Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pKby68deOB1yEGgYO-4YzREWIKs.roa
File: pKby68deOB1yEGgYO-4YzREWIKs.roa (raw, json)
Hash identifier: Dqq1rhtUMM+xU4bYCFYl69kFLFcEoYP6FXh3yOGaPk0=
Subject key identifier: A4:A6:F2:EB:C7:5E:38:1D:72:10:68:18:3B:EE:18:CD:11:16:20:AB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F952E69A20D66655E818B82F1FF648B25
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pKby68deOB1yEGgYO-4YzREWIKs.roa
Signing time: Fri 24 Jul 2026 17:31:14 +0000
ROA not before: Fri 24 Jul 2026 17:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
74.112.156.0/22 maxlen: 24
89.106.27.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.47.56.0/24 maxlen: 24
103.71.61.0/24 maxlen: 24
103.84.213.0/24 maxlen: 24
124.158.100.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:2e:69:a2:0d:66:65:5e:81:8b:82:f1:ff:64:8b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 24 17:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4a6f2ebc75e381d721068183bee18cd111620ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:57:b0:15:40:bb:34:08:87:69:46:73:08:
02:b9:0f:28:f4:92:9e:b4:b3:40:86:28:9a:59:3e:
90:ac:a7:ac:28:60:49:d1:8f:2b:6d:ed:6c:26:a0:
63:e6:2e:1b:1a:fe:4c:98:07:46:d5:0e:c0:17:cc:
cd:98:57:60:7e:16:e7:e5:e9:16:d5:b8:9d:ac:84:
ef:f3:09:c4:f7:81:f6:d2:81:34:b3:58:56:34:3f:
b1:7b:d1:8f:6c:6f:c1:97:31:ae:70:f6:c2:11:63:
9b:7d:86:57:dd:6d:95:98:20:6f:52:89:e1:74:02:
a7:cb:7b:da:91:17:e7:8a:b0:59:66:9b:42:d7:30:
02:38:5e:96:53:b4:11:e5:7d:dd:8b:93:22:85:52:
cd:0f:37:90:09:b1:8c:8c:2a:03:0e:2c:be:b6:cf:
a9:fe:27:8b:26:0f:35:32:88:89:3f:d3:85:77:f1:
73:ff:d3:c3:3a:b9:f5:22:e0:e6:11:ad:50:16:5d:
39:f9:b8:d9:79:83:9c:f6:e4:c4:01:1d:fa:b1:df:
9c:08:17:5a:9e:88:69:b6:42:be:b3:ef:8f:0d:90:
d4:73:7f:ac:01:66:56:de:21:c4:28:32:db:9e:b5:
de:e7:86:b3:f2:a1:d4:e9:b4:7d:81:30:6f:4f:f1:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:F2:EB:C7:5E:38:1D:72:10:68:18:3B:EE:18:CD:11:16:20:AB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pKby68deOB1yEGgYO-4YzREWIKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
74.112.156.0/22
89.106.27.0/24
103.41.44.0/23
103.47.56.0/24
103.71.61.0/24
103.84.213.0/24
124.158.100.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:17:c6:79:44:b1:9b:6f:0c:26:d6:b3:1a:56:f6:bc:da:fb:
2a:f4:4a:87:15:27:95:ab:f3:b0:85:eb:41:cc:a3:06:ec:65:
3d:bf:b5:c1:ff:ad:bd:4d:0c:e4:d5:0b:a7:36:db:34:d7:80:
b2:67:4e:54:ca:0e:6e:71:36:b0:ce:6e:5b:52:23:f9:6d:41:
16:d0:6b:f9:3b:b5:dd:11:8c:5e:0f:17:df:b0:95:80:d6:6d:
f9:81:55:e1:70:5a:e5:48:82:03:de:b9:c1:18:07:45:c0:a9:
fe:7a:06:c9:ac:35:ee:95:24:c5:af:5b:ef:67:38:8e:be:72:
1c:cf:64:99:7a:88:08:64:63:b9:b7:49:a1:4e:c4:d5:16:0c:
c9:58:4a:aa:fd:29:91:c6:08:4a:cd:51:98:cd:7b:9e:46:b0:
8f:8b:8b:88:ba:8b:f6:c1:3e:90:81:e1:77:b5:32:eb:63:8d:
1d:3a:94:1a:e5:7c:e7:89:62:1c:99:dd:23:29:26:f6:cd:d4:
76:e9:de:4e:36:3e:cd:77:29:71:68:23:33:07:6b:3d:71:47:
5e:65:b1:4a:e5:00:9f:f0:8b:84:61:f6:ec:68:a4:23:a1:0c:
59:be:67:bd:6f:55:e6:d2:fc:24:98:15:77:4b:86:76:c4:07:
2b:2a:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:24 2026 by rpki-client