Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/a-pLW768ZsHXy290UVKR6Cm9E7A.roa
File: a-pLW768ZsHXy290UVKR6Cm9E7A.roa (raw, json)
Hash identifier: DowLSme5Kdzq2y6sH09aIqHJ292il9g14gXV1ZcZBTU=
Subject key identifier: 6B:EA:4B:5B:BE:BC:66:C1:D7:CB:6F:74:51:52:91:E8:29:BD:13:B0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F94AD53FC3910B76741A09FBA83ABEDFA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/a-pLW768ZsHXy290UVKR6Cm9E7A.roa
Signing time: Fri 24 Jul 2026 15:10:14 +0000
ROA not before: Fri 24 Jul 2026 15:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 191.217.165.0/24 maxlen: 24
191.219.25.0/24 maxlen: 24
191.219.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:ad:53:fc:39:10:b7:67:41:a0:9f:ba:83:ab:ed:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 24 15:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bea4b5bbebc66c1d7cb6f74515291e829bd13b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:71:ae:6c:92:2d:04:b9:e8:fc:29:08:5f:
95:5a:c8:ed:ef:9c:09:ee:0f:0f:92:f7:f5:4b:77:
b6:4d:9e:ed:ea:84:6b:f8:95:10:61:74:6c:cc:31:
22:f5:f3:55:81:a2:00:b2:07:94:46:60:d0:30:6c:
21:c3:b3:d4:ff:a3:0e:f5:57:6a:5a:90:4c:59:dc:
a9:33:9f:a9:7a:7e:55:29:f7:ac:d1:7f:ae:38:07:
57:cb:98:50:21:36:b2:9f:f3:83:d6:1b:84:de:62:
b3:5b:99:10:1f:4b:d9:e9:9b:9f:3a:5d:68:39:f0:
f0:30:ed:b0:f1:a0:8b:2c:84:e5:99:7f:e8:35:e9:
8a:39:37:36:0b:e2:4e:ff:38:30:21:a3:fb:a9:a3:
a1:39:3d:37:84:ba:4d:52:89:49:11:5c:34:18:de:
56:3e:a0:03:98:70:d4:a7:5d:ac:53:ca:09:98:48:
c1:fb:eb:6b:7a:b4:70:c9:2a:d4:4b:e4:84:ab:b3:
d0:06:76:18:70:6c:33:b4:8c:d2:2e:ee:67:83:79:
b8:93:72:6e:ba:2d:a0:3d:e8:fb:67:36:90:c9:52:
66:96:60:0d:4f:68:79:89:3c:2c:7d:e5:45:2b:7c:
07:8c:26:74:be:8b:a4:f1:96:f0:2b:a5:0d:77:64:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:4B:5B:BE:BC:66:C1:D7:CB:6F:74:51:52:91:E8:29:BD:13:B0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/a-pLW768ZsHXy290UVKR6Cm9E7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.165.0/24
191.219.25.0/24
191.219.28.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d7:85:87:3d:a4:f5:f6:a8:7c:2c:2e:5f:6f:c6:72:4f:09:
12:26:3c:29:1b:c9:7d:a6:42:1d:be:ad:46:0f:f0:9a:9e:42:
88:a6:45:e6:fd:a9:e9:55:84:16:1e:51:84:e1:8b:cc:f8:50:
3f:c0:d6:9a:c1:a2:b4:cd:b6:f8:59:3b:cb:5a:bd:70:a0:3d:
4e:ee:21:68:64:2a:8a:77:ed:2f:65:06:cb:e2:ae:be:d3:31:
ff:5f:09:91:e5:6d:05:cb:d9:58:10:4d:ae:8a:d4:d5:c0:37:
c0:43:d4:14:0a:44:cd:31:5a:55:23:a1:62:91:e7:33:36:5c:
f5:47:09:4e:4b:a7:fc:c5:3e:2f:20:01:65:f8:73:68:0b:1b:
c7:f3:e6:56:1e:b1:8e:bf:3c:00:95:5b:93:e2:32:41:1a:8d:
ad:7f:12:76:e1:50:d3:d0:c0:0b:3e:96:e6:7a:e3:d8:d3:e5:
15:50:61:d8:26:66:03:10:65:92:c6:29:0d:c2:40:02:ba:28:
8c:54:ee:9d:10:d1:d9:64:c5:b8:37:fa:fb:64:93:b0:30:99:
cd:66:d5:78:f6:05:e9:01:2f:f9:a9:a0:c3:fb:d0:53:f3:f9:
b7:14:51:c8:5a:77:cb:31:85:29:74:70:7f:5d:ce:a9:76:f7:
c3:ed:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:38 2026 by rpki-client