Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mpZlhDrpx4-kHgQdUz1UGrJJEh4.roa
File: mpZlhDrpx4-kHgQdUz1UGrJJEh4.roa (raw, json)
Hash identifier: u/DDbJMrIXrWUzNerpy2RAJPV7nUDGwqWx7D3HGQ4BY=
Subject key identifier: 9A:96:65:84:3A:E9:C7:8F:A4:1E:04:1D:53:3D:54:1A:B2:49:12:1E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0B58DDA19FED1C0F27E43A94FE0E98D08
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mpZlhDrpx4-kHgQdUz1UGrJJEh4.roa
Signing time: Fri 18 Sep 2026 17:26:07 +0000
ROA not before: Fri 18 Sep 2026 17:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 89.106.26.0/24 maxlen: 24
103.102.132.0/24 maxlen: 24
189.12.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:8d:da:19:fe:d1:c0:f2:7e:43:a9:4f:e0:e9:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 18 17:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a9665843ae9c78fa41e041d533d541ab249121e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:2d:e5:4a:0c:91:75:17:03:48:a4:4a:43:
88:1b:d6:2e:37:ef:47:0f:ef:9c:cf:14:6f:a1:e7:
f9:73:2c:42:4e:46:79:de:88:b7:46:63:36:56:c0:
7b:c2:ca:df:4e:9e:9d:f9:df:89:67:72:53:71:4e:
ba:33:2b:2c:f4:a8:ef:51:1b:50:53:ab:b5:28:f2:
ba:f4:8b:1c:86:d3:d8:cd:80:c3:16:d5:03:22:00:
71:ca:00:61:28:9e:d2:3f:16:92:b4:fe:26:59:96:
ac:b1:b9:6a:9e:ba:20:5f:2e:e8:c0:5e:c5:63:8d:
bc:13:f7:05:29:de:54:d5:9d:15:f9:c4:84:20:91:
a5:d3:78:ea:b5:00:e4:07:d1:23:c1:b5:8f:dc:45:
82:2d:41:bd:16:ef:92:1d:4d:38:1c:5e:98:79:99:
32:d7:47:88:fa:a3:db:75:07:51:c6:81:e4:62:4f:
ee:52:ac:12:33:34:4d:ca:f4:56:82:44:5d:8b:2b:
f0:b2:bb:e4:d4:9c:33:14:a6:4f:70:15:cc:a3:0d:
6a:0c:16:ad:4b:2d:92:b8:88:9c:80:9d:a2:22:2a:
eb:54:4a:6e:79:4b:52:4f:c9:60:d1:d3:c0:c3:c7:
56:37:a1:86:53:e6:e4:a6:23:76:5a:5b:c5:ae:41:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:65:84:3A:E9:C7:8F:A4:1E:04:1D:53:3D:54:1A:B2:49:12:1E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mpZlhDrpx4-kHgQdUz1UGrJJEh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.26.0/24
103.102.132.0/24
189.12.59.0/24
Signature Algorithm: sha256WithRSAEncryption
02:54:b0:95:d8:01:c6:80:9c:54:4a:d7:31:5a:d0:98:cb:fd:
ea:c9:22:4c:a3:b2:10:2e:31:24:f9:11:ea:00:7b:f5:28:bd:
26:c6:90:7f:c8:86:cb:f2:19:6f:4e:73:d7:e3:e6:48:6e:6a:
46:d1:e9:48:69:c9:57:ab:0c:2d:41:f3:7b:2c:0c:39:68:77:
26:e7:7e:fb:21:d5:8e:47:95:9e:31:37:40:f4:80:4c:6b:dd:
6f:0d:49:3c:31:a0:5a:e6:ff:58:fd:4e:32:ce:eb:36:02:bb:
a4:5b:cc:10:cc:9d:bc:06:50:95:d6:a3:cb:6f:e2:3e:2d:7d:
1f:f4:7a:0f:97:45:63:c9:d8:94:58:9c:be:e6:9a:ac:2a:a4:
2d:66:4d:85:1b:f7:c3:b9:33:b3:ee:b6:51:13:e1:49:cc:15:
71:9e:0f:d2:14:86:55:48:a8:e0:26:39:4b:27:25:e2:11:7c:
00:4f:24:20:51:4f:aa:c7:ee:0f:15:56:b0:b6:76:e0:a9:1c:
e8:f5:ef:fe:c1:f8:26:fb:01:d7:e0:d7:dd:c5:02:6d:7e:d7:
bf:94:d9:7a:a8:62:e9:86:50:77:47:ae:11:c5:b6:29:a8:e2:
64:eb:a6:29:8e:8d:6b:97:23:b8:d1:36:21:67:d1:7c:c0:93:
ed:99:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:17 2026 by rpki-client