Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jKSvwfXwdemyVhzsfUQzRTdpiWg.roa
File: jKSvwfXwdemyVhzsfUQzRTdpiWg.roa (raw, json)
Hash identifier: MeMfaiv312leoXScGrCggbszpYjY1C2HF2e2gH1Y12Q=
Subject key identifier: 8C:A4:AF:C1:F5:F0:75:E9:B2:56:1C:EC:7D:44:33:45:37:69:89:68
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA971CB6BA78106977050B527923EC957
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jKSvwfXwdemyVhzsfUQzRTdpiWg.roa
Signing time: Tue 28 Jul 2026 15:57:14 +0000
ROA not before: Tue 28 Jul 2026 15:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 191.222.40.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
201.24.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:71:cb:6b:a7:81:06:97:70:50:b5:27:92:3e:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 28 15:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ca4afc1f5f075e9b2561cec7d44334537698968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:d4:b6:13:ed:e2:e1:52:a5:df:9e:b2:a3:
20:9e:d7:5c:3e:49:27:98:40:f0:83:5c:99:13:64:
ad:17:09:9d:d9:a8:70:d6:8b:3b:4d:1d:f2:ce:48:
ce:a9:3f:7d:81:de:1a:06:a1:1c:f1:8c:58:8e:f1:
90:ab:dd:61:df:ce:0a:8b:c2:c3:10:d3:59:79:42:
87:a9:26:43:0d:b6:dc:b5:02:3e:e9:33:8e:75:46:
82:e8:42:a0:16:30:07:e7:33:e1:a3:7b:d8:c2:a5:
d1:22:e3:16:dd:f2:37:ac:f7:78:c9:36:5e:59:8d:
d9:ce:b3:47:d0:98:a8:da:32:52:28:bb:4c:c2:33:
30:e1:02:14:fc:da:51:ce:d4:a9:5b:08:20:fb:3a:
af:58:5b:11:c1:a4:f9:86:ef:07:a5:b3:fb:58:b5:
e7:dc:c8:64:48:69:a2:9a:52:79:71:43:09:9b:13:
71:5e:57:f1:d4:e7:46:f2:db:bb:61:03:6a:46:73:
ec:5c:44:78:88:f3:3d:f8:93:b2:b9:46:60:49:8c:
88:1e:d7:d1:d5:8d:98:0d:39:64:46:e6:63:8f:7d:
51:2f:2c:ad:7c:4d:c6:9a:6d:e7:61:79:82:1a:a5:
62:63:6c:85:d1:68:59:e5:4c:03:30:c6:2c:7c:ff:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A4:AF:C1:F5:F0:75:E9:B2:56:1C:EC:7D:44:33:45:37:69:89:68
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jKSvwfXwdemyVhzsfUQzRTdpiWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.40.0/24
200.165.19.0/24
201.24.206.0/24
Signature Algorithm: sha256WithRSAEncryption
89:14:18:a7:aa:e5:1d:4c:2a:f6:cf:3f:fc:ca:55:c5:18:38:
52:1f:74:db:71:c5:fa:ad:c3:46:dc:98:8f:bb:98:c8:da:d8:
d4:a0:88:0b:b3:8f:19:7c:a9:91:7e:c7:5a:59:d6:b2:0a:90:
8a:fc:e3:74:6e:12:a4:ff:c7:e0:21:5f:bc:0c:db:0c:db:6f:
02:36:9e:2d:fe:8d:52:4f:b7:98:ab:75:8d:7f:4e:8f:7e:b7:
9e:06:34:f8:bc:1c:86:b2:16:65:10:2f:54:fe:6b:38:3f:2d:
f1:f7:df:74:1a:d1:cd:89:cf:16:5e:c2:c8:85:31:61:2b:65:
7c:46:f8:ea:9d:9a:c6:41:2e:66:c5:7e:84:30:5e:5b:5b:b9:
37:b0:de:18:70:86:c0:29:8c:8e:87:bd:b4:1a:42:f2:fd:b7:
4a:0e:f1:ee:2e:27:83:40:c0:d0:f7:7e:5f:67:ef:ed:e3:2e:
a4:c3:0b:a6:eb:4d:e0:3a:14:db:4b:4c:ec:cd:85:7e:2f:84:
d4:5a:d3:66:e4:ea:a2:68:2a:3b:02:03:51:96:73:bf:23:43:
da:f7:60:08:3e:47:3c:c9:96:a5:37:c1:03:27:8a:b7:df:e1:
e8:58:a6:77:2c:2c:a3:97:b6:84:d0:ba:ac:81:16:07:ac:04:
50:2f:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:05 2026 by rpki-client