Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YHyFWFEP2Ee2DrzloOoojuhSt9U.roa
File: YHyFWFEP2Ee2DrzloOoojuhSt9U.roa (raw, json)
Hash identifier: VgMIbO4UD+zsaX4d437YDWRryzyizOGDtWCrZgn4sbU=
Subject key identifier: 60:7C:85:58:51:0F:D8:47:B6:0E:BC:E5:A0:EA:28:8E:E8:52:B7:D5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EAAD11E8E3F550A112A9CD16A71C97185
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YHyFWFEP2Ee2DrzloOoojuhSt9U.roa
Signing time: Tue 09 Jun 2026 05:18:11 +0000
ROA not before: Tue 09 Jun 2026 05:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 191.44.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:d1:1e:8e:3f:55:0a:11:2a:9c:d1:6a:71:c9:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 9 05:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=607c8558510fd847b60ebce5a0ea288ee852b7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:78:31:2a:62:de:45:42:2a:40:da:16:e5:
c7:cb:01:2c:24:ed:fe:6d:ab:21:2e:1c:5c:ef:c8:
5c:a8:e5:96:94:70:04:1c:26:74:ba:16:5d:d3:ca:
5a:ec:21:cf:09:43:e3:3d:76:17:7c:ce:d0:f7:0c:
f9:b5:cf:e0:62:a1:67:77:e2:87:1f:e9:76:2a:cf:
6f:ec:74:e6:c3:cd:9d:71:a8:a6:9f:70:59:66:b0:
83:f1:9f:23:97:b6:5a:c7:bd:18:f1:58:cd:db:b2:
51:88:19:3a:8e:fc:f1:d4:d1:19:b7:77:6d:63:0a:
8e:bd:ff:6a:d3:7b:bd:ed:f3:fe:a5:db:7f:17:54:
f9:e0:82:e3:c2:b2:7a:d3:63:70:ec:26:9e:98:6b:
98:ed:31:dc:a1:4c:77:82:e4:c9:3b:2a:5a:87:a8:
bd:c7:47:4a:50:49:19:92:52:1b:36:31:2e:98:d0:
00:38:b1:94:13:38:44:dc:7a:3c:dc:a8:d2:d3:ee:
f2:2d:3f:6d:3f:3a:d6:6f:fb:86:6f:53:fe:63:1d:
d4:c5:78:cc:9c:af:9c:4f:a3:3c:5a:67:ce:03:8c:
f4:8d:a1:26:4a:e2:98:61:28:6b:6e:15:e3:7d:f6:
b5:5b:92:dc:27:c0:97:7c:da:4d:49:87:76:c8:de:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:85:58:51:0F:D8:47:B6:0E:BC:E5:A0:EA:28:8E:E8:52:B7:D5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YHyFWFEP2Ee2DrzloOoojuhSt9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:74:af:55:cc:1a:34:9c:bf:94:1c:04:dc:60:56:db:3d:89:
b6:38:87:af:e4:82:bc:36:cb:3a:5c:62:4d:35:3a:52:c1:42:
a2:53:4b:bc:59:c8:14:43:29:35:59:e3:9f:6d:cf:d3:68:db:
29:37:2c:c6:4d:10:fb:0d:ee:27:d1:b7:c0:8d:06:99:f6:79:
43:ff:bc:8e:7a:4f:68:a7:f4:94:7c:5a:87:da:2c:11:5a:14:
c2:96:c1:bc:b5:d4:43:14:e5:2e:e4:94:85:32:54:8c:16:b2:
1a:04:82:15:8e:80:36:8c:40:5a:ef:ec:9c:fd:f1:35:46:4f:
54:f3:46:de:8f:2e:92:93:9d:63:c3:8f:23:1d:5b:0d:60:3c:
d3:ae:47:d6:a9:36:5b:73:7f:c3:59:20:f4:c3:f6:c1:23:52:
85:b6:28:ad:24:2b:e9:0a:c7:b0:d9:35:d1:58:54:5c:87:7e:
d8:61:96:c8:c9:af:46:ff:89:38:36:81:a5:bf:52:bc:9b:d7:
1a:70:86:e1:0b:69:33:92:e2:e3:21:3f:60:c9:c1:f3:9d:35:
e2:cd:d0:57:b8:75:9e:90:3e:c5:11:95:c3:13:3c:36:fb:a2:
96:ca:21:44:eb:56:50:55:d0:06:ce:a1:80:c4:8a:18:3c:23:
75:b5:f7:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6q0R6OP1UKESqc0WpxyXGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjA5MDUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDdjODU1ODUxMGZkODQ3YjYwZWJjZTVhMGVhMjg4ZWU4NTJiN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx794MSpi3kVCKkDaFuXHywEsJO3+
bashLhxc78hcqOWWlHAEHCZ0uhZd08pa7CHPCUPjPXYXfM7Q9wz5tc/gYqFnd+KH
H+l2Ks9v7HTmw82dcaimn3BZZrCD8Z8jl7Zax70Y8VjN27JRiBk6jvzx1NEZt3dt
YwqOvf9q03u97fP+pdt/F1T54ILjwrJ602Nw7CaemGuY7THcoUx3guTJOypah6i9
x0dKUEkZklIbNjEumNAAOLGUEzhE3Ho83KjS0+7yLT9tPzrWb/uGb1P+Yx3UxXjM
nK+cT6M8WmfOA4z0jaEmSuKYYShrbhXjffa1W5LcJ8CXfNpNSYd2yN6NkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGB8hVhRD9hHtg685aDqKI7oUrfVMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvWUh5RldGRVAyRWUyRHJ6bG9Pb29qdWhTdDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvywQMA0G
CSqGSIb3DQEBCwUAA4IBAQCidK9VzBo0nL+UHATcYFbbPYm2OIev5IK8Nss6XGJN
NTpSwUKiU0u8WcgUQyk1WeOfbc/TaNspNyzGTRD7De4n0bfAjQaZ9nlD/7yOek9o
p/SUfFqH2iwRWhTClsG8tdRDFOUu5JSFMlSMFrIaBIIVjoA2jEBa7+yc/fE1Rk9U
80bejy6Sk51jw48jHVsNYDzTrkfWqTZbc3/DWSD0w/bBI1KFtiitJCvpCsew2TXR
WFRch37YYZbIya9G/4k4NoGlv1K8m9cacIbhC2kzkuLjIT9gycHznTXizdBXuHWe
kD7FEZXDEzw2+6KWyiFE61ZQVdAGzqGAxIoYPCN1tfcy
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:20 2026 by rpki-client