:b5:97:1b:
5f:f0:c4:d7:b0:1e:f6:be:39:1f:6a:2b:37:31:ac:
80:7c:38:db:80:cb:0c:28:18:c5:31:e5:4c:42:7c:
ad:c1:f8:fc:5c:50:ff:b7:0b:d0:55:af:88:7a:5f:
c7:48:cb:94:b6:dd:fb:d6:32:99:c6:88:b0:c7:f0:
e9:04:ef:88:83:53:d9:ce:7c:f2:bd:e7:07:74:90:
39:5f:72:f5:dd:e7:6c:ac:c7:4f:12:c6:32:d0:f2:
7b:b5:9e:2e:06:d7:df:0f:a5:e0:71:f3:00:a5:f5:
e2:85:0b:6c:59:69:6c:52:b8:d3:e4:66:8e:91:41:
e6:2a:3e:27:d3:99:bc:2a:71:77:6c:83:87:a1:7f:
97:c9:8d:54:ea:e7:db:ee:5e:4c:1a:82:11:35:fd:
17:44:a4:ff:70:00:c6:89:8c:fa:08:75:43:06:49:
a2:d3:a7:83:86:38:2e:c2:39:52:ad:cb:47:6e:d2:
df:e6:09:62:46:d9:08:74:7c:14:a3:9f:98:ab:86:
bf:f0:f1:ca:03:88:b7:42:0d:26:6e:7b:66:cb:58:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:99:5D:06:01:A5:5A:A0:8F:11:FD:57:5C:86:EA:60:4B:BE:D6:77
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7pldBgGlWqCPEf1XXIbqYEu-1nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.243.0/24
201.24.192.0/24
201.24.199.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:e5:cd:f9:fd:98:37:48:dd:e5:04:6e:bc:97:4e:e8:6d:6d:
0f:2f:d0:14:f1:4f:4e:12:48:9e:60:c9:df:8c:12:17:44:12:
8f:d1:0d:69:fa:64:d3:0b:e2:32:b7:f9:f3:fa:97:db:c6:31:
13:c3:7f:33:96:1d:ea:2c:35:6d:5f:8a:60:c5:4a:be:f6:9b:
0a:42:e7:1a:2d:bb:c9:8c:31:f6:bc:f8:56:e4:93:8d:fe:94:
f2:db:e6:8d:a9:13:be:c5:25:97:af:dd:5b:f7:47:b1:13:5b:
64:4c:f3:64:32:c3:e7:07:c4:18:e8:2f:87:c8:19:24:cd:9b:
4a:6f:07:a0:8d:cf:3d:3d:f5:f2:fe:51:e2:57:3d:24:1d:e1:
cf:32:d8:22:41:c0:6a:68:0e:3f:2c:5e:12:4f:34:d0:80:9a:
07:e9:e8:a4:af:7f:f3:00:ab:cb:8b:39:d8:e8:57:82:54:cc:
ae:f3:f0:d9:4f:94:7b:62:6e:3e:e9:6c:fb:b7:63:77:7a:f2:
41:86:c3:c0:95:9d:d5:8d:08:99:30:17:84:ae:b6:0d:c6:f6:
6b:f1:90:07:26:39:88:ad:da:72:ed:e1:a8:7e:c2:17:7a:cb:
55:75:88:49:24:c9:78:54:5c:14:70:0b:4f:e4:10:32:05:b8:
f1:f8:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:41 2026 by rpki-client