Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eNOBmxw9jDuFXbyL1t-63gnesyM.roa
File: eNOBmxw9jDuFXbyL1t-63gnesyM.roa (raw, json)
Hash identifier: QwvkYUsZK8eeK1UyWyDoKfIo4c9uEo+BL2ZZ76Bsnis=
Subject key identifier: 78:D3:81:9B:1C:3D:8C:3B:85:5D:BC:8B:D6:DF:BA:DE:09:DE:B3:23
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0B58EC3F9366BDFC2F9CBF08D15C52128
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eNOBmxw9jDuFXbyL1t-63gnesyM.roa
Signing time: Fri 18 Sep 2026 17:27:07 +0000
ROA not before: Fri 18 Sep 2026 17:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 89.106.26.0/24 maxlen: 24
103.102.132.0/24 maxlen: 24
189.12.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:8e:c3:f9:36:6b:df:c2:f9:cb:f0:8d:15:c5:21:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 18 17:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78d3819b1c3d8c3b855dbc8bd6dfbade09deb323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:3c:8a:4c:ac:a9:39:e8:f8:9b:53:4a:76:
94:e5:7b:d5:fd:de:33:78:86:df:4d:98:45:54:d4:
38:f0:af:8b:5b:de:b2:4a:ef:1e:0a:2b:58:52:29:
27:bd:8b:b1:70:f7:17:c7:e4:2c:c7:d9:29:09:8e:
ad:15:f9:e4:3c:b1:4d:f8:69:c0:b4:95:f5:f2:69:
c0:34:1e:34:a6:9f:5d:fb:d3:6e:3b:19:fe:68:34:
af:a9:b6:a9:36:f7:13:d2:40:da:be:92:ff:fa:64:
3d:97:9d:1d:4f:d3:97:2b:18:df:dd:9e:4f:43:74:
7a:11:90:71:17:3b:3c:2a:66:e0:12:f4:17:25:ff:
90:e1:ed:10:93:da:14:09:a1:df:c4:3d:63:74:eb:
c3:90:b2:fa:28:f6:f4:ea:83:b3:38:21:5a:90:8d:
b6:56:e4:e4:f7:44:5e:6d:9d:75:8c:85:80:5c:07:
3f:5c:9a:51:26:29:b3:34:c5:f0:f7:f7:3c:e6:b7:
9b:7c:d7:2b:87:40:3b:84:ed:8f:91:8b:5f:6c:a0:
ff:5b:a0:88:03:d7:14:79:d8:92:09:22:98:6e:d9:
a4:21:1d:90:73:94:5a:4c:98:64:7c:a7:1f:2c:63:
35:b9:73:ff:ac:bc:93:54:f6:e9:fe:5d:30:17:a6:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:81:9B:1C:3D:8C:3B:85:5D:BC:8B:D6:DF:BA:DE:09:DE:B3:23
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eNOBmxw9jDuFXbyL1t-63gnesyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.26.0/24
103.102.132.0/24
189.12.59.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f3:e1:d6:d2:ef:5a:9d:fb:2b:2b:59:35:9b:94:72:7a:ac:
c3:49:98:de:72:f6:b8:12:ab:78:c3:14:02:7d:88:fd:18:a0:
75:7b:f9:d1:1f:30:d8:e7:a1:f8:48:10:92:74:9d:6c:ab:0e:
b4:a9:5c:7e:2e:fe:b7:3f:af:09:13:d6:af:c2:4d:85:d9:19:
00:ac:d5:59:c4:e7:ff:88:74:cd:ed:09:39:e6:da:d4:5e:1d:
b1:bd:da:09:1a:a1:d6:90:73:60:1d:97:80:0d:d4:44:ae:57:
a8:e4:63:1b:1c:1b:b8:ca:62:83:1c:3c:98:1c:d9:61:e4:d7:
e0:92:47:b5:64:b1:65:5b:e3:85:f9:25:26:1d:94:e6:79:43:
27:eb:00:81:88:ba:9a:ad:f8:94:64:e2:13:ab:a1:a3:65:b5:
bd:53:3d:47:e2:41:b1:f3:20:4f:17:8c:11:c3:cd:90:10:83:
83:32:40:d3:9b:dc:57:67:88:c8:ac:f9:8e:91:48:c8:52:d9:
2e:f6:6c:73:69:89:8a:8d:be:e2:8d:10:bc:f6:4a:06:a9:e1:
31:31:59:37:50:25:cf:95:92:f8:48:2f:0c:2c:8a:cb:0c:5a:
49:6b:de:f2:58:80:31:80:a7:60:f8:01:46:95:66:bb:a9:11:
ca:ba:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:56 2026 by rpki-client