Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/srTwMlXTdaiMnB9_9HttlZGa2WM.roa
File: srTwMlXTdaiMnB9_9HttlZGa2WM.roa (raw, json)
Hash identifier: HF2RNSnO4lYDOxscDdXorMpzyM22ZX079uG7IgnGqwM=
Subject key identifier: B2:B4:F0:32:55:D3:75:A8:8C:9C:1F:7F:F4:7B:6D:95:91:9A:D9:63
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EB6B8E7A47A63C76B57D2285D4541B0DD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/srTwMlXTdaiMnB9_9HttlZGa2WM.roa
Signing time: Thu 11 Jun 2026 12:47:11 +0000
ROA not before: Thu 11 Jun 2026 12:47:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 189.12.52.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:b8:e7:a4:7a:63:c7:6b:57:d2:28:5d:45:41:b0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 11 12:47:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2b4f03255d375a88c9c1f7ff47b6d95919ad963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:52:2c:bd:97:c0:6a:e2:e1:21:26:6d:03:
62:ca:c6:f4:b7:77:9d:78:41:b0:be:e2:e5:39:6a:
e4:ae:d1:6c:ca:64:68:c1:8c:7d:0c:9e:57:e6:47:
93:22:9e:37:d0:c2:a7:ba:90:52:37:e6:d5:23:99:
f5:b2:d1:33:7e:6c:1b:70:f8:fb:ed:b5:30:81:6b:
86:67:77:ad:b9:cf:e1:bf:d8:b1:40:e8:d5:80:92:
6c:ec:16:63:54:92:8e:52:b5:7d:bb:cb:83:e1:5e:
81:aa:4f:43:f0:6b:60:d5:af:42:96:9b:bd:e0:07:
f0:eb:1a:33:84:fc:f1:13:de:35:f2:03:00:6e:9b:
af:cc:b6:ca:97:0b:d2:57:37:a1:71:7d:d1:10:3e:
96:6b:11:09:1d:75:46:b9:4b:87:96:1f:87:e2:fa:
18:8e:10:f3:9e:d7:9f:52:00:19:e0:a9:2a:6b:b7:
16:78:b9:a4:f2:bd:7f:3d:51:0e:19:e9:ca:db:a6:
75:df:0f:a1:a2:25:5b:5c:a9:24:77:a3:86:23:ca:
62:88:96:52:ae:55:f5:0f:d0:49:83:98:d7:40:6a:
7a:df:b7:ea:57:ff:5f:34:17:fa:d1:42:4f:43:c2:
95:68:6f:a2:7f:c0:ef:80:53:7d:25:13:f8:2c:92:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:F0:32:55:D3:75:A8:8C:9C:1F:7F:F4:7B:6D:95:91:9A:D9:63
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/srTwMlXTdaiMnB9_9HttlZGa2WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.52.0/24
189.31.209.0/24
Signature Algorithm: sha256WithRSAEncryption
de:3b:34:77:b0:c7:d5:36:65:ec:b2:4d:35:58:b1:54:c1:d8:
9a:39:e9:99:8f:0c:92:d6:57:80:38:49:be:d4:45:d2:96:cc:
96:f7:88:50:a6:d5:9d:29:6b:1a:0a:13:a3:17:4e:3d:87:26:
76:0b:2d:e5:af:19:a4:9f:03:df:24:d9:3e:6b:d0:48:5d:c3:
e2:dc:7a:d3:6c:e9:55:85:09:c0:66:ff:7b:9b:1d:b1:f8:8c:
10:2f:64:41:e3:21:1b:26:5f:15:80:0d:65:87:ec:24:8f:10:
d7:27:a7:a9:70:69:33:f3:58:52:f6:05:a0:16:6c:bc:b8:07:
7e:e8:46:2a:c1:80:d2:dc:72:ff:f3:48:48:50:25:7c:ff:a4:
6d:4c:fd:b6:9c:f2:39:e7:4c:b9:d8:c0:0e:6b:d2:d5:ab:4f:
0b:a4:01:1a:4c:09:75:fb:95:ea:3e:b2:0b:44:5a:b4:ab:ff:
a9:71:d3:7f:07:18:11:d5:a8:ce:e2:b3:87:23:a2:af:25:66:
5f:8d:16:23:26:fd:60:20:be:03:3e:40:d0:54:83:00:65:ca:
4d:25:2d:61:50:2c:8c:f3:10:ed:c3:cb:02:c9:de:ed:6f:6a:
83:7e:1e:df:20:e1:e1:1a:17:14:fa:f0:e8:cc:e1:72:a0:1f:
2a:c5:60:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ62uOekemPHa1fSKF1FQbDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNjExMTI0NzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmI0ZjAzMjU1ZDM3NWE4OGM5YzFmN2ZmNDdiNmQ5NTkxOWFkOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhhSLL2XwGri4SEmbQNiysb0t3ed
eEGwvuLlOWrkrtFsymRowYx9DJ5X5keTIp430MKnupBSN+bVI5n1stEzfmwbcPj7
7bUwgWuGZ3etuc/hv9ixQOjVgJJs7BZjVJKOUrV9u8uD4V6Bqk9D8Gtg1a9Clpu9
4Afw6xozhPzxE9418gMAbpuvzLbKlwvSVzehcX3RED6WaxEJHXVGuUuHlh+H4voY
jhDzntefUgAZ4Kkqa7cWeLmk8r1/PVEOGenK26Z13w+hoiVbXKkkd6OGI8piiJZS
rlX1D9BJg5jXQGp637fqV/9fNBf60UJPQ8KVaG+if8DvgFN9JRP4LJKM/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLK08DJV03WojJwff/R7bZWRmtljMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvc3JUd01sWFRkYWlNbkI5XzlIdHRsWkdhMldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvQw0AwQA
vR/RMA0GCSqGSIb3DQEBCwUAA4IBAQDeOzR3sMfVNmXssk01WLFUwdiaOemZjwyS
1leAOEm+1EXSlsyW94hQptWdKWsaChOjF049hyZ2Cy3lrxmknwPfJNk+a9BIXcPi
3HrTbOlVhQnAZv97mx2x+IwQL2RB4yEbJl8VgA1lh+wkjxDXJ6epcGkz81hS9gWg
Fmy8uAd+6EYqwYDS3HL/80hIUCV8/6RtTP22nPI550y52MAOa9LVq08LpAEaTAl1
+5XqPrILRFq0q/+pcdN/BxgR1ajO4rOHI6KvJWZfjRYjJv1gIL4DPkDQVIMAZcpN
JS1hUCyM8xDtw8sCyd7tb2qDfh7fIOHhGhcU+vDozOFyoB8qxWCd
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:10 2026 by rpki-client