Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/CeopfPRkvVKqlTjZTkNnVBjPGRY.roa
File: CeopfPRkvVKqlTjZTkNnVBjPGRY.roa (raw, json)
Hash identifier: 7u+YUpWJxbP6psLTuETZtY+bUhz8ZPBIFL1LAIgj9zQ=
Subject key identifier: 09:EA:29:7C:F4:64:BD:52:AA:95:38:D9:4E:43:67:54:18:CF:19:16
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A06633B7ADF0472AEC78A020D3A8932B63
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/CeopfPRkvVKqlTjZTkNnVBjPGRY.roa
Signing time: Thu 03 Sep 2026 07:37:40 +0000
ROA not before: Thu 03 Sep 2026 07:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 191.44.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:33:b7:ad:f0:47:2a:ec:78:a0:20:d3:a8:93:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 3 07:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09ea297cf464bd52aa9538d94e43675418cf1916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:5c:80:df:3b:be:eb:51:46:5a:fd:91:cd:
d6:2c:c8:40:36:11:5a:94:d8:0a:54:95:6f:f3:d3:
c1:80:78:11:b4:a1:ed:71:d6:a4:c1:57:7d:b3:9a:
49:b9:65:39:a5:41:77:e5:ec:e2:f9:c1:32:6b:dd:
6a:f4:fe:da:d2:97:f8:b1:05:0c:d6:54:22:0f:ae:
4c:6d:1e:f2:4d:a1:37:4e:8e:d3:06:55:22:8a:b8:
ad:81:21:9b:9e:bd:01:99:b7:d3:b2:f5:00:1a:df:
0f:51:86:a8:d6:b1:54:ad:bb:7e:0c:27:82:db:ed:
14:23:7c:08:a9:f8:bc:84:cc:ba:75:e8:16:ba:4b:
62:36:e4:be:aa:9d:7a:93:16:45:0c:ba:80:f9:82:
ee:2b:50:0d:9f:b5:7e:42:62:2e:ae:65:bf:ea:92:
26:e4:4d:3d:0b:af:27:cf:40:c7:6d:52:50:d0:12:
a1:30:41:f4:73:da:70:1a:35:8b:4d:4d:c3:5a:3a:
1a:82:ed:09:2a:a9:b9:dc:82:91:65:fc:1c:8f:b2:
69:49:53:69:2d:33:6b:75:25:b7:3d:a3:cb:fd:dc:
15:04:3f:69:13:93:83:98:08:37:57:9f:73:f7:12:
bb:8a:7d:59:67:85:3a:b0:95:e4:98:1e:15:72:68:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EA:29:7C:F4:64:BD:52:AA:95:38:D9:4E:43:67:54:18:CF:19:16
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/CeopfPRkvVKqlTjZTkNnVBjPGRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.78.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e1:39:c8:c9:87:fb:5f:8c:41:66:22:f7:a1:e8:f9:44:e6:
a9:fd:bd:8b:6a:4a:91:c9:ba:d2:28:cf:b6:9e:4e:72:0d:e6:
09:e6:71:fe:b5:1e:05:b0:c2:32:53:25:41:77:5f:65:71:e0:
2b:ce:34:04:6c:94:15:7e:50:19:e5:ee:81:3f:95:44:a8:ca:
c9:80:74:7f:06:1b:97:91:16:96:39:a2:fb:5b:09:18:22:61:
f6:37:0d:f5:0a:c7:3e:1b:9b:04:de:c5:df:ff:d7:96:3e:f1:
45:f6:61:2f:80:ee:ef:3a:e1:c9:4a:32:16:92:72:3e:7d:a8:
94:e9:3d:d4:e5:5c:5b:14:ae:37:a4:2d:7f:cc:59:7a:89:a9:
b5:74:46:4a:35:37:1f:1b:9d:07:aa:d0:be:b3:44:75:29:17:
b4:e3:5f:c5:28:f2:79:e3:f7:42:49:4c:86:63:ae:90:59:44:
d1:0c:68:55:e3:9a:04:d3:fa:7a:58:59:34:0a:af:05:ed:a1:
2a:06:38:5c:d3:bf:09:b4:4a:93:6e:c5:ff:23:e7:f9:ff:19:
7a:68:a1:dd:f0:d8:c1:5e:a5:35:d7:6f:13:40:a8:c7:61:c1:
1c:40:57:b2:21:4a:f0:c9:29:83:04:f9:14:8c:8e:a6:b8:dc:
63:e7:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:25:57 2026 by rpki-client