Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dbBgGHe28zTmH74bCdHDLRCHjQs.roa
File: dbBgGHe28zTmH74bCdHDLRCHjQs.roa (raw, json)
Hash identifier: fzmAfqJDTGP2gLSpM0ckPmj04kwQSFr3m8HMkGb6j1I=
Subject key identifier: 75:B0:60:18:77:B6:F3:34:E6:1F:BE:1B:09:D1:C3:2D:10:87:8D:0B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA4A17D8843B1BE5D49EE5646EF272677
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dbBgGHe28zTmH74bCdHDLRCHjQs.roa
Signing time: Mon 27 Jul 2026 17:31:14 +0000
ROA not before: Mon 27 Jul 2026 17:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 189.31.218.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.75.178.0/24 maxlen: 24
191.222.37.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:a1:7d:88:43:b1:be:5d:49:ee:56:46:ef:27:26:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 27 17:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75b0601877b6f334e61fbe1b09d1c32d10878d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:e6:74:13:6f:78:34:09:3b:a5:dc:bc:f6:
b4:b6:01:9e:51:d1:93:2a:f6:18:71:d5:f0:31:1b:
fe:2a:bf:42:fb:f3:ce:76:66:6e:0b:25:11:e6:6c:
b9:f2:2a:e0:9d:1b:70:81:e7:d2:3f:0e:a3:29:a2:
e5:90:d4:58:2a:5d:4c:41:30:24:c3:c6:14:43:3a:
c5:03:26:e8:c0:a4:52:2b:fc:1d:60:9d:d7:49:9a:
15:b5:63:95:7f:8c:a4:0b:dd:72:2d:51:12:a6:1e:
da:f8:b4:ec:bc:9f:55:3f:51:0b:8a:8e:da:1c:69:
80:65:2e:26:89:c4:83:78:1d:fb:7b:e6:6c:53:f1:
fa:a8:8f:1b:df:b8:bc:20:d3:86:8d:33:ea:8a:ab:
96:8e:f9:9f:03:ac:68:67:fa:52:89:93:b5:51:9a:
25:d5:64:1c:aa:66:db:df:70:9d:06:97:19:8f:41:
2a:dd:9e:9e:13:5d:a4:d0:ad:4d:d5:f5:da:f1:7d:
cc:5f:e5:a4:c1:7f:51:5c:aa:93:13:33:bc:7f:33:
e9:9f:37:12:a5:78:69:25:ef:3a:18:59:9b:7b:3e:
bd:9f:76:ad:72:6e:db:04:9d:64:21:b1:f1:d7:25:
2a:b5:48:c9:74:2a:46:77:b0:fa:b0:f5:92:12:09:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:60:18:77:B6:F3:34:E6:1F:BE:1B:09:D1:C3:2D:10:87:8D:0B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/dbBgGHe28zTmH74bCdHDLRCHjQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.218.0/24
189.73.25.0/24
189.73.29.0/24
189.75.178.0/24
191.222.37.0/24
200.102.185.0/24
200.181.94.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cc:e1:1a:da:c2:eb:8c:21:f2:8f:10:ac:7f:fb:14:f3:1b:
85:6d:3d:9e:0b:f3:96:72:63:dd:f6:09:5e:cc:93:d0:58:06:
e9:ca:35:af:01:01:47:78:e0:05:ce:df:52:ff:8c:2d:48:04:
46:5b:6f:d3:ed:7a:9d:a4:40:a5:de:21:8b:6a:f9:e1:a9:cc:
7f:9f:c1:03:f6:1d:c3:ba:fb:1a:be:83:a2:6d:e1:2c:0c:7d:
58:f5:23:53:4a:0e:49:d0:da:15:2a:55:dd:8a:23:14:3a:4d:
df:46:9b:0a:fb:56:dd:b8:12:b4:32:7d:b4:57:38:51:79:4c:
40:6b:8c:b8:44:4f:7d:e6:87:58:ab:5e:29:9e:94:da:28:9c:
16:ad:27:44:89:db:4f:90:a3:69:ca:71:1a:93:62:53:78:b9:
2a:6f:6c:90:c5:cb:bf:0f:69:17:56:3d:7f:43:18:6f:d2:5e:
a1:ab:59:66:5b:a6:e5:f0:57:6a:5a:a0:45:d2:c6:d8:f5:3f:
ba:91:21:b2:2f:48:d5:1a:d0:1b:5c:56:c4:7a:4a:2e:2e:eb:
32:2b:75:82:9e:1d:fe:5b:3e:69:c5:fd:a9:a6:1b:25:43:01:
53:d8:77:25:1f:eb:cd:d7:04:8c:8d:90:d8:b1:a3:33:e9:b6:
41:14:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:14 2026 by rpki-client