Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zx6s6ql5QQOiA2Jf3hrwkYjM-Cc.roa
File: zx6s6ql5QQOiA2Jf3hrwkYjM-Cc.roa (raw, json)
Hash identifier: aVGRRZGc4Qd4djx3CER1/nU2hYeC02HkPnazsG3lWcs=
Subject key identifier: CF:1E:AC:EA:A9:79:41:03:A2:03:62:5F:DE:1A:F0:91:88:CC:F8:27
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA4A094D0C9B0A83F0B85EB706DE3C915
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zx6s6ql5QQOiA2Jf3hrwkYjM-Cc.roa
Signing time: Mon 27 Jul 2026 17:30:15 +0000
ROA not before: Mon 27 Jul 2026 17:30:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 189.12.54.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
201.14.209.0/24 maxlen: 24
201.14.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:a0:94:d0:c9:b0:a8:3f:0b:85:eb:70:6d:e3:c9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 27 17:30:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf1eaceaa9794103a203625fde1af09188ccf827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:e5:f3:f5:10:8f:93:82:cf:25:5d:37:81:
a2:ed:b8:bd:01:62:f9:3c:9a:ae:76:72:fc:a9:bc:
27:47:b7:61:4c:20:85:dd:50:43:2b:5e:71:6f:92:
a1:fc:05:9d:00:0d:4e:33:28:d6:6a:f4:0e:18:39:
57:f2:33:93:90:2a:a2:0a:a8:b3:2d:9b:00:72:07:
34:03:8b:de:34:d5:a5:c6:76:2c:f0:65:09:3b:81:
3c:c2:0d:94:e8:36:73:c9:b4:28:f6:1c:ae:d6:17:
03:62:f7:3c:a9:69:84:1b:37:d6:5d:87:8c:8f:2e:
45:e0:13:9a:93:ab:5c:72:1f:d4:68:68:2e:32:5b:
dc:ae:3f:3f:b8:69:7e:b4:76:ae:f0:66:9a:b7:5b:
4a:50:d9:29:92:1a:f4:8b:e9:e5:5d:6a:c8:16:3f:
5f:71:99:16:4d:11:3b:1a:d1:78:4e:2f:6e:2c:91:
c6:3a:72:9b:86:01:96:18:e4:bf:0d:11:2c:4c:57:
23:e2:f7:1b:c8:d0:ad:b4:3d:e3:eb:cf:93:2c:fd:
0d:7e:30:a4:e3:c8:c4:67:c5:67:12:21:88:61:4d:
eb:52:43:76:c6:e1:28:02:5e:08:2a:37:65:19:24:
c6:19:85:ea:b8:41:a7:c3:e7:b4:7c:ee:c0:1d:50:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:AC:EA:A9:79:41:03:A2:03:62:5F:DE:1A:F0:91:88:CC:F8:27
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zx6s6ql5QQOiA2Jf3hrwkYjM-Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.54.0/24
189.31.214.0/24
200.102.189.0/24
200.165.27.0/24
201.14.209.0/24
201.14.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0d:80:f5:ae:f1:ff:18:ff:87:b8:7f:53:c0:59:22:fa:bd:
1e:b9:f2:42:07:80:1f:00:32:92:e2:4b:e3:e3:d5:e4:25:24:
26:a5:c2:66:f8:f8:6f:fb:18:e5:b9:bd:40:3d:ff:c2:42:ce:
d2:e5:d9:eb:b7:10:87:47:56:93:5c:2e:28:e8:2c:47:4f:23:
f3:76:66:de:83:04:cb:78:27:dc:6e:8b:f1:ef:59:9c:7b:37:
83:e3:42:7e:ae:a0:4b:2d:89:8e:52:02:6c:6f:56:ad:0d:16:
07:18:60:fb:d5:24:20:26:35:b4:8d:0d:18:69:8f:a9:70:db:
db:be:0d:ac:2a:1f:0f:3e:02:e3:f9:7a:1e:ed:46:84:bf:ca:
92:f1:2e:9e:92:42:72:5f:fd:ed:3d:74:55:fa:b5:fa:9e:ae:
b7:0a:7c:17:0e:f2:5c:a4:46:9b:14:f7:ab:cc:83:e8:9b:c9:
a0:1a:67:60:14:e5:26:53:4e:f1:31:8b:98:66:5c:d3:91:41:
0d:d5:21:96:e6:f5:2c:3d:cf:8d:35:8c:35:f0:14:a7:a6:45:
82:5d:47:58:dd:92:f1:98:cb:df:7f:9c:f3:7c:d9:b9:50:01:
3e:75:79:b2:45:f8:26:75:59:ab:2a:67:46:6c:c4:11:36:16:
2e:f5:1e:92
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ+koJTQybCoPwuF63Bt48kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNzI3MTczMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjFlYWNlYWE5Nzk0MTAzYTIwMzYyNWZkZTFhZjA5MTg4Y2NmODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh7l8/UQj5OCzyVdN4Gi7bi9AWL5
PJqudnL8qbwnR7dhTCCF3VBDK15xb5Kh/AWdAA1OMyjWavQOGDlX8jOTkCqiCqiz
LZsAcgc0A4veNNWlxnYs8GUJO4E8wg2U6DZzybQo9hyu1hcDYvc8qWmEGzfWXYeM
jy5F4BOak6tcch/UaGguMlvcrj8/uGl+tHau8Gaat1tKUNkpkhr0i+nlXWrIFj9f
cZkWTRE7GtF4Ti9uLJHGOnKbhgGWGOS/DREsTFcj4vcbyNCttD3j68+TLP0NfjCk
48jEZ8VnEiGIYU3rUkN2xuEoAl4IKjdlGSTGGYXquEGnw+e0fO7AHVCTYQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFM8erOqpeUEDogNiX94a8JGIzPgnMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEveng2czZxbDVRUU9pQTJKZjNocndrWWpNLUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAvQw2AwQA
vR/WAwQAyGa9AwQAyKUbAwQAyQ7RAwQAyQ7UMA0GCSqGSIb3DQEBCwUAA4IBAQBc
DYD1rvH/GP+HuH9TwFki+r0eufJCB4AfADKS4kvj49XkJSQmpcJm+Phv+xjlub1A
Pf/CQs7S5dnrtxCHR1aTXC4o6CxHTyPzdmbegwTLeCfcbovx71mcezeD40J+rqBL
LYmOUgJsb1atDRYHGGD71SQgJjW0jQ0YaY+pcNvbvg2sKh8PPgLj+Xoe7UaEv8qS
8S6ekkJyX/3tPXRV+rX6nq63CnwXDvJcpEabFPerzIPom8mgGmdgFOUmU07xMYuY
ZlzTkUEN1SGW5vUsPc+NNYw18BSnpkWCXUdY3ZLxmMvff5zzfNm5UAE+dXmyRfgm
dVmrKmdGbMQRNhYu9R6S
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:08:33 2026 by rpki-client