Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yLQcLxYVS8cIJz4z4J8Z3fljxB8.roa
File: yLQcLxYVS8cIJz4z4J8Z3fljxB8.roa (raw, json)
Hash identifier: /kW1IzBiqqpl0o6bpoYHt0TMaMvAjoGk/dttoObKPM8=
Subject key identifier: C8:B4:1C:2F:16:15:4B:C7:08:27:3E:33:E0:9F:19:DD:F9:63:C4:1F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0BB31A518B6971DABAEFE3247CB9F88C9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yLQcLxYVS8cIJz4z4J8Z3fljxB8.roa
Signing time: Sat 19 Sep 2026 19:43:07 +0000
ROA not before: Sat 19 Sep 2026 19:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 89.106.31.0/24 maxlen: 24
189.31.213.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.75.187.0/24 maxlen: 24
189.75.188.0/24 maxlen: 24
191.217.174.0/24 maxlen: 24
200.102.187.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.14.223.0/24 maxlen: 24
201.24.204.0/24 maxlen: 24
201.24.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:31:a5:18:b6:97:1d:ab:ae:fe:32:47:cb:9f:88:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 19:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8b41c2f16154bc708273e33e09f19ddf963c41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:62:e4:69:06:46:e2:02:89:79:36:b9:61:
7d:2d:8b:64:ff:6b:3f:af:4c:93:07:f4:1a:e5:77:
34:e7:ff:5f:2a:40:b5:4d:ff:d1:f0:7c:1f:32:e2:
2e:32:7d:ca:0d:c6:db:d1:3d:37:17:ee:a8:d6:6d:
e8:ca:43:f1:68:ce:48:4c:09:59:5a:a2:6a:1f:f4:
ee:20:aa:74:06:2b:2a:9a:4a:77:72:f5:b3:f4:f4:
00:f1:5f:87:74:ca:bb:3a:e0:a2:8c:61:96:45:94:
7c:94:f6:40:41:87:f5:36:08:2e:c2:0f:9a:c1:d9:
f6:48:44:5e:13:25:01:9d:b2:be:e9:2e:7e:67:07:
6e:b6:fa:df:f1:92:bf:ed:22:66:9b:f5:ef:f7:64:
ba:b0:5a:a1:5e:d4:a9:db:41:d7:23:db:b7:99:8b:
47:dc:86:22:38:d3:73:23:a7:ca:a2:3c:01:fd:96:
59:e3:4d:76:e2:94:c6:d7:7b:9f:d0:fa:47:a4:41:
12:45:08:2f:c3:71:63:82:a1:ed:02:73:9c:92:69:
cb:d5:9e:b4:d2:b6:e9:3e:91:9f:fe:36:fb:79:51:
0e:cf:58:da:ad:8b:3a:57:39:8e:b5:74:a5:89:d1:
4a:f0:8b:01:9d:62:3f:61:86:f8:29:5e:97:73:9f:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:1C:2F:16:15:4B:C7:08:27:3E:33:E0:9F:19:DD:F9:63:C4:1F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yLQcLxYVS8cIJz4z4J8Z3fljxB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.31.0/24
189.31.213.0/24
189.73.25.0-189.73.26.255
189.75.187.0-189.75.188.255
191.217.174.0/24
200.102.187.0/24
200.165.19.0/24
201.11.225.0/24
201.14.223.0/24
201.24.204.0/24
201.24.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5f:d1:c2:8d:e4:83:fc:77:05:2c:7d:eb:9d:82:48:4a:2a:
c2:f1:a3:c5:4f:86:c9:69:c8:02:75:0a:53:42:a1:d4:cf:a1:
87:a2:eb:e5:9f:96:a4:71:19:4a:d6:ac:8a:88:a9:4b:e4:10:
7e:29:e6:0a:c7:ea:8c:a7:c2:5a:cc:b1:70:50:fd:cc:dd:8a:
98:21:45:57:44:2e:f9:78:d5:6e:bb:9f:df:6c:d5:00:b9:88:
5c:74:17:0f:f8:48:2b:46:f0:32:82:3d:e0:b9:ed:4a:65:ca:
78:fb:a2:c5:b7:4b:37:ce:b3:75:ff:1f:b3:79:3f:19:3d:e0:
f3:6f:06:ae:df:f4:89:d7:f7:82:1d:b6:f1:a6:a4:1a:0d:28:
89:d4:da:e9:48:e7:89:cd:00:37:64:56:9b:47:30:35:d4:ab:
ed:21:ac:45:e9:b0:cc:95:58:28:c5:72:0b:2e:5e:c2:a8:1c:
75:77:aa:a7:40:8f:53:2e:56:b8:e1:1e:d4:ca:f2:7f:6a:e6:
37:ae:68:02:2c:87:70:ed:75:1f:6b:36:0e:38:39:e3:71:dc:
d4:91:c1:48:83:17:5f:56:cf:79:0b:a3:b1:ad:96:9f:75:da:
a9:9d:39:83:24:2a:2e:ac:70:14:05:a2:f2:48:7b:50:8d:97:
b3:5d:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:06:51 2026 by rpki-client