Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MOwM0EON0M43_Ay7Fhj6iz4V1GA.roa
File: MOwM0EON0M43_Ay7Fhj6iz4V1GA.roa (raw, json)
Hash identifier: 4+Nh6VpfSozoz5rtD6TIgkhPkYUeDyr+kDkln7Zd8n0=
Subject key identifier: 30:EC:0C:D0:43:8D:D0:CE:37:FC:0C:BB:16:18:FA:8B:3E:15:D4:60
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EAAD3DD1675D063A54AC073221ED42FEE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MOwM0EON0M43_Ay7Fhj6iz4V1GA.roa
Signing time: Tue 09 Jun 2026 05:21:11 +0000
ROA not before: Tue 09 Jun 2026 05:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203106
IP address blocks: 189.75.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:d3:dd:16:75:d0:63:a5:4a:c0:73:22:1e:d4:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 9 05:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30ec0cd0438dd0ce37fc0cbb1618fa8b3e15d460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:0d:2d:bc:97:b3:5a:85:92:fb:9a:dc:e3:
f1:1d:d9:02:13:9a:08:be:8c:d3:57:42:49:f2:c0:
17:92:d6:48:1b:3f:bf:b7:bd:ea:d0:94:d4:23:7d:
50:51:f1:69:93:5c:60:dc:d3:64:40:f2:95:29:7f:
4b:51:04:29:b9:73:e3:ba:ee:51:0b:fb:4f:8a:0c:
c1:61:a9:74:65:5d:7b:60:84:59:5e:4e:a4:d3:fc:
ce:17:3d:36:00:65:7e:d0:7a:e6:53:99:85:fb:09:
df:ae:97:1c:cd:b3:4f:36:b2:9c:28:32:f6:ba:2f:
0b:ca:5a:c3:3f:92:07:14:c3:7e:d7:74:ad:2d:7e:
b8:14:1f:9e:e9:39:31:13:c0:04:1c:5a:be:b1:81:
2b:f3:fa:38:0a:69:3c:b7:90:f3:09:7f:12:32:de:
d7:a2:b0:fa:f4:ef:fc:68:b7:d7:f2:d4:0b:32:38:
ca:e3:dd:4d:80:13:87:e0:eb:15:ed:10:e1:a0:27:
f0:f5:b9:b4:0f:08:ee:5c:45:d0:ed:6a:9c:fb:5c:
99:17:42:7e:cf:86:1c:14:0b:4a:6d:e9:f1:d1:cf:
c5:71:e2:c4:61:02:d4:35:6e:10:46:70:d6:a8:94:
eb:5e:12:10:0c:94:81:05:34:b5:42:46:37:1d:7a:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:0C:D0:43:8D:D0:CE:37:FC:0C:BB:16:18:FA:8B:3E:15:D4:60
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/MOwM0EON0M43_Ay7Fhj6iz4V1GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.75.176.0/24
Signature Algorithm: sha256WithRSAEncryption
db:f3:4a:63:dd:3c:86:7d:37:24:e3:7f:f1:28:af:6a:30:c7:
e7:97:47:96:f2:01:50:e7:a1:52:58:4b:c2:35:2c:0c:17:6a:
bf:17:0e:c3:00:2f:73:79:30:84:31:a6:d0:92:29:d8:63:38:
06:56:2d:3d:66:70:81:44:69:6b:06:bf:15:e2:4d:75:3c:c5:
4b:ab:d3:90:89:69:b5:96:50:d3:ff:f6:c4:b6:6d:14:1a:a5:
3f:12:34:e0:ca:45:46:0d:d6:33:ed:10:bc:95:0e:2a:a1:1f:
a9:3a:88:12:30:b1:6a:1f:73:a2:cd:13:07:de:c2:ce:87:88:
21:f4:53:84:8b:09:70:eb:8f:41:c8:a5:d9:a8:7e:6c:f9:1e:
62:e5:76:15:7e:51:92:8a:c6:85:ae:34:b8:46:64:f1:ea:7c:
35:8f:be:1c:b9:c4:51:6b:87:7b:47:eb:b5:ae:7a:c3:7a:e4:
59:d8:03:c9:c6:cc:7c:ae:92:6a:17:d3:15:33:40:f2:d9:ee:
14:83:bf:80:52:b8:1e:31:69:a5:ad:bf:5c:46:4e:f4:69:6e:
b7:6f:5b:39:fd:74:48:f3:66:6d:97:23:bc:fb:45:07:e8:03:
27:70:b0:db:c8:53:49:94:58:18:32:d3:4c:ac:b3:14:be:7f:
14:6a:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:23 2026 by rpki-client