Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eICX47EjOJlOe8GnupiGeP6uGug.roa
File: eICX47EjOJlOe8GnupiGeP6uGug.roa (raw, json)
Hash identifier: gBX8XhFrwCrq9/Jj18ERHX+B5FiHTiK5D+YAdG+nIHs=
Subject key identifier: 78:80:97:E3:B1:23:38:99:4E:7B:C1:A7:BA:98:86:78:FE:AE:1A:E8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EAAD207C2FC4CD76A4CDB484239288E85
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eICX47EjOJlOe8GnupiGeP6uGug.roa
Signing time: Tue 09 Jun 2026 05:19:11 +0000
ROA not before: Tue 09 Jun 2026 05:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 191.222.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:d2:07:c2:fc:4c:d7:6a:4c:db:48:42:39:28:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 9 05:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=788097e3b12338994e7bc1a7ba988678feae1ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:e3:18:06:8f:a2:fb:bb:c8:4f:fd:15:ff:
e7:1d:b2:6f:92:73:bd:8e:c1:59:fa:20:7c:79:28:
4d:0b:36:f1:95:5e:55:bd:4f:00:82:cd:c9:cd:f5:
54:a5:24:fa:27:5a:93:4b:98:8d:5c:b6:09:c3:19:
88:10:3f:d0:a9:a8:8a:4b:cb:09:d1:d4:1f:59:5c:
4d:2d:b5:67:36:0d:47:91:d3:7e:71:1f:56:e4:1b:
96:5f:85:3e:96:e3:55:cf:a6:31:cd:cd:91:82:ec:
b4:59:5c:de:f5:e8:65:02:0b:dc:19:df:1f:76:b1:
93:f7:3c:18:6c:ab:8c:22:de:a5:33:6e:53:94:07:
60:2d:0e:41:6c:87:9e:71:29:d6:72:0a:ff:8f:3c:
07:98:e5:7f:4f:d0:6e:6f:0c:cb:88:0b:12:5a:d8:
8a:3f:5b:22:8b:75:6f:f8:cc:c4:c7:fb:74:58:fd:
ba:8c:36:30:87:22:1c:62:e9:50:d6:b7:f8:22:9b:
08:81:8d:9c:3c:7f:cb:91:84:f6:70:15:fa:50:00:
83:cc:8c:62:a1:fe:ac:f2:a3:75:6d:f3:6c:74:2d:
f7:cd:7f:08:e9:61:0c:3f:26:4e:7c:da:0d:ac:d8:
0a:30:fc:05:36:90:03:b8:67:bb:7e:48:15:f0:5f:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:97:E3:B1:23:38:99:4E:7B:C1:A7:BA:98:86:78:FE:AE:1A:E8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eICX47EjOJlOe8GnupiGeP6uGug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.240.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f5:25:e6:1a:fe:a0:78:88:9a:e2:28:cf:09:a4:d5:dd:b7:
c8:b7:54:d3:d7:79:44:d7:e9:4b:c0:8d:bd:fb:bc:87:e9:52:
1d:fe:fb:37:ab:70:fc:a8:a7:07:1e:75:6e:5a:aa:41:8b:c7:
15:00:f6:f6:40:ba:63:f4:b7:7c:3b:76:51:c1:0b:89:8b:cd:
05:0a:5f:61:c8:41:f2:2c:32:56:a1:4d:9a:2c:96:ac:ac:88:
10:c1:44:29:77:01:69:81:85:79:42:df:b8:95:e5:e7:cc:6e:
f7:01:b4:2a:b7:ec:2f:36:01:b2:27:78:9a:69:73:1b:e6:20:
50:8d:1f:38:10:49:06:7b:6a:a7:0b:89:63:9c:fa:13:bd:16:
81:ca:8c:5c:72:20:2d:ef:7b:5e:1c:ef:81:3a:8a:c9:de:3b:
66:22:54:8d:3b:87:40:7b:d3:da:2c:cf:11:af:65:e1:db:2d:
ac:23:4b:c1:47:12:13:8d:4c:4b:11:b8:a5:7f:71:50:c3:c5:
dd:21:0d:cf:07:46:33:12:d4:d8:b1:bf:6a:a3:4f:da:e4:0f:
7e:e5:4c:69:57:a5:a1:89:30:69:ac:7b:1a:df:a4:ef:a9:2a:
78:29:90:4f:77:9f:2c:39:77:04:2c:62:c7:5b:8f:0e:ca:bf:
2f:d4:c4:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6q0gfC/EzXakzbSEI5KI6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjA5MDUxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODgwOTdlM2IxMjMzODk5NGU3YmMxYTdiYTk4ODY3OGZlYWUxYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9fjGAaPovu7yE/9Ff/nHbJvknO9
jsFZ+iB8eShNCzbxlV5VvU8Ags3JzfVUpST6J1qTS5iNXLYJwxmIED/QqaiKS8sJ
0dQfWVxNLbVnNg1HkdN+cR9W5BuWX4U+luNVz6Yxzc2Rguy0WVze9ehlAgvcGd8f
drGT9zwYbKuMIt6lM25TlAdgLQ5BbIeecSnWcgr/jzwHmOV/T9BubwzLiAsSWtiK
P1sii3Vv+MzEx/t0WP26jDYwhyIcYulQ1rf4IpsIgY2cPH/LkYT2cBX6UACDzIxi
of6s8qN1bfNsdC33zX8I6WEMPyZOfNoNrNgKMPwFNpADuGe7fkgV8F90fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHiAl+OxIziZTnvBp7qYhnj+rhroMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvZUlDWDQ3RWpPSmxPZThHbnVwaUdlUDZ1R3VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv97wMA0G
CSqGSIb3DQEBCwUAA4IBAQC99SXmGv6geIia4ijPCaTV3bfIt1TT13lE1+lLwI29
+7yH6VId/vs3q3D8qKcHHnVuWqpBi8cVAPb2QLpj9Ld8O3ZRwQuJi80FCl9hyEHy
LDJWoU2aLJasrIgQwUQpdwFpgYV5Qt+4leXnzG73AbQqt+wvNgGyJ3iaaXMb5iBQ
jR84EEkGe2qnC4ljnPoTvRaByoxcciAt73teHO+BOorJ3jtmIlSNO4dAe9PaLM8R
r2Xh2y2sI0vBRxITjUxLEbilf3FQw8XdIQ3PB0YzEtTYsb9qo0/a5A9+5UxpV6Wh
iTBprHsa36TvqSp4KZBPd58sOXcELGLHW48Oyr8v1MR8
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:48 2026 by rpki-client