Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/REp2MstVRlV9VrYaQ5l6aebdhzw.roa
File: REp2MstVRlV9VrYaQ5l6aebdhzw.roa (raw, json)
Hash identifier: fYkvr/SHcNE2kxX8OKJlVcvjcCrKMdo9PxYr+Ce4BFQ=
Subject key identifier: 44:4A:76:32:CB:55:46:55:7D:56:B6:1A:43:99:7A:69:E6:DD:87:3C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EB6A6951106FD0F95CAF7E14EA0970355
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/REp2MstVRlV9VrYaQ5l6aebdhzw.roa
Signing time: Thu 11 Jun 2026 12:27:10 +0000
ROA not before: Thu 11 Jun 2026 12:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153508
IP address blocks: 189.73.24.0/24 maxlen: 24
201.24.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:a6:95:11:06:fd:0f:95:ca:f7:e1:4e:a0:97:03:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 11 12:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=444a7632cb5546557d56b61a43997a69e6dd873c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:36:9e:35:c6:04:3e:14:2b:e4:11:31:2d:
39:61:c8:ed:22:7f:e6:d7:f7:d5:06:92:10:bf:f6:
ca:72:6b:5a:40:dd:7e:36:ac:78:ff:a4:a1:d1:bb:
39:0e:bf:77:19:bf:87:d7:95:f2:a5:f8:d9:56:34:
b6:e1:df:42:5a:d3:41:48:b8:08:e8:4e:92:66:7c:
2f:27:6e:e8:3b:e2:2a:0b:0a:7d:cb:b1:08:8f:18:
81:85:3a:c6:67:02:7b:5b:8d:97:de:8d:29:49:4e:
b5:bb:ab:ee:60:69:e5:70:3c:a5:c5:62:53:c7:69:
b4:a2:91:bc:12:14:ef:29:06:06:b7:bd:46:2f:78:
46:b4:69:08:63:7a:c0:52:1c:a9:b1:37:64:98:21:
e7:a3:67:e1:d7:69:2c:4a:5f:a1:d8:6c:1a:10:8f:
bd:e8:70:cc:e0:f9:bf:19:87:8c:56:dc:08:dd:5e:
6b:95:55:72:eb:d1:5e:20:d5:f9:1c:c2:e5:d6:ec:
64:48:dc:7a:ed:84:3b:49:b9:41:63:a8:b9:94:2d:
cb:78:00:37:47:62:60:48:4d:f8:53:ae:bb:db:a6:
fb:c5:00:f5:11:c9:4b:1a:49:ac:71:8a:c1:f6:0b:
76:99:9d:2a:3b:b3:23:d0:01:44:96:fd:c6:d6:b4:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:76:32:CB:55:46:55:7D:56:B6:1A:43:99:7A:69:E6:DD:87:3C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/REp2MstVRlV9VrYaQ5l6aebdhzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.24.0/24
201.24.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:be:fa:1f:f3:75:7b:34:1b:dd:6e:bb:da:8e:4c:dd:63:9e:
19:3e:79:16:c6:35:66:8e:b5:a5:59:28:5e:37:83:bc:8e:1e:
ea:61:74:5e:b0:ed:d7:56:17:4c:5f:cc:5e:b6:dd:eb:70:24:
a2:6e:11:c7:f7:c0:cd:6b:e3:8b:81:2b:cc:0d:2b:31:f3:1b:
34:cb:5f:a0:53:a0:c2:40:fd:44:d8:69:eb:0a:66:e9:dc:de:
5a:6e:df:58:8f:67:87:83:df:0c:7a:d6:09:2e:eb:19:1a:60:
0d:d7:94:78:37:76:ca:a5:24:e9:b8:39:b0:2d:97:ad:21:d5:
24:c6:02:04:13:13:56:f5:ad:a6:da:cb:b2:c9:c0:6d:ac:a7:
26:65:61:bc:6c:f6:36:77:e5:b0:5c:93:84:ec:0a:96:1b:d6:
dd:f3:38:be:11:01:cc:d4:4f:03:42:42:98:54:b2:49:c3:33:
78:c0:49:7a:f8:41:59:8a:e3:74:d0:5d:40:f8:7a:9e:6c:2d:
ba:da:ce:c2:5e:ab:45:14:eb:d7:cd:00:d5:ff:ab:4d:66:7d:
16:e8:51:f9:d6:9c:77:1e:7d:48:81:98:27:07:ab:ad:3e:9d:
12:b5:69:03:67:85:18:59:26:25:cd:bc:5a:9d:90:50:71:95:
7e:b1:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:03 2026 by rpki-client