Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G-bqOS8s8xg4H9UReUoDlJ0uFek.roa
File: G-bqOS8s8xg4H9UReUoDlJ0uFek.roa (raw, json)
Hash identifier: eWd9Mf6cju4/+fBTOg1aeu+bGYFSuachVrTV1q0L2u4=
Subject key identifier: 1B:E6:EA:39:2F:2C:F3:18:38:1F:D5:11:79:4A:03:94:9D:2E:15:E9
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019D97E8AAAD191E65C94A4DBCC39E859FFA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G-bqOS8s8xg4H9UReUoDlJ0uFek.roa
Signing time: Thu 16 Apr 2026 20:08:20 +0000
ROA not before: Thu 16 Apr 2026 20:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 77.111.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e8:aa:ad:19:1e:65:c9:4a:4d:bc:c3:9e:85:9f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 16 20:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1be6ea392f2cf318381fd511794a03949d2e15e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:cc:31:d3:27:ea:83:32:3f:f1:3f:a9:2f:
92:e1:da:47:75:c3:1f:2d:73:61:9b:73:e4:83:ee:
68:39:06:cc:29:ac:e2:30:db:b8:eb:70:6b:e0:f1:
0e:e8:17:e7:23:2f:f1:ec:5d:02:46:e6:94:8a:bb:
52:0a:59:8b:ff:d3:8d:64:2d:da:30:6c:5c:1b:38:
23:f9:d6:8b:9b:a3:e2:4a:58:59:05:c6:80:71:73:
7b:b2:fb:33:d4:ab:a8:a9:4c:6d:66:ed:4e:6c:42:
8c:dc:7e:cf:ba:86:88:53:56:8f:95:0f:f0:6e:ef:
46:8a:88:3e:20:6e:e2:a3:2f:9b:30:61:61:3e:34:
49:24:cb:63:35:46:2e:0e:e6:6b:0e:e1:08:3e:a8:
40:e9:b4:04:97:37:f8:0a:79:da:f4:aa:9d:f9:22:
ab:bb:c2:bc:c8:51:cb:31:46:12:7c:47:73:9e:bc:
6a:be:51:70:dc:9b:64:e0:2a:6e:c2:13:61:f2:c0:
63:bb:50:c6:4c:eb:1d:25:a5:b2:89:86:0b:38:4c:
d9:67:04:c7:2c:93:d6:cf:3c:f6:b8:62:8f:ea:95:
53:55:ea:05:84:46:03:f7:64:71:41:7a:92:26:70:
57:d0:a5:2c:cc:2e:ff:e3:bc:8d:ff:c3:a4:a4:e4:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E6:EA:39:2F:2C:F3:18:38:1F:D5:11:79:4A:03:94:9D:2E:15:E9
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G-bqOS8s8xg4H9UReUoDlJ0uFek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.101.0/24
Signature Algorithm: sha256WithRSAEncryption
82:80:bf:d7:ea:9c:30:fb:39:d2:4e:41:a3:fa:6a:6d:07:28:
1f:4f:9f:60:7b:57:87:20:cf:c7:f7:79:26:c6:5e:7c:ab:97:
68:49:ec:88:5a:22:7a:62:e6:a6:f7:75:d8:75:ec:2a:83:1d:
f0:ba:f0:7a:6f:2f:38:fb:b4:a7:6a:d9:33:0b:be:21:b7:d7:
5e:73:9b:e8:d9:13:cd:0b:76:7d:e0:32:a1:45:20:e1:18:5e:
b0:23:ff:97:28:25:0d:96:b5:3f:99:9c:dd:9f:d9:ed:a2:e4:
3c:59:5d:bb:aa:ad:83:81:cd:9b:34:38:e1:2c:99:59:3f:cb:
a4:86:01:2c:86:8f:a7:c8:62:25:cd:9c:7c:22:c5:f9:a6:cb:
82:82:88:89:9c:09:80:43:9a:93:74:90:dc:dd:33:49:21:28:
7b:59:bb:bf:51:b8:01:98:80:4d:4a:b9:af:1d:0e:3f:5e:dc:
f6:74:b2:bc:0f:ad:b7:17:09:43:75:2e:c5:49:90:fd:01:e5:
a3:a3:76:87:18:d0:74:21:c4:4d:be:ee:4a:c2:c2:ff:fa:fc:
19:b2:e6:93:ad:37:85:8f:e6:93:75:f3:2e:f7:3c:97:68:4d:
dc:1b:52:84:93:31:18:47:d4:09:f8:cf:0f:29:1f:81:72:01:
1b:46:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:43 2026 by rpki-client