Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pBtedMKUlBOJ8HhQb6xfX9Tl6t8.roa
File: pBtedMKUlBOJ8HhQb6xfX9Tl6t8.roa (raw, json)
Hash identifier: k6PmC2A1+iK0KEHJEEPokfDEjUF30dZ21jFF2UBKb+0=
Subject key identifier: A4:1B:5E:74:C2:94:94:13:89:F0:78:50:6F:AC:5F:5F:D4:E5:EA:DF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA96FF6428D5AC5FAC9D994D35A04773D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pBtedMKUlBOJ8HhQb6xfX9Tl6t8.roa
Signing time: Tue 28 Jul 2026 15:55:14 +0000
ROA not before: Tue 28 Jul 2026 15:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31924
IP address blocks: 191.219.29.0/24 maxlen: 24
200.102.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:6f:f6:42:8d:5a:c5:fa:c9:d9:94:d3:5a:04:77:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 28 15:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a41b5e74c294941389f078506fac5f5fd4e5eadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:a9:dc:f4:19:f4:78:24:19:e4:8a:d5:2d:
19:97:b5:34:f6:93:c0:b4:18:be:6c:8e:e0:02:7d:
04:23:e7:78:f8:02:9d:66:bc:98:0f:fc:23:e2:58:
94:63:24:df:c6:94:60:d8:73:0e:a9:7d:2c:06:46:
d3:e7:68:ea:8b:2f:58:58:55:18:e1:29:40:80:76:
41:a2:88:88:20:bc:e4:98:31:c1:1e:8d:51:62:0f:
a3:9d:32:3e:0a:4f:29:27:1b:69:d1:27:6e:6b:db:
25:1d:60:52:7d:61:b9:87:8b:14:e7:21:db:ad:6f:
6d:18:40:6f:38:f8:de:51:bf:1a:0b:f6:5d:3a:cd:
1a:11:9c:2c:af:14:88:76:b9:d4:5f:75:83:87:e2:
1a:7c:3a:87:b3:55:2d:0b:2e:b0:99:d7:9c:39:c5:
64:c1:a8:ca:dd:75:61:b8:47:6d:ef:25:70:ed:87:
3c:70:cf:00:84:d4:66:bc:aa:09:6b:8d:0a:3c:e5:
b1:71:c2:3c:4f:56:6b:53:54:15:78:5a:3e:ab:dd:
f3:7c:20:37:2e:3d:83:62:a6:e3:29:93:49:a5:0c:
6e:5c:6e:a3:f1:c3:2e:dc:2d:06:ae:24:7a:b1:9a:
c7:3c:9a:a8:28:ab:94:90:36:0a:5d:c2:3d:6f:d8:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1B:5E:74:C2:94:94:13:89:F0:78:50:6F:AC:5F:5F:D4:E5:EA:DF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pBtedMKUlBOJ8HhQb6xfX9Tl6t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.29.0/24
200.102.186.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e8:25:94:a6:97:1d:a8:34:50:04:7d:2c:a7:a8:14:1b:0b:
75:18:48:1c:7b:17:62:9c:16:26:e8:59:24:46:db:76:ea:2c:
65:2e:42:bd:00:d3:d3:9b:ff:40:04:b6:28:39:c1:1e:98:61:
32:c1:6a:52:f3:44:e0:7e:36:c3:8d:34:45:97:83:0a:e8:ed:
79:b5:f7:6c:8a:af:65:c2:30:ea:cd:21:9b:31:28:bd:c8:6a:
f1:e1:09:43:bd:c6:81:57:42:22:22:f9:8d:38:c6:24:64:6f:
54:5c:5d:e8:c7:60:5e:a9:69:c2:bb:0e:6a:73:95:85:a1:49:
5d:f3:09:62:f6:35:18:56:6c:f5:78:60:e3:13:5e:01:00:07:
20:b5:20:2d:94:8d:a5:2d:09:17:f8:1a:86:6a:41:72:c9:51:
43:75:b4:c8:8a:52:8c:2a:77:48:48:db:d6:b6:f5:ab:87:1d:
90:ef:07:1d:44:c6:8e:55:ac:c0:3a:84:6b:69:ca:3c:da:60:
ad:68:25:28:04:f7:1e:37:02:36:2d:da:c7:bb:e7:23:74:f0:
a2:bb:c8:6a:b2:cd:59:10:dd:52:05:ab:81:aa:72:7f:93:21:
70:68:29:a1:3b:45:f4:8f:10:11:df:ae:66:15:74:fe:98:6c:
68:ba:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:18 2026 by rpki-client