Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DMbzEWSV1SOTfkTVcw89vBqzmV4.roa
File: DMbzEWSV1SOTfkTVcw89vBqzmV4.roa (raw, json)
Hash identifier: zcNurWsN4WE2bVrGsX4T4+2CuBoj0poZGoQuDvLarL0=
Subject key identifier: 0C:C6:F3:11:64:95:D5:23:93:7E:44:D5:73:0F:3D:BC:1A:B3:99:5E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EB6ADEBE7682B81BFC98DB620DC9E0AFB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DMbzEWSV1SOTfkTVcw89vBqzmV4.roa
Signing time: Thu 11 Jun 2026 12:35:11 +0000
ROA not before: Thu 11 Jun 2026 12:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41171
IP address blocks: 189.31.208.0/24 maxlen: 24
201.14.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:ad:eb:e7:68:2b:81:bf:c9:8d:b6:20:dc:9e:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 11 12:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cc6f3116495d523937e44d5730f3dbc1ab3995e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:9f:bd:f6:1c:7a:5c:61:a1:f1:ab:88:2c:
ff:6c:f5:9e:e0:1f:5c:0a:24:0e:99:a3:95:8d:6b:
ae:9d:6d:aa:4c:2c:8c:85:c1:52:26:25:db:fa:90:
34:9f:60:f7:08:8d:26:ce:43:85:bd:00:ea:f3:65:
b2:5d:4f:38:3f:1d:55:d8:c5:9c:ee:0f:2c:ff:97:
72:b3:9f:c5:61:3e:0f:62:78:d5:8f:9a:42:48:16:
ce:0f:8a:fb:66:83:b2:28:0c:29:d4:ea:0d:8a:73:
29:48:cc:ae:f3:fc:7d:e3:d7:ed:19:41:34:38:1f:
f7:71:85:c3:3a:57:f4:78:19:e0:a8:26:7b:55:80:
c6:da:02:37:81:c6:5c:eb:cf:37:31:20:c7:66:32:
8c:e3:6f:16:e6:18:9c:07:cd:68:86:5f:7f:8c:3e:
21:53:74:87:c6:cd:16:d5:05:0f:7e:57:f4:4b:50:
0f:b6:a0:36:3c:83:80:25:e8:ba:a5:b4:a0:ff:fe:
72:59:c2:be:c0:02:c9:a4:2d:7e:c9:40:f3:8e:e0:
fe:44:5b:37:c9:1c:e8:db:c2:cb:18:be:b5:04:e3:
6b:46:1c:6f:31:31:2f:fd:29:62:63:1e:47:88:29:
51:56:f3:6c:2c:54:89:0e:26:e0:d4:55:05:d7:d7:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:F3:11:64:95:D5:23:93:7E:44:D5:73:0F:3D:BC:1A:B3:99:5E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DMbzEWSV1SOTfkTVcw89vBqzmV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.208.0/24
201.14.217.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ef:a9:2e:a6:6e:39:88:1d:97:7a:c9:59:69:e9:41:c2:68:
31:cf:33:ed:3d:93:a2:51:cc:2a:93:67:cb:5d:b4:29:bd:ac:
5f:d0:6b:7b:90:3b:82:2a:0c:c2:d1:5f:a5:7c:3d:93:b9:99:
43:cb:55:16:f9:20:4a:23:5c:a2:3b:75:63:cb:6c:81:40:f4:
46:ce:e9:73:1a:c1:c5:de:0d:d9:0c:e1:76:fe:e4:d9:6e:30:
31:c3:d0:a7:60:91:6c:ce:9c:a1:54:e4:ec:a5:5b:ef:71:0d:
8d:76:b8:24:3c:6b:18:08:b4:bc:fa:fa:cb:03:96:bf:00:e6:
9b:fd:8e:0f:83:b6:26:c9:1d:dd:1c:12:2a:dc:06:42:df:48:
95:8d:83:19:93:2d:8b:06:ed:84:ff:f2:62:cf:92:c8:e0:0d:
c9:c9:14:66:4f:f5:2e:25:37:60:49:da:a9:6b:47:57:99:a6:
62:3a:da:c1:bf:fe:43:bd:21:f4:3b:c8:67:9c:39:2a:ea:27:
27:51:9b:94:73:f6:f7:54:60:d3:29:df:80:57:6f:da:db:7e:
3b:36:6c:5b:d5:c7:69:11:ad:df:c4:82:1b:e2:26:70:5e:4c:
27:6b:48:e3:68:dc:f3:6c:83:a8:97:e6:d6:8d:36:4c:86:02:
bf:ee:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:39 2026 by rpki-client