Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UD0TSqGapvIJmhwT5LTErx9gWrI.roa
File: UD0TSqGapvIJmhwT5LTErx9gWrI.roa (raw, json)
Hash identifier: OPicqjIlTfxOUkzceZVukNkStU+yYBeI6GiZnUiiLhg=
Subject key identifier: 50:3D:13:4A:A1:9A:A6:F2:09:9A:1C:13:E4:B4:C4:AF:1F:60:5A:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F9C2C447C314F54DF5CD248D92119397B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UD0TSqGapvIJmhwT5LTErx9gWrI.roa
Signing time: Sun 26 Jul 2026 02:06:14 +0000
ROA not before: Sun 26 Jul 2026 02:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 189.31.217.0/24 maxlen: 24
189.73.30.0/24 maxlen: 24
189.75.189.0/24 maxlen: 24
191.44.23.0/24 maxlen: 24
191.219.26.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.24.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9c:2c:44:7c:31:4f:54:df:5c:d2:48:d9:21:19:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 26 02:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=503d134aa19aa6f2099a1c13e4b4c4af1f605ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:16:b9:63:0c:87:d4:7a:b6:9a:e9:e7:82:
e2:4d:43:75:1d:68:a4:fb:a1:46:07:75:ed:6a:f1:
62:f8:33:5b:8d:fd:c0:67:e3:76:f4:63:9a:d1:fd:
64:13:c3:d9:c4:13:06:db:c8:61:e6:21:fc:5b:bf:
fc:0c:68:e6:f7:0e:ed:44:36:4a:5b:f7:f8:f2:d9:
9d:f7:59:75:05:9f:bb:f2:14:38:70:74:09:27:9a:
b5:35:5c:f5:b7:01:56:d0:02:87:be:cf:5d:44:fa:
5a:fd:76:1f:88:f1:b8:e9:56:31:98:0a:71:e1:2e:
ba:4e:39:c8:92:83:48:b3:40:c3:26:74:98:54:5f:
02:8f:b0:f7:09:05:ac:e5:6c:f7:fa:17:b0:67:45:
aa:04:cf:4d:a3:1f:52:ee:7c:de:bb:07:6e:ab:79:
17:c4:be:f0:bf:82:05:80:07:dc:00:68:1c:e6:58:
0d:d3:d0:26:fb:9c:8b:9f:84:76:46:7d:b3:af:7b:
6c:21:d7:c0:0a:23:76:4a:41:ec:59:00:a4:5d:3f:
e7:3c:87:bf:56:a9:49:a8:62:6c:3e:7e:69:1b:cb:
f9:ed:76:e0:3c:6e:05:bf:a5:9f:27:33:44:a7:bf:
84:5b:0a:6b:0e:38:ae:fa:57:cc:ce:0f:c6:97:93:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:13:4A:A1:9A:A6:F2:09:9A:1C:13:E4:B4:C4:AF:1F:60:5A:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/UD0TSqGapvIJmhwT5LTErx9gWrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.217.0/24
189.73.30.0/24
189.75.189.0/24
191.44.23.0/24
191.219.26.0/24
201.14.222.0/24
201.24.201.0/24
Signature Algorithm: sha256WithRSAEncryption
70:52:63:d1:d8:3b:bb:00:c7:8a:b3:03:8d:20:5b:75:ac:4a:
49:dc:69:74:61:00:13:42:79:dd:ad:6c:a4:a5:a6:70:a4:9c:
07:a5:ef:07:e2:de:65:12:de:8d:6c:c8:1e:4d:d7:bc:bf:0b:
ce:50:49:3a:c9:a9:56:28:c1:1b:dd:fc:64:31:54:8b:c8:35:
ca:ec:0f:a6:8a:6e:d4:15:80:55:dc:cf:6f:f9:5d:49:23:cb:
22:83:b2:5e:8b:c2:f3:79:a9:0a:51:95:80:b5:ec:37:5e:d4:
d8:b4:48:8a:9f:a6:4c:53:9a:c8:9a:e0:3d:90:01:b6:b2:6d:
65:df:26:e6:6c:00:65:1f:43:d7:04:27:9e:79:bd:8b:67:a4:
dc:a3:98:60:e9:a2:38:ea:2c:40:a7:82:4f:38:b5:fa:ea:61:
2d:35:9d:29:a9:82:ba:d8:f0:34:10:87:ea:07:41:d5:d4:10:
0a:f7:3e:c3:f0:78:48:6b:45:d8:b5:e9:d2:ad:e8:27:54:6c:
cd:4e:da:e3:4c:59:2c:16:63:12:54:ff:ac:b6:2f:f5:0d:aa:
a2:72:e0:29:d6:e0:27:d7:09:62:8d:b6:18:68:a3:1d:ad:2c:
a4:dc:30:72:15:ad:84:c4:98:18:7c:a4:44:24:30:b6:7c:ca:
a6:30:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:32 2026 by rpki-client