Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9xXoR38u8JPPZ9j3BoVuSCj0nuE.roa
File: 9xXoR38u8JPPZ9j3BoVuSCj0nuE.roa (raw, json)
Hash identifier: VGKQVv8e1exgoE0VynzUQg4ByOZ3KVtzl++0ElhcTW4=
Subject key identifier: F7:15:E8:47:7F:2E:F0:93:CF:67:D8:F7:06:85:6E:48:28:F4:9E:E1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0BB31A49DEF9B12336ECF777C51AF7B09
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9xXoR38u8JPPZ9j3BoVuSCj0nuE.roa
Signing time: Sat 19 Sep 2026 19:43:07 +0000
ROA not before: Sat 19 Sep 2026 19:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 189.73.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:31:a4:9d:ef:9b:12:33:6e:cf:77:7c:51:af:7b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 19:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f715e8477f2ef093cf67d8f706856e4828f49ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:24:63:4a:77:dd:78:19:96:73:ac:a6:16:
2a:47:3e:5d:a1:27:d5:d8:8a:3e:2d:ef:7f:1e:81:
8f:72:73:dc:4e:3f:e9:d9:7a:47:d1:b2:8c:1c:10:
81:d8:07:45:81:20:9c:8f:f5:e4:71:39:ac:fe:a2:
ae:e6:f2:76:79:d8:93:02:12:8e:a9:20:19:36:f3:
c8:da:46:4e:37:4e:73:1e:7e:0a:ca:d9:d5:e5:a0:
a4:e5:58:c5:cb:f3:b5:6f:83:df:00:af:87:58:e5:
fb:bd:92:fe:dd:b5:ca:c2:86:5b:1c:45:61:44:4b:
0f:88:23:74:01:b3:f1:1f:e9:60:29:a6:67:94:2c:
55:09:9e:a9:e0:78:b9:ef:3d:b0:82:59:a5:40:be:
26:d8:29:1e:8b:71:71:99:4d:38:50:ee:dd:4d:0c:
76:f8:b5:b2:ac:f2:8f:96:e9:00:10:d5:96:c2:b2:
f7:87:36:2e:40:b3:59:00:40:fd:bc:93:3c:4f:25:
fc:d5:8d:38:f5:45:87:bb:3c:54:8f:19:9e:c0:28:
e7:07:49:9f:77:5d:c7:24:dc:14:e6:2b:6b:84:cd:
a5:5a:d1:2e:22:27:35:22:1a:b8:af:50:80:ca:a6:
23:d6:6b:b9:2c:26:70:bb:04:3a:54:e4:87:e8:2c:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:E8:47:7F:2E:F0:93:CF:67:D8:F7:06:85:6E:48:28:F4:9E:E1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9xXoR38u8JPPZ9j3BoVuSCj0nuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.25.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5e:79:4a:c1:b7:d6:68:17:0a:9e:35:c9:f7:7e:2c:47:86:
95:6b:2a:80:38:19:c1:0c:fb:8d:4e:1d:b1:7b:63:c6:c5:71:
32:7a:c8:51:a0:2b:22:59:80:37:ab:d5:b0:6c:f1:8b:36:23:
1b:01:7c:fc:2b:29:61:f0:97:5a:6a:a3:b7:04:cf:cd:e7:71:
18:82:4b:42:c6:c0:4c:dd:59:46:c9:f8:53:b1:5c:c3:11:87:
00:50:00:99:27:75:6d:26:b9:e2:37:c5:cb:e7:e6:67:7c:56:
1e:45:a3:b4:61:f8:67:5c:91:94:9d:2f:96:5b:87:71:70:78:
c4:50:45:af:75:f3:6f:df:b3:26:08:50:3c:ea:d4:00:9f:18:
9e:41:63:9a:62:26:36:cb:b4:83:35:86:0a:6d:dd:32:38:5e:
72:03:88:99:b2:3c:80:45:e8:ce:54:1c:8d:3e:c4:56:54:03:
eb:68:75:98:e7:2b:a0:56:6c:76:05:34:b8:1e:37:c5:27:82:
a4:bb:12:d5:b3:56:89:f9:d5:1a:1c:a4:c4:2e:06:34:50:ea:
f5:5b:ec:cf:8d:b2:b1:ac:d7:ce:bc:02:ee:bb:25:63:c9:b8:
16:11:12:fa:df:c6:4c:ea:48:91:47:07:0b:88:19:4b:4c:b2:
d2:ed:c1:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC7MaSd75sSM27Pd3xRr3sJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwOTE5MTk0MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzE1ZTg0NzdmMmVmMDkzY2Y2N2Q4ZjcwNjg1NmU0ODI4ZjQ5ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtgkY0p33XgZlnOsphYqRz5doSfV
2Io+Le9/HoGPcnPcTj/p2XpH0bKMHBCB2AdFgSCcj/XkcTms/qKu5vJ2ediTAhKO
qSAZNvPI2kZON05zHn4KytnV5aCk5VjFy/O1b4PfAK+HWOX7vZL+3bXKwoZbHEVh
REsPiCN0AbPxH+lgKaZnlCxVCZ6p4Hi57z2wglmlQL4m2Ckei3FxmU04UO7dTQx2
+LWyrPKPlukAENWWwrL3hzYuQLNZAED9vJM8TyX81Y049UWHuzxUjxmewCjnB0mf
d13HJNwU5itrhM2lWtEuIic1Ihq4r1CAyqYj1mu5LCZwuwQ6VOSH6CxjqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcV6Ed/LvCTz2fY9waFbkgo9J7hMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvOXhYb1IzOHU4SlBQWjlqM0JvVnVTQ2owbnVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvUkZMA0G
CSqGSIb3DQEBCwUAA4IBAQCSXnlKwbfWaBcKnjXJ934sR4aVayqAOBnBDPuNTh2x
e2PGxXEyeshRoCsiWYA3q9WwbPGLNiMbAXz8Kylh8JdaaqO3BM/N53EYgktCxsBM
3VlGyfhTsVzDEYcAUACZJ3VtJrniN8XL5+ZnfFYeRaO0YfhnXJGUnS+WW4dxcHjE
UEWvdfNv37MmCFA86tQAnxieQWOaYiY2y7SDNYYKbd0yOF5yA4iZsjyARejOVByN
PsRWVAPraHWY5yugVmx2BTS4HjfFJ4KkuxLVs1aJ+dUaHKTELgY0UOr1W+zPjbKx
rNfOvALuuyVjybgWERL638ZM6kiRRwcLiBlLTLLS7cEc
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:03 2026 by rpki-client