Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DdbywNz5YVvj2RqR8BUKoE_xSys.roa
File: DdbywNz5YVvj2RqR8BUKoE_xSys.roa (raw, json)
Hash identifier: Xc29Gu3NsCZhgDfT6gg8i8/xBqIm/PjDdI5MUzm7G2k=
Subject key identifier: 0D:D6:F2:C0:DC:F9:61:5B:E3:D9:1A:91:F0:15:0A:A0:4F:F1:4B:2B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA970E1255C93DA51E08DEAADA7BD85FF
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DdbywNz5YVvj2RqR8BUKoE_xSys.roa
Signing time: Tue 28 Jul 2026 15:56:14 +0000
ROA not before: Tue 28 Jul 2026 15:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 191.44.28.0/24 maxlen: 24
191.219.27.0/24 maxlen: 24
201.11.226.0/24 maxlen: 24
201.24.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:70:e1:25:5c:93:da:51:e0:8d:ea:ad:a7:bd:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 28 15:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dd6f2c0dcf9615be3d91a91f0150aa04ff14b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:77:26:28:b3:b9:53:e2:17:f6:11:01:4f:
e1:7b:88:dd:17:e5:85:07:1b:b1:15:5a:14:bb:be:
cb:5d:61:a9:ff:14:ae:71:8e:4f:d4:44:12:4a:e6:
b2:fe:b2:ed:25:15:0d:1a:db:41:2f:ca:c6:90:d4:
41:09:c5:36:39:d3:93:ea:ca:5f:79:49:2f:a7:67:
aa:e7:da:12:32:e6:61:d3:10:da:dd:7b:4a:7d:23:
d8:23:70:64:39:8d:c0:f9:6c:c5:ed:0b:49:bd:ce:
f1:44:85:a4:98:86:a4:a9:dc:e8:82:81:2c:93:60:
03:be:42:e9:0b:16:c4:24:24:84:b6:f2:c0:b5:90:
d8:eb:c8:05:51:09:bc:a4:60:5d:1e:28:08:4c:09:
75:6f:56:aa:73:81:77:24:7e:0f:23:7b:e8:ca:a6:
ac:ce:64:9f:1f:61:c3:8f:e9:ee:84:40:dd:2d:be:
6b:03:64:c5:df:fc:bd:39:57:78:79:7e:ca:02:e6:
75:4a:de:47:96:11:db:3e:2a:6b:01:d9:21:da:a9:
8e:0e:85:9b:a8:19:b8:b0:ea:5d:7c:8c:4f:f2:39:
1d:af:30:78:88:1f:14:f6:35:34:1e:78:31:50:a2:
75:fd:f2:27:14:6a:57:21:d7:05:ed:60:de:54:c9:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D6:F2:C0:DC:F9:61:5B:E3:D9:1A:91:F0:15:0A:A0:4F:F1:4B:2B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DdbywNz5YVvj2RqR8BUKoE_xSys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.28.0/24
191.219.27.0/24
201.11.226.0/24
201.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c1:fc:72:58:dc:ab:29:e4:99:0a:2f:fe:09:f8:ca:2e:ba:
8b:53:c2:f6:ed:b9:d2:e3:b4:57:e7:5b:b0:91:0f:d9:75:09:
1d:a5:44:8f:9f:07:69:5f:95:04:97:b6:0b:8b:55:e5:fa:11:
39:b9:4a:49:35:b3:64:b9:fe:6e:6f:e1:91:77:e1:4f:e4:93:
34:e8:ff:b1:a8:e6:43:54:3c:c0:c9:b4:b3:9b:18:56:47:a1:
d9:e6:8c:f4:b2:f2:4c:e5:e0:73:ff:52:01:95:79:06:06:62:
c2:e3:7f:46:e2:8d:99:5f:41:a3:56:16:6a:b4:0b:ab:31:95:
39:cc:32:56:22:b7:d8:7a:a0:b0:fe:db:82:bf:96:27:7a:d6:
36:e2:cf:39:6a:2f:50:68:1b:69:34:20:33:2b:06:bf:a5:4f:
40:43:45:39:37:a2:02:ff:97:3d:41:90:65:4d:0d:0c:a5:7b:
17:f0:37:2e:36:8c:7b:d7:29:4e:86:62:c3:73:fb:64:a5:cd:
d6:ef:8e:ac:51:d3:8c:54:76:b4:96:49:f6:90:5d:7e:1b:0f:
9a:13:e6:42:48:23:ec:e5:ff:f1:e7:f3:73:1e:b7:a4:2d:8c:
ac:25:c9:c2:49:d4:77:79:59:c4:f0:e5:5b:3b:8d:fa:42:d1:
d9:12:6c:53
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+pcOElXJPaUeCN6q2nvYX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzI4MTU1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGQ2ZjJjMGRjZjk2MTViZTNkOTFhOTFmMDE1MGFhMDRmZjE0YjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cV3JiizuVPiF/YRAU/he4jdF+WF
BxuxFVoUu77LXWGp/xSucY5P1EQSSuay/rLtJRUNGttBL8rGkNRBCcU2OdOT6spf
eUkvp2eq59oSMuZh0xDa3XtKfSPYI3BkOY3A+WzF7QtJvc7xRIWkmIakqdzogoEs
k2ADvkLpCxbEJCSEtvLAtZDY68gFUQm8pGBdHigITAl1b1aqc4F3JH4PI3voyqas
zmSfH2HDj+nuhEDdLb5rA2TF3/y9OVd4eX7KAuZ1St5HlhHbPiprAdkh2qmODoWb
qBm4sOpdfIxP8jkdrzB4iB8U9jU0HngxUKJ1/fInFGpXIdcF7WDeVMnwWwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFA3W8sDc+WFb49kakfAVCqBP8UsrMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvRGRieXdOejVZVnZqMlJxUjhCVUtvRV94U3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAvywcAwQA
v9sbAwQAyQviAwQAyRjNMA0GCSqGSIb3DQEBCwUAA4IBAQBtwfxyWNyrKeSZCi/+
CfjKLrqLU8L27bnS47RX51uwkQ/ZdQkdpUSPnwdpX5UEl7YLi1Xl+hE5uUpJNbNk
uf5ub+GRd+FP5JM06P+xqOZDVDzAybSzmxhWR6HZ5oz0svJM5eBz/1IBlXkGBmLC
439G4o2ZX0GjVhZqtAurMZU5zDJWIrfYeqCw/tuCv5YnetY24s85ai9QaBtpNCAz
Kwa/pU9AQ0U5N6IC/5c9QZBlTQ0MpXsX8DcuNox71ylOhmLDc/tkpc3W746sUdOM
VHa0lkn2kF1+Gw+aE+ZCSCPs5f/x5/NzHrekLYysJcnCSdR3eVnE8OVbO436QtHZ
EmxT
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:22 2026 by rpki-client