Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OO66yM0Gytb02J1AUeihr3c-dZE.roa
File: OO66yM0Gytb02J1AUeihr3c-dZE.roa (raw, json)
Hash identifier: qttmuj+d6eb0VODsjxgUmuUOV1ELKzwxgOHmsqaNag0=
Subject key identifier: 38:EE:BA:C8:CD:06:CA:D6:F4:D8:9D:40:51:E8:A1:AF:77:3E:75:91
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EB2AD71B843291B0136FD5AA612FC03AD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OO66yM0Gytb02J1AUeihr3c-dZE.roa
Signing time: Wed 10 Jun 2026 17:56:11 +0000
ROA not before: Wed 10 Jun 2026 17:56:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197246
IP address blocks: 103.41.46.0/23 maxlen: 24
103.41.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:ad:71:b8:43:29:1b:01:36:fd:5a:a6:12:fc:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 10 17:56:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38eebac8cd06cad6f4d89d4051e8a1af773e7591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:41:f3:96:3d:00:6d:59:cb:bd:db:31:67:
d3:53:85:8d:32:3c:49:a2:17:76:99:f1:40:12:b3:
ec:c1:38:80:20:6d:70:f1:dc:2d:57:ae:57:dc:14:
75:2f:b6:39:9f:71:e1:21:cb:56:8a:23:80:f9:91:
1d:b7:7e:27:f6:ee:4b:5e:f3:c3:60:68:48:86:e5:
96:b0:bf:05:81:1d:63:ba:58:05:7c:1d:b8:d5:d9:
4d:05:75:0d:c0:6a:a7:96:9e:6c:3e:61:f8:e5:a9:
67:72:17:d0:ca:c6:7d:4c:fe:fe:30:cb:41:ed:f0:
d0:50:08:b7:d3:fa:a6:c2:e5:d9:a2:b3:0f:05:f7:
25:bc:41:eb:ab:0a:62:07:2c:0e:a0:c1:b6:d4:64:
97:70:e0:68:5c:df:dc:3f:ee:2c:bb:26:58:58:74:
83:ee:2e:f5:19:c6:fc:2d:6c:40:31:9f:18:50:84:
74:38:54:14:7b:7c:18:ee:b5:4b:5d:6d:71:57:d9:
0f:ac:59:7c:52:d9:14:b7:7c:e5:f4:fb:a6:3a:88:
ca:c2:c0:aa:6f:3b:1a:b2:92:72:6a:9c:19:a9:24:
67:81:7f:19:6b:90:8b:fa:d0:19:af:1b:5f:99:5e:
13:ae:2f:ac:bb:fe:74:c1:23:0c:88:97:b7:a2:d9:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:BA:C8:CD:06:CA:D6:F4:D8:9D:40:51:E8:A1:AF:77:3E:75:91
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OO66yM0Gytb02J1AUeihr3c-dZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.46.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:b8:64:6f:cd:85:35:f2:7d:1c:ed:c5:42:19:10:5a:85:a3:
07:fc:b3:00:47:c3:dc:22:bd:93:1c:c1:b5:08:ac:b4:66:fa:
8c:03:35:16:5b:c8:e2:d4:5b:a4:a7:32:7d:36:60:95:dd:a0:
b4:cb:45:10:0b:40:25:48:cd:49:c2:b3:42:b8:32:1f:b1:16:
0f:19:21:a1:96:cd:e2:27:5f:19:6c:c6:6c:62:f6:ff:c9:6b:
38:55:36:81:d7:09:25:e3:40:58:07:86:21:d4:c3:16:49:68:
6e:21:85:46:5d:9d:c9:16:ba:3c:59:dd:2d:f5:78:19:47:b7:
7c:a0:bd:16:b4:be:76:29:d4:78:22:6a:f3:13:56:4e:71:09:
2b:57:b7:af:b7:d5:1a:43:92:5f:84:c9:3f:d3:a1:d4:01:12:
8a:d9:70:81:32:76:ff:0b:05:a2:ed:c7:b3:7d:d3:99:7a:a6:
ce:b6:2b:04:1e:b7:da:e8:ef:e3:22:36:3f:90:e9:fc:af:26:
42:2b:e7:cf:c1:aa:45:ef:16:e4:17:2d:b9:67:61:21:ab:a2:
05:62:87:36:83:2c:73:84:aa:35:00:24:81:a5:19:9c:66:02:
8f:2b:77:7f:4b:51:d5:0c:65:13:02:3b:47:8b:21:4a:be:e4:
91:90:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:38 2026 by rpki-client