Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/m8de1ozYSqT_jKVyGr90PqkqarI.roa
File: m8de1ozYSqT_jKVyGr90PqkqarI.roa (raw, json)
Hash identifier: GBFaDTvHYQEn8FvAjLS83Jxd+niHYSTRK/rnCJyquzc=
Subject key identifier: 9B:C7:5E:D6:8C:D8:4A:A4:FF:8C:A5:72:1A:BF:74:3E:A9:2A:6A:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EB2A7098019D419E696A2ABDA909C531F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/m8de1ozYSqT_jKVyGr90PqkqarI.roa
Signing time: Wed 10 Jun 2026 17:49:11 +0000
ROA not before: Wed 10 Jun 2026 17:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 74.112.152.0/22 maxlen: 24
94.229.212.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:a7:09:80:19:d4:19:e6:96:a2:ab:da:90:9c:53:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 10 17:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bc75ed68cd84aa4ff8ca5721abf743ea92a6ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:b6:9a:31:da:8f:c1:50:e6:cf:88:6c:9f:
40:ad:76:f1:07:d9:0b:c3:12:82:d4:de:11:2c:fb:
fd:5c:ab:ea:db:ae:90:f1:62:a3:07:68:21:f4:bb:
5e:77:f5:41:58:76:76:8a:1d:68:a9:d5:5b:99:ad:
38:17:8b:94:50:2b:8f:93:83:99:98:ea:df:b6:75:
df:bf:f7:c5:45:2e:b8:44:16:a5:07:9d:41:3e:dc:
a6:24:c2:28:94:f0:e3:fe:07:28:22:7e:7c:36:a7:
af:30:b1:07:ea:a9:41:67:4f:0c:fd:b7:2e:f6:6f:
49:b4:4a:bd:92:7f:4a:7d:02:56:fc:64:ec:68:40:
e2:10:99:f8:f0:ef:94:e5:38:bf:5f:29:50:86:15:
e2:e0:cb:e3:a7:75:cd:37:4b:16:c5:f0:75:6f:be:
1f:b7:8f:92:1b:1c:86:9a:d9:29:fc:c3:ae:70:90:
83:39:ca:01:3b:6e:aa:c9:0a:75:44:71:f4:0d:e3:
0a:73:82:5d:08:ae:c3:b2:2c:d1:22:33:54:a5:52:
fc:d1:56:0f:4b:3d:0c:8b:85:f0:13:0f:b7:4f:39:
1e:39:a4:9d:fe:b6:13:6c:a4:f2:77:a7:02:f5:48:
27:ec:b7:3a:3a:04:b6:91:7b:c9:ed:b0:8d:28:9d:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C7:5E:D6:8C:D8:4A:A4:FF:8C:A5:72:1A:BF:74:3E:A9:2A:6A:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/m8de1ozYSqT_jKVyGr90PqkqarI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/22
94.229.212.0/24
201.14.221.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
de:b8:28:5f:2f:10:ac:5b:d1:7a:5e:27:47:dc:f3:71:7c:4c:
d6:70:46:23:a2:ca:f9:2d:f2:a6:02:80:b1:9d:89:be:98:6f:
74:7d:ed:c5:78:26:3a:6a:0f:fd:24:24:43:5d:2a:de:a1:ef:
28:ec:3e:a7:77:87:e0:4a:8b:0e:26:f8:fd:9e:6e:9a:8e:3a:
6d:17:c2:60:21:0a:33:51:71:41:5c:0c:09:1a:63:7e:3f:d4:
d2:20:9e:0d:1e:01:9d:a0:30:88:2e:bb:c8:f9:7d:61:32:13:
a9:b8:3e:5a:85:f0:24:3b:ae:87:1d:b3:48:52:84:b0:b0:d4:
c0:30:da:b8:5f:72:4c:aa:26:80:ab:94:4a:38:2b:79:82:ad:
2c:9a:f1:4e:74:11:46:18:78:dd:6a:43:ab:28:02:5b:5c:d7:
43:40:79:d8:77:1d:d9:9c:bb:94:d2:7a:3d:df:f2:44:e0:1b:
18:51:b2:88:72:c2:b0:a1:58:26:a7:dd:da:74:52:57:d9:4d:
ee:2b:6f:19:9a:84:27:38:8d:27:c5:ec:0d:21:e9:e8:a8:ef:
7a:ff:12:98:15:27:c0:5d:ef:55:b2:32:cb:27:4f:93:88:e0:
c7:d2:92:30:42:34:c4:c8:04:0a:22:f7:66:9d:76:c6:d1:29:
51:76:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:30 2026 by rpki-client