Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/T1tGWy84dYNNbYv-6SlSsllXUoI.roa
File: T1tGWy84dYNNbYv-6SlSsllXUoI.roa (raw, json)
Hash identifier: M7iV+B9Su1qfBryo6GO1u+131TqnmgFqIcz+45oZmXE=
Subject key identifier: 4F:5B:46:5B:2F:38:75:83:4D:6D:8B:FE:E9:29:52:B2:59:57:52:82
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EF4C77F99EC7D5A3D5AA165F986585BD5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/T1tGWy84dYNNbYv-6SlSsllXUoI.roa
Signing time: Tue 23 Jun 2026 13:59:35 +0000
ROA not before: Tue 23 Jun 2026 13:59:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212112
IP address blocks: 191.44.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:c7:7f:99:ec:7d:5a:3d:5a:a1:65:f9:86:58:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 23 13:59:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f5b465b2f3875834d6d8bfee92952b259575282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:9e:05:17:4c:9d:cb:90:96:72:76:c9:73:
4b:d1:94:8f:ee:bf:2d:c5:77:52:5f:6c:60:94:f1:
fa:ff:97:50:3e:8f:e9:ed:cb:c5:d9:9f:c7:27:1a:
2e:0a:63:85:01:6a:3c:c0:a0:f2:60:9c:ba:a4:01:
72:c5:38:d4:10:10:2f:1b:44:64:76:90:7d:2e:d5:
6f:e5:af:c6:2c:32:99:e0:ee:00:a5:82:4a:c7:3b:
84:a9:5b:24:02:01:cf:ee:fb:74:51:11:52:a3:20:
ea:e5:94:ac:23:7a:f7:3b:2f:f4:62:79:81:9a:db:
d3:1a:7d:85:b3:d6:25:3c:83:b7:92:92:4c:d6:79:
b3:31:1f:22:e4:cb:97:ad:61:26:da:a0:d4:f3:8d:
43:38:bc:eb:f0:6a:ee:dc:e8:da:d2:12:20:f0:01:
af:d8:77:07:0e:fb:e5:23:70:e3:25:00:c9:c3:23:
4b:76:7e:47:be:8a:13:59:11:28:9f:89:95:77:6a:
38:06:75:37:35:9e:29:ef:2e:11:52:17:c5:e2:7c:
dc:8b:ba:7d:c7:42:e4:55:2e:01:f7:61:94:1d:e5:
1e:85:2a:59:9f:df:06:5b:f7:fa:88:9b:54:2c:0b:
f7:b7:51:4f:20:ab:ff:b7:be:ac:0a:2b:66:fc:f5:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:46:5B:2F:38:75:83:4D:6D:8B:FE:E9:29:52:B2:59:57:52:82
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/T1tGWy84dYNNbYv-6SlSsllXUoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:69:9f:f0:4d:29:b2:3e:57:66:2c:78:e3:22:af:2a:37:fc:
9b:74:db:98:2c:45:fe:8c:b1:47:7f:cd:b5:38:b3:8e:7e:14:
1f:5e:47:6f:02:a1:3c:c1:dc:fb:94:0a:5b:c5:4e:fc:27:39:
2a:18:d9:70:4c:87:e3:96:eb:2c:84:a1:d0:03:75:4e:51:12:
88:9d:11:19:9d:36:b0:e3:7f:74:c0:95:9c:0a:25:4b:df:4b:
f4:c1:6b:e8:1f:ef:de:5c:42:dc:61:12:fa:7d:ad:89:0c:cb:
6d:01:46:5f:f0:24:fd:d7:33:8a:5c:30:30:46:10:bd:7a:27:
1d:32:ac:a5:28:56:83:a1:f0:9a:0a:2c:e9:80:65:9a:e3:17:
c1:53:77:34:2e:f5:86:ca:aa:c9:8b:36:b1:4d:e6:89:28:2a:
6d:47:3b:db:6d:d1:91:1e:3e:cb:a7:c8:78:b9:3b:53:58:6d:
59:ee:34:45:bc:43:2d:5c:91:e8:03:bb:85:6b:d7:92:d7:c3:
f0:07:bb:81:ee:9e:4a:34:13:e5:66:35:ae:64:c4:9a:83:a2:
69:fd:0b:36:f3:93:db:f1:c4:20:a6:23:a0:c1:01:ad:6f:7e:
e8:d8:f5:2b:fa:93:15:07:12:f2:a3:87:14:b0:84:b8:f6:9e:
96:9e:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client