Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/S1s4f_sLsT3PAEzsqKexFaWx95A.roa
File: S1s4f_sLsT3PAEzsqKexFaWx95A.roa (raw, json)
Hash identifier: jXAw0OpXxidRM57W84zj2tCPqJUz7kDL/ol8PaMpkkY=
Subject key identifier: 4B:5B:38:7F:FB:0B:B1:3D:CF:00:4C:EC:A8:A7:B1:15:A5:B1:F7:90
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019C73938323FE00944E4A77950FEFA4B14A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/S1s4f_sLsT3PAEzsqKexFaWx95A.roa
Signing time: Thu 19 Feb 2026 01:46:13 +0000
ROA not before: Thu 19 Feb 2026 01:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
85.208.11.0/24 maxlen: 24
94.229.214.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
124.158.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:73:93:83:23:fe:00:94:4e:4a:77:95:0f:ef:a4:b1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 19 01:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b5b387ffb0bb13dcf004ceca8a7b115a5b1f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:5e:54:cf:2c:1f:3b:3c:41:42:e6:f7:ec:
a9:bb:14:f2:c8:9a:35:28:cd:a0:5e:3f:10:06:fa:
1d:02:fa:23:31:c1:54:42:20:b5:e6:e5:64:76:41:
69:be:c3:36:ba:5c:81:cc:13:f3:29:bc:65:ea:40:
a2:53:1f:ca:57:86:f2:aa:0f:6b:74:4c:6d:41:5c:
c4:14:9c:02:07:a8:1c:90:64:21:37:3c:2a:ad:d7:
a5:34:91:f7:ff:7b:91:7e:a1:9a:03:31:12:3f:e6:
aa:2e:f0:cb:ef:c9:9b:5e:c3:e9:5c:cd:f4:ec:45:
e3:e6:47:3c:dc:8d:2e:2f:dd:0b:70:3e:b3:68:0b:
fa:44:45:f0:a9:fd:b3:e8:6e:d6:7d:8d:ac:60:aa:
b2:f4:26:de:2c:9d:43:c5:62:75:b8:11:22:0f:1b:
60:8d:32:18:01:64:9f:3a:89:21:4c:ec:a1:a1:3d:
7a:a3:9c:6a:dd:19:b7:f4:83:b4:b1:06:b0:8a:cb:
6c:de:97:a4:ee:2a:1f:9c:87:6d:42:f7:04:7a:65:
d5:7a:e9:86:62:fd:16:7d:63:a4:be:f0:04:99:7e:
b1:42:d4:4b:18:3f:37:cd:a4:80:2b:40:c2:9c:b6:
a7:a8:ff:8d:e7:6b:45:9f:24:e2:4e:3d:b1:45:96:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:38:7F:FB:0B:B1:3D:CF:00:4C:EC:A8:A7:B1:15:A5:B1:F7:90
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/S1s4f_sLsT3PAEzsqKexFaWx95A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
85.208.11.0/24
94.229.214.0/24
94.229.219.0/24
124.158.101.0/24
Signature Algorithm: sha256WithRSAEncryption
13:10:d7:d4:e8:50:ce:df:37:fb:fc:e4:a5:a4:f0:ad:82:d4:
60:61:67:c1:6f:76:c5:1b:0c:49:84:54:30:c0:17:b9:48:55:
21:50:36:20:0b:25:6d:f0:9f:3e:46:ea:77:84:93:61:1e:eb:
22:e8:3b:80:92:6b:cf:e5:88:9b:aa:3d:04:1b:1e:ee:3a:57:
04:5a:ef:7c:f1:8a:84:e5:aa:7f:6f:d2:0b:0e:3d:35:21:e5:
a2:23:36:f6:cf:e9:bd:23:2d:db:d5:85:c5:4a:c1:38:59:66:
4e:f9:c1:61:e6:c9:ad:5a:24:e1:ca:fb:94:0d:cc:f5:93:bf:
66:08:1c:75:5c:15:81:09:7f:44:8a:84:c0:d1:c9:09:0a:54:
5c:28:57:29:1e:3e:37:12:d2:80:27:79:a9:7b:4b:8b:48:fe:
eb:fe:8d:6c:22:31:69:ed:b3:14:30:2d:f3:a5:55:b1:5d:08:
6f:17:7e:8d:ed:46:8f:10:80:be:88:7b:f3:2e:33:e4:21:7c:
cd:03:9e:4e:17:ad:67:e5:56:03:82:fb:42:f2:24:25:4b:86:
b2:64:d5:af:6a:4b:bc:d2:c6:af:dd:c5:c3:26:d3:21:5a:ed:
08:f5:88:19:e4:ab:53:cb:85:f6:a4:4c:c1:5c:1e:5a:df:0e:
a1:2d:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:39 2026 by rpki-client