Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iWaRS0oNpiL5UcRif2lGM_avkRs.roa
File: iWaRS0oNpiL5UcRif2lGM_avkRs.roa (raw, json)
Hash identifier: 0dNJ1Ksz6MGtHw738krdk5wsD+QpSZnIlW0lcGlVPC8=
Subject key identifier: 89:66:91:4B:4A:0D:A6:22:F9:51:C4:62:7F:69:46:33:F6:AF:91:1B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019D8CC5B4EF5786612CE2EB8CA48A95C7A3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iWaRS0oNpiL5UcRif2lGM_avkRs.roa
Signing time: Tue 14 Apr 2026 16:14:20 +0000
ROA not before: Tue 14 Apr 2026 16:14:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 89.106.2.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:c5:b4:ef:57:86:61:2c:e2:eb:8c:a4:8a:95:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 14 16:14:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8966914b4a0da622f951c4627f694633f6af911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:68:6e:3e:a8:2c:6f:f5:4c:e6:91:03:3c:
60:c1:e7:ae:6f:5d:ad:a8:58:c2:44:ec:53:95:e8:
69:88:48:0e:67:ef:a4:a2:14:71:30:a7:2e:60:51:
81:fc:f1:0f:6a:83:0c:49:44:34:69:38:3b:a8:ad:
e4:d2:f8:c4:e7:47:dc:d8:ba:d2:cf:b3:ce:4f:f3:
0a:83:19:2b:7d:cc:07:85:06:07:c7:bd:d8:b3:78:
6d:46:a5:ad:ac:1b:e9:95:b5:1d:b4:e3:cd:35:76:
a6:6b:15:87:3e:fc:4e:7a:4f:84:59:bf:9d:7c:bd:
30:9d:84:17:24:93:a5:f6:95:32:32:71:4a:de:30:
bd:6f:a7:71:e8:5f:31:30:6d:31:fd:d4:1d:5a:7b:
fb:a6:99:2e:7c:90:2b:97:19:7c:06:a6:8e:03:20:
10:64:5a:45:c7:1e:3c:fe:cf:fc:ae:cb:24:74:04:
90:cb:1f:53:05:2f:95:8a:94:49:c0:9f:f2:1b:75:
32:7e:26:bd:cb:52:ec:7c:e6:d1:9e:2d:ac:5a:51:
34:69:ab:46:2d:ed:d0:93:7f:66:4c:f0:79:68:30:
66:6d:aa:52:dd:5e:cd:5a:7b:55:bd:39:b8:00:81:
6b:05:73:6a:d5:e8:2a:0a:f2:c0:f3:ef:9f:d3:5c:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:91:4B:4A:0D:A6:22:F9:51:C4:62:7F:69:46:33:F6:AF:91:1B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iWaRS0oNpiL5UcRif2lGM_avkRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.2.0/24
94.229.213.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:0c:c3:7f:07:92:78:26:10:ff:6c:52:aa:88:5b:d2:ef:f5:
08:8f:f4:c1:c5:59:1d:9d:e8:68:26:cf:43:4f:35:22:b3:f6:
84:e1:5b:68:a8:61:e1:d3:e3:51:2a:12:c4:d8:a8:82:67:9d:
c9:13:22:fe:16:0a:53:bc:f6:1f:8f:c7:5e:92:cc:66:d7:1f:
e7:d4:d1:b7:63:2d:33:48:42:f9:16:16:65:0c:5b:e4:8a:7f:
a0:d6:a9:62:48:d4:a5:69:23:57:3c:71:a2:14:e6:c8:00:6c:
0d:c0:a2:f3:68:86:66:c6:e7:1d:13:23:23:9c:7d:07:02:3b:
61:f7:5e:c5:bc:f4:26:ac:0f:d5:08:3c:8c:6f:9d:f6:52:1a:
7d:ee:29:8d:3a:13:cc:39:b1:39:57:0c:28:3a:9f:df:29:68:
03:46:c0:e7:40:56:e0:ae:ab:d9:e9:95:a7:3f:31:8a:5b:66:
6e:98:3f:ac:e2:81:21:f2:c2:cd:8b:5c:47:de:59:66:68:1c:
df:5b:34:f6:f1:8d:7a:01:4b:7c:43:21:79:c4:8a:3e:06:37:
9f:8c:d7:8e:f5:79:8d:3e:3f:20:98:0b:72:27:16:00:91:3a:
39:89:07:3f:5c:7f:6a:f6:8a:38:0c:05:ac:5f:ec:d1:80:2d:
97:a3:d5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:16 2026 by rpki-client