Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/cczI5WdVvJBm7WtIO4TEoJeaYfM.roa
File: cczI5WdVvJBm7WtIO4TEoJeaYfM.roa (raw, json)
Hash identifier: y3j2u8pGOmmBTOwAah4QxUzWIemf4ounU1nlWVev95E=
Subject key identifier: 71:CC:C8:E5:67:55:BC:90:66:ED:6B:48:3B:84:C4:A0:97:9A:61:F3
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EFF7E6FB79CA1A1683D0ABC727389CE80
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/cczI5WdVvJBm7WtIO4TEoJeaYfM.roa
Signing time: Thu 25 Jun 2026 15:55:36 +0000
ROA not before: Thu 25 Jun 2026 15:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 191.44.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:7e:6f:b7:9c:a1:a1:68:3d:0a:bc:72:73:89:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 25 15:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ccc8e56755bc9066ed6b483b84c4a0979a61f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:8f:20:67:97:61:8a:01:d6:e9:b8:0b:ab:
0c:69:47:43:db:7f:b7:56:e7:fb:0e:d2:d9:ac:fd:
cb:9d:01:d3:d9:da:d8:e8:0f:92:c0:e7:14:03:4a:
1d:23:e4:88:a6:80:b6:58:df:85:2f:a7:06:2b:11:
43:e1:cf:d4:4a:1f:cd:69:bb:52:9c:1c:0c:ed:c3:
6b:68:c2:75:ab:9c:57:de:fe:89:e6:49:e6:84:42:
38:96:12:a1:73:bd:d0:58:19:87:f1:b2:20:d0:96:
92:cd:63:81:8b:09:1a:dc:d8:9c:7b:aa:35:ca:f0:
2d:fe:90:61:37:24:c1:60:78:d9:3c:3f:b7:eb:b6:
02:2b:ed:ee:8a:8b:d9:99:8b:70:1e:4a:c0:73:89:
6f:b6:00:c0:7e:51:4c:02:7d:51:2c:b0:7a:23:10:
e8:43:bb:a2:aa:77:70:6b:71:3f:08:d2:e3:cd:9f:
44:a5:a2:8a:e7:58:f6:da:0f:2a:b6:c1:41:ae:b7:
ae:6a:a5:2f:4e:b3:74:54:d1:a6:7e:ae:b2:30:94:
f6:f5:ea:5e:40:85:95:6d:bb:55:51:03:69:20:89:
d3:cf:a5:0d:42:27:c1:d8:27:de:e2:f5:c0:f9:40:
d0:3d:f1:a1:64:a6:70:7e:2f:66:60:4c:2d:18:b8:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:C8:E5:67:55:BC:90:66:ED:6B:48:3B:84:C4:A0:97:9A:61:F3
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/cczI5WdVvJBm7WtIO4TEoJeaYfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.85.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2d:6a:45:18:c1:91:53:cc:a5:60:03:53:c2:a2:54:7d:69:
dd:f5:de:17:ca:09:52:07:5f:ed:26:da:1f:d2:e7:95:70:8b:
d0:42:98:83:c8:95:1c:35:b0:f0:a1:ff:a9:4f:c1:de:09:22:
79:cf:52:ee:e9:ff:0d:8c:46:30:dc:d8:4d:9e:5e:29:bf:c4:
01:56:8c:36:34:14:ee:0d:44:cd:41:d4:90:79:5b:03:19:8a:
09:06:dc:80:95:75:f1:4a:e5:16:ee:c5:5e:9f:b7:e1:b6:f9:
0d:e5:5b:aa:58:a1:11:b3:f9:1e:2c:dd:2a:ba:ab:14:fc:79:
04:56:fb:8d:b4:8e:56:66:bf:a1:c9:72:67:c7:44:75:43:08:
49:3a:96:8a:6e:53:b9:dd:f6:f6:39:57:8c:0f:89:7d:a7:28:
f8:23:93:f7:32:17:a7:81:43:42:ad:53:16:8f:7f:ef:7f:74:
26:82:82:8d:80:77:e2:15:f0:cd:95:e1:16:44:b4:90:f9:1e:
1c:4f:38:c5:fa:88:0e:c6:74:a5:dc:ed:56:14:fd:d8:55:66:
30:3d:8d:2f:19:8c:c4:2b:4d:2d:b9:18:6c:25:a0:13:60:7e:
8d:6a:bf:f0:fc:95:32:5d:64:af:90:79:be:d5:6d:d0:a7:06:
25:c0:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:11:26 2026 by rpki-client