Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HpFbFpuOPJq-E2eXQhWdCe_ZIR4.roa
File: HpFbFpuOPJq-E2eXQhWdCe_ZIR4.roa (raw, json)
Hash identifier: Jn00/12GMgae8HkP8MGBuno1NlYJlS+A3TPc6HBfgJI=
Subject key identifier: 1E:91:5B:16:9B:8E:3C:9A:BE:13:67:97:42:15:9D:09:EF:D9:21:1E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0B58EC523A7F60AE6F2B8F30A66CB8B3A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HpFbFpuOPJq-E2eXQhWdCe_ZIR4.roa
Signing time: Fri 18 Sep 2026 17:27:07 +0000
ROA not before: Fri 18 Sep 2026 17:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 89.106.26.0/24 maxlen: 24
103.102.132.0/24 maxlen: 24
189.12.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:8e:c5:23:a7:f6:0a:e6:f2:b8:f3:0a:66:cb:8b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 18 17:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e915b169b8e3c9abe13679742159d09efd9211e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c8:d7:7e:dd:b6:58:0b:45:d4:15:3a:63:54:
9d:4b:7f:d3:4e:36:ab:d2:6a:0a:80:4b:96:c7:75:
43:10:71:3d:1d:b0:ea:f7:1b:54:75:33:9b:7a:d7:
0c:52:23:2f:5a:64:4b:b0:3d:6c:e4:94:35:76:5e:
7f:c1:d6:57:28:fd:66:d4:61:7f:24:a3:42:21:ae:
ba:26:8e:2a:f9:ff:e7:af:29:6e:28:3a:aa:bf:ea:
20:7f:b2:96:e0:26:eb:c5:70:70:5c:b0:88:03:24:
7f:81:ef:53:7b:d7:fa:62:0f:d0:50:da:a4:f6:be:
0a:95:43:ec:8a:81:5f:48:3f:1b:a2:9f:91:21:90:
0e:85:17:3f:e9:aa:e9:4d:57:4b:9f:f7:52:7b:19:
49:8c:dd:00:0e:9e:7c:3f:43:17:11:71:b6:43:61:
fa:e9:8e:8f:18:3c:2a:ca:fe:f2:da:c9:3c:1b:14:
8e:ae:f3:68:24:f1:a1:81:a4:c1:cd:1b:b6:2f:26:
97:8e:2e:9d:ab:8a:f0:f1:02:0c:17:69:e9:65:ab:
07:76:6d:f6:e4:92:4e:57:09:24:d9:a9:a8:c8:cb:
77:23:81:8d:34:f2:24:c8:0e:ad:cf:f1:d5:f2:f5:
48:f4:94:47:95:5c:ee:d4:6c:8b:ec:20:5c:68:b0:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:91:5B:16:9B:8E:3C:9A:BE:13:67:97:42:15:9D:09:EF:D9:21:1E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HpFbFpuOPJq-E2eXQhWdCe_ZIR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.26.0/24
103.102.132.0/24
189.12.59.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d2:c6:42:4d:d0:ea:ab:c9:9e:6a:af:a1:79:23:e9:17:c1:
0a:96:6c:96:44:f1:2b:bd:b1:2c:4d:9e:0f:ab:35:e0:da:90:
38:80:40:f6:9c:1d:75:8c:15:6e:46:36:04:28:7e:00:7c:4d:
c0:c2:03:2d:45:87:e9:49:65:de:e1:2b:09:81:d1:aa:49:b9:
e3:c3:2d:51:44:8f:3a:31:5a:6c:7b:23:b8:47:81:3e:19:17:
ba:46:0c:fc:99:b6:78:0b:75:51:d2:fd:28:eb:83:38:2a:56:
29:55:e0:04:ab:1b:e6:88:48:8c:2a:62:3c:cf:30:e3:95:48:
2a:6c:1f:f6:02:91:87:48:f4:db:6b:11:cb:9e:3b:61:4a:8f:
a7:58:61:64:0b:37:85:df:c6:b8:56:67:18:f9:50:1c:bd:89:
d5:ab:6b:22:32:bf:bd:64:4c:52:3f:d7:41:b7:54:32:64:95:
68:60:3b:42:55:b6:4b:34:2d:86:8a:94:62:61:35:ab:b3:61:
04:67:67:db:79:7d:7e:a2:6e:5b:8a:05:e8:ec:23:43:67:83:
fd:9c:4c:c4:c1:6e:e8:82:f3:f2:70:05:a0:25:3a:ec:a3:7d:
bd:9d:34:85:c1:78:79:7e:8f:60:45:cd:94:aa:cc:88:f1:3e:
02:19:0e:02
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaC1jsUjp/YK5vK48wpmy4s6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwOTE4MTcyNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTkxNWIxNjliOGUzYzlhYmUxMzY3OTc0MjE1OWQwOWVmZDkyMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MjXft22WAtF1BU6Y1SdS3/TTjar
0moKgEuWx3VDEHE9HbDq9xtUdTObetcMUiMvWmRLsD1s5JQ1dl5/wdZXKP1m1GF/
JKNCIa66Jo4q+f/nryluKDqqv+ogf7KW4CbrxXBwXLCIAyR/ge9Te9f6Yg/QUNqk
9r4KlUPsioFfSD8bop+RIZAOhRc/6arpTVdLn/dSexlJjN0ADp58P0MXEXG2Q2H6
6Y6PGDwqyv7y2sk8GxSOrvNoJPGhgaTBzRu2LyaXji6dq4rw8QIMF2npZasHdm32
5JJOVwkk2amoyMt3I4GNNPIkyA6tz/HV8vVI9JRHlVzu1GyL7CBcaLBBbQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB6RWxabjjyavhNnl0IVnQnv2SEeMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvSHBGYkZwdU9QSnEtRTJlWFFoV2RDZV9aSVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWWoaAwQA
Z2aEAwQAvQw7MA0GCSqGSIb3DQEBCwUAA4IBAQBX0sZCTdDqq8meaq+heSPpF8EK
lmyWRPErvbEsTZ4PqzXg2pA4gED2nB11jBVuRjYEKH4AfE3AwgMtRYfpSWXe4SsJ
gdGqSbnjwy1RRI86MVpseyO4R4E+GRe6Rgz8mbZ4C3VR0v0o64M4KlYpVeAEqxvm
iEiMKmI8zzDjlUgqbB/2ApGHSPTbaxHLnjthSo+nWGFkCzeF38a4VmcY+VAcvYnV
q2siMr+9ZExSP9dBt1QyZJVoYDtCVbZLNC2GipRiYTWrs2EEZ2fbeX1+om5bigXo
7CNDZ4P9nEzEwW7ogvPycAWgJTrso329nTSFwXh5fo9gRc2UqsyI8T4CGQ4C
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:05:06 2026 by rpki-client