Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xM_MZlaVFi-4d3epQSAg7Ifq13k.roa
File: xM_MZlaVFi-4d3epQSAg7Ifq13k.roa (raw, json)
Hash identifier: JBTfD91CzG95jJ5d6AV/u2D7NnKmPR+0bJ153s5QBs0=
Subject key identifier: C4:CF:CC:66:56:95:16:2F:B8:77:77:A9:41:20:20:EC:87:EA:D7:79
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EAD1DA4358F4F380BDD7D8D0F22024D3D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xM_MZlaVFi-4d3epQSAg7Ifq13k.roa
Signing time: Tue 09 Jun 2026 16:01:01 +0000
ROA not before: Tue 09 Jun 2026 16:01:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198810
IP address blocks: 191.222.243.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:1d:a4:35:8f:4f:38:0b:dd:7d:8d:0f:22:02:4d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 9 16:01:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4cfcc665695162fb87777a9412020ec87ead779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:6e:99:cb:8e:b5:f2:ce:4e:c9:80:c2:7c:
cb:b5:97:f1:5e:eb:a3:e6:51:16:b7:aa:cb:17:1a:
06:7a:d2:bc:fa:8e:d0:02:b6:c2:03:c0:2d:96:02:
08:1d:3f:c2:23:da:fb:61:3d:88:f4:04:e4:b3:d5:
f3:ca:b1:a3:d6:14:eb:d6:cc:c2:d0:c5:c1:b9:6b:
06:14:2f:19:72:f0:3c:3b:dd:b9:d5:f1:90:fd:c4:
ec:46:19:8e:39:de:b5:7d:1d:6f:4b:08:04:35:48:
18:85:2a:63:52:f9:b4:2a:24:32:0d:26:5f:13:f1:
0d:62:d7:68:56:61:88:e0:c6:08:12:99:9f:3b:97:
98:37:cf:6c:c6:04:7e:55:d8:3a:0b:c5:38:74:ba:
05:9e:f1:82:eb:dd:e6:37:9c:51:f8:33:d6:93:1c:
93:9a:7b:50:bb:a2:e9:0f:60:da:c2:9a:30:26:d4:
4c:dd:f9:a4:bd:1f:fc:39:a4:f4:16:9f:7c:ba:f9:
93:e8:ea:e5:2f:11:52:ac:f4:cc:fd:e3:69:19:4c:
db:d6:9c:ad:cb:02:40:be:0a:44:2e:e2:42:5d:fd:
24:f3:0d:cd:c9:c1:a0:1a:8e:62:76:29:72:74:be:
9b:ea:b4:ae:1f:e1:e0:3f:e4:de:f6:48:78:78:b3:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:CC:66:56:95:16:2F:B8:77:77:A9:41:20:20:EC:87:EA:D7:79
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xM_MZlaVFi-4d3epQSAg7Ifq13k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.243.0/24
201.24.192.0/24
201.24.199.0/24
Signature Algorithm: sha256WithRSAEncryption
14:89:bd:59:8d:6b:b9:11:88:80:d4:00:8f:28:79:94:c8:6d:
f5:32:13:1f:77:38:b8:7c:5a:05:c9:01:99:34:d5:15:68:96:
9e:95:ab:ed:e5:21:d2:c2:b1:48:b3:c3:57:04:5f:05:87:cb:
20:e0:da:11:f7:0a:b2:4d:b7:42:29:83:04:82:38:66:d6:94:
6d:fb:51:ff:f6:51:96:16:5f:ba:64:e6:aa:2f:fd:b6:e5:66:
6f:c8:9c:1f:7f:a8:59:91:c3:70:f6:8b:28:bf:0a:f0:db:5d:
98:38:a1:eb:7b:e4:21:29:3f:31:82:a4:8f:f3:2b:dc:e1:0b:
01:2e:ad:67:66:63:35:77:54:6c:ac:b5:b1:54:37:9f:db:a9:
0a:0a:06:03:69:5b:c3:4c:44:db:f7:39:02:04:b5:42:4f:94:
a4:d9:cc:7b:df:28:6c:25:b6:5f:3e:1c:87:87:0c:93:a4:80:
27:4e:10:08:47:21:4e:7d:aa:90:4b:87:3a:b4:41:28:36:19:
85:42:1d:b0:7c:21:18:35:12:2d:34:7e:82:b2:cb:c8:43:3c:
99:78:b4:07:f6:57:31:c2:61:24:e5:34:96:3d:4b:36:1e:44:
d9:a6:1e:2a:02:50:ee:e6:87:01:be:1e:7b:b2:a7:c2:2a:4b:
c6:73:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:29 2026 by rpki-client