Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cc8Ol39YSC9Hz9lrQnYUjs64sPs.roa
File: Cc8Ol39YSC9Hz9lrQnYUjs64sPs.roa (raw, json)
Hash identifier: Dm4uS3Ai2Xebkf4FTNxNgU/OOzOhmMznqlOmMeoLh/U=
Subject key identifier: 09:CF:0E:97:7F:58:48:2F:47:CF:D9:6B:42:76:14:8E:CE:B8:B0:FB
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A1546FDA45E511A9CF2DCD635C5F090151
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cc8Ol39YSC9Hz9lrQnYUjs64sPs.roa
Signing time: Mon 19 Oct 2026 13:52:58 +0000
ROA not before: Mon 19 Oct 2026 13:52:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 191.44.124.0/24 maxlen: 24
201.3.230.0/24 maxlen: 24
201.4.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:6f:da:45:e5:11:a9:cf:2d:cd:63:5c:5f:09:01:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 19 13:52:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09cf0e977f58482f47cfd96b4276148eceb8b0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:99:8f:79:8b:40:00:69:30:f2:40:88:0a:62:
fa:02:81:8c:5b:17:90:42:0c:71:05:d9:56:51:fa:
da:0f:4d:9f:f3:c8:5b:16:21:fc:5d:16:be:fc:76:
20:78:ed:3f:e5:0e:2f:8c:d7:66:82:7b:f8:79:ae:
a8:6f:c0:35:1a:71:b8:9c:25:0e:c4:8d:92:e4:2e:
36:a8:f3:85:4a:88:f9:35:3a:d0:e3:f3:78:2e:11:
44:b8:e9:31:1b:c2:6d:7e:cd:5d:6c:b9:fb:5c:aa:
61:23:b1:cd:41:59:03:d9:ae:f4:fa:ce:1a:df:71:
e9:17:16:ea:51:c7:ba:af:a4:4d:68:43:d5:80:5a:
69:e8:16:74:02:35:94:3e:de:3e:8c:59:ef:3d:9b:
56:20:0d:8e:8d:71:e5:ee:2c:5f:49:04:a7:bd:ee:
2f:57:22:ed:e0:58:a1:10:90:6d:f5:6c:82:f7:9f:
78:33:d1:ee:29:d8:95:c1:e8:86:a5:51:95:2f:99:
cc:b3:02:f8:e1:30:3f:d8:f3:32:c9:f6:a1:f1:ac:
0c:8d:0c:a7:cb:ba:ab:cf:14:fb:1d:cc:39:11:98:
43:77:95:d8:39:2d:fc:6b:f2:63:4f:74:a2:08:a7:
aa:9a:ba:cc:8c:63:5e:77:95:c1:ca:94:33:9b:4e:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:0E:97:7F:58:48:2F:47:CF:D9:6B:42:76:14:8E:CE:B8:B0:FB
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cc8Ol39YSC9Hz9lrQnYUjs64sPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.124.0/24
201.3.230.0/24
201.4.67.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1b:3c:2d:c4:1e:71:b5:6a:87:00:ed:0c:85:65:4e:96:89:
2d:89:dc:f0:6e:9d:f6:db:a2:db:97:cb:7b:bf:cb:74:82:de:
8f:87:6e:ab:ba:3e:ec:05:1a:95:48:55:e1:49:b4:0e:70:37:
ad:7d:9e:be:7b:8c:7b:75:3f:ee:77:e0:3c:1c:0b:14:a2:b4:
32:c7:84:47:71:f3:c4:74:ff:d4:75:29:56:2c:33:ea:81:2d:
d5:db:e6:5d:de:0f:92:4d:84:a1:4c:ce:ed:94:a7:25:c1:99:
a5:eb:7e:6a:15:4b:42:17:74:f4:07:f7:80:75:3b:50:89:95:
dd:0b:82:b0:c4:89:fc:73:06:8c:ee:f3:51:0d:2f:5c:45:01:
6d:7a:52:93:1a:ef:0c:4b:99:8a:19:cb:8a:81:af:ce:39:2d:
36:15:bc:2b:95:d9:1e:f9:b3:a0:55:93:d8:36:64:3d:3c:a7:
35:ae:dc:e8:36:8e:c5:7c:eb:2c:7a:eb:d8:b9:d2:36:00:91:
36:a0:ec:45:95:0f:49:33:f0:37:2a:c0:f7:46:58:55:ca:f1:
34:00:ba:70:11:a9:16:af:43:3c:4f:dd:53:10:7f:b2:64:0d:
4e:73:88:dc:04:0b:3d:5b:60:48:9c:f7:2f:0a:69:19:87:24:
f4:f2:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:03 2026 by rpki-client