Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k0NjCga0Y2LQLi-u8SGP5m3OImQ.roa
File: k0NjCga0Y2LQLi-u8SGP5m3OImQ.roa (raw, json)
Hash identifier: Nt+DMZdG318s4LXynPG96JO9ztesveGZtmJ+DTHjlz4=
Subject key identifier: 93:43:63:0A:06:B4:63:62:D0:2E:2F:AE:F1:21:8F:E6:6D:CE:22:64
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0BB3378BB1A179839A557CE1C8B4129D8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k0NjCga0Y2LQLi-u8SGP5m3OImQ.roa
Signing time: Sat 19 Sep 2026 19:45:07 +0000
ROA not before: Sat 19 Sep 2026 19:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146883
IP address blocks: 189.31.213.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:33:78:bb:1a:17:98:39:a5:57:ce:1c:8b:41:29:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 19:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9343630a06b46362d02e2faef1218fe66dce2264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:9a:0d:58:00:0f:f3:96:c5:13:16:29:01:
b1:9c:ae:12:89:43:01:f0:b9:83:f1:13:3a:2b:3a:
f6:b8:b1:07:65:f7:cf:89:33:65:58:7d:e1:ad:0a:
d5:01:d9:e4:92:7a:09:da:dd:d0:3e:cc:f2:a8:8f:
37:26:24:35:52:9f:29:30:b8:78:d7:fd:8b:9f:ed:
3b:ea:ce:44:c1:b6:6d:61:84:c6:bf:f0:4a:b6:1d:
b8:54:d5:96:8f:e6:36:9d:b3:a4:b5:ad:ca:5b:58:
2f:01:78:4e:37:d5:1c:14:bf:09:98:a6:63:b6:ee:
91:60:b3:fc:0b:08:1a:18:0c:6d:ac:5a:fd:90:78:
02:ec:bc:e1:72:f9:d8:3d:9b:7e:37:e9:13:88:b4:
ff:f6:44:98:bd:92:c9:0d:0b:cd:75:77:8d:2b:0d:
43:7b:e1:06:21:43:29:28:26:26:97:78:af:67:65:
d6:14:00:cd:c2:7f:dd:ba:d1:d3:df:b7:43:4e:67:
dc:5f:0a:c5:b6:28:49:8e:23:5a:d0:7e:bb:06:11:
38:38:1a:81:68:16:cf:a3:9d:03:69:a8:c5:9d:8d:
a7:cd:91:6e:36:6b:c7:47:d2:cc:13:8d:57:36:77:
37:b8:d8:db:f0:9a:47:21:f2:2f:b4:6d:26:cf:25:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:43:63:0A:06:B4:63:62:D0:2E:2F:AE:F1:21:8F:E6:6D:CE:22:64
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k0NjCga0Y2LQLi-u8SGP5m3OImQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.31.213.0/24
201.11.225.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fe:ec:72:c5:1a:cf:34:16:8d:78:2e:eb:b6:9e:6e:63:33:
b5:57:a5:1d:a8:0c:70:f9:a0:2b:32:02:4e:74:e2:e6:db:1f:
92:e1:17:3f:68:2c:e6:6c:e5:59:08:3a:7d:c0:a8:05:cc:ad:
cc:14:af:b7:b7:f2:51:6c:c1:35:13:45:5c:9e:49:c7:81:a0:
da:7f:65:97:8f:94:a1:09:c5:4d:38:6c:7d:74:6e:86:57:ba:
83:71:ce:62:d7:d1:8a:29:4f:bb:86:7a:19:c8:40:a1:37:dc:
17:6c:76:8a:34:3a:8c:68:41:29:e3:2f:a6:a6:5c:52:3f:fa:
8e:b6:f4:65:d9:5c:13:19:91:47:f4:35:95:bd:a0:c1:eb:85:
bd:94:b1:62:89:54:e1:95:d8:a4:0f:ec:e8:d9:e8:07:fb:64:
88:24:c7:8f:ef:0b:d0:0c:48:63:53:e8:1f:be:9a:c5:59:f5:
da:87:9f:eb:c0:dc:68:68:71:ae:1e:83:d6:79:f4:71:2b:e5:
b3:16:b0:89:34:3d:8f:ad:67:6f:8f:9a:b4:7c:da:92:0b:67:
31:75:1d:26:80:52:3e:3e:d1:a9:7e:fe:1a:9a:29:21:77:b9:
a8:f0:84:a0:ce:84:40:15:72:b5:0e:af:99:e4:25:bb:20:fd:
6f:81:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:08 2026 by rpki-client