Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/1-c97GyWq2pWYRQNuZWuDSKdqw0o.roa
File: 1-c97GyWq2pWYRQNuZWuDSKdqw0o.roa (raw, json)
Hash identifier: oxxTC3kI1AcjO+2HjcVFXC/Bv8BNhPZ/6TBQbR2AJmc=
Subject key identifier: F9:CF:7B:1B:25:AA:DA:95:98:45:03:6E:65:6B:83:48:A7:6A:C3:4A
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FF761858F27D7E4C0F1D87207E613F3F7
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/1-c97GyWq2pWYRQNuZWuDSKdqw0o.roa
Signing time: Wed 12 Aug 2026 19:09:51 +0000
ROA not before: Wed 12 Aug 2026 19:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 191.44.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:61:85:8f:27:d7:e4:c0:f1:d8:72:07:e6:13:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 12 19:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9cf7b1b25aada959845036e656b8348a76ac34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:34:29:9c:b4:1e:47:af:04:9d:b9:18:40:
63:01:98:d8:c1:41:98:83:57:a3:b4:37:51:b4:03:
6a:4a:2e:9d:7b:f9:79:b4:0e:74:13:48:56:04:75:
7e:75:ed:47:d0:0d:30:63:04:f8:86:4d:8d:4f:46:
bb:8e:a3:3a:93:2a:39:d5:6b:c7:62:f2:76:cd:4b:
8a:ec:12:79:ad:6f:8c:1f:e8:1e:09:d7:fa:f7:56:
68:1d:2a:70:a8:b7:14:60:0c:17:df:95:ac:2a:36:
10:a2:51:72:80:ac:c7:93:ee:2d:46:48:d7:26:7e:
1d:45:d6:b8:c7:29:5a:2a:f1:f3:15:55:c5:3c:eb:
36:0d:bc:d3:3e:47:f5:b7:e3:7a:d7:86:4e:50:68:
b4:19:10:cb:a8:d0:94:0e:68:33:02:b2:7d:4f:50:
8f:b8:f4:4e:76:a0:b5:35:66:5a:3b:b7:29:f9:bf:
9d:c5:b8:f3:48:6f:e0:00:e2:87:66:4c:6a:90:ee:
e5:18:4e:aa:8c:3d:93:18:98:22:c1:83:51:6f:0d:
93:8f:90:b8:73:2b:f9:66:d8:11:e1:79:90:63:f5:
cd:62:7b:9d:e7:c9:5d:eb:7a:79:84:e4:e6:45:4c:
e1:04:1f:0d:74:37:7f:31:ae:a8:13:8e:42:09:82:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:7B:1B:25:AA:DA:95:98:45:03:6E:65:6B:83:48:A7:6A:C3:4A
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/1-c97GyWq2pWYRQNuZWuDSKdqw0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ab:d4:ac:48:70:f3:d6:ef:03:fe:f9:cd:fc:db:22:05:b0:
b5:29:cd:e1:e5:ee:cd:b9:c4:87:cc:84:6a:69:b4:17:9a:16:
2d:7f:4c:2f:70:fd:07:36:79:f1:74:05:ed:38:c4:61:80:50:
41:f0:a3:31:b5:f7:33:a0:00:24:63:c7:7b:6f:ad:c7:8f:0b:
c8:2a:af:92:cf:ce:89:9b:7e:3e:03:50:61:f8:e3:09:9f:67:
05:3d:1d:72:32:be:6e:80:19:69:10:db:2e:2d:b6:6a:06:1a:
e9:0a:4d:df:13:15:a6:77:0c:df:cd:b1:72:5b:cf:33:4c:3c:
a1:d6:3c:72:56:ed:a6:a2:8c:7b:b4:43:9e:f3:f6:67:21:69:
a6:16:a5:d6:cd:90:65:1a:5d:14:53:a3:60:d1:53:8d:e9:b4:
00:d9:7d:38:d2:4a:75:11:10:76:72:79:e2:af:ca:d6:ae:71:
7d:eb:e2:a3:e1:15:1b:5d:6a:f0:3b:db:a3:de:7c:c6:8f:87:
f9:dc:4b:98:96:5b:01:9d:29:68:e3:00:54:46:db:e0:48:d0:
94:bb:f4:13:8c:4e:ca:a4:f2:9b:28:c1:83:7c:8c:53:6e:20:
ef:7a:5f:2e:1c:c3:e0:ba:8d:1e:0c:93:e4:37:0f:0f:90:d0:
d6:a6:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:16 2026 by rpki-client