Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/rc3oRKtt_90HxvD3LaPWU6Xr7EA.roa
File: rc3oRKtt_90HxvD3LaPWU6Xr7EA.roa (raw, json)
Hash identifier: 29YVA6UeJ1gESTqULKlwFc5LGe3kSzimUyOz6HnaNbI=
Subject key identifier: AD:CD:E8:44:AB:6D:FF:DD:07:C6:F0:F7:2D:A3:D6:53:A5:EB:EC:40
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F236859FF3C857E8FFA8037BAADF55ED5
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/rc3oRKtt_90HxvD3LaPWU6Xr7EA.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35278
IP address blocks: 191.44.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:59:ff:3c:85:7e:8f:fa:80:37:ba:ad:f5:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adcde844ab6dffdd07c6f0f72da3d653a5ebec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:64:6f:4f:89:5c:71:22:06:92:a7:0b:e8:
b6:c9:0a:28:41:fe:ca:cd:53:a1:94:14:d3:c4:7c:
ce:f6:5c:5e:8d:c8:2e:75:09:ce:13:c4:58:3b:3d:
6e:36:8f:b1:13:ee:8e:5b:15:8a:10:ba:86:48:6b:
7c:1f:bb:c7:35:dc:b8:52:80:e0:7b:d4:53:36:a8:
30:22:7d:4a:d7:ab:9f:22:1c:54:72:b5:e7:89:7b:
82:de:ff:a4:fb:00:c4:de:b9:b1:18:b5:e5:57:7b:
35:13:50:0b:4c:12:bd:df:9e:a7:1b:f4:fa:f6:9b:
6f:e3:fc:75:0d:f0:dd:5c:5b:a5:e6:89:a0:aa:59:
24:22:ee:94:5c:2b:98:86:d1:6f:84:c8:fc:ff:1f:
4c:6a:54:3c:8a:12:05:5e:16:97:e4:8d:b4:a1:2c:
bb:95:43:d4:8b:2e:82:81:de:68:c4:d2:65:ac:f0:
2f:1e:a9:a9:a5:7b:4d:7f:39:8f:39:1c:3a:13:bb:
e4:1c:ad:5e:fb:de:58:4d:be:4f:9b:f2:16:41:e5:
5d:8c:b9:46:97:78:40:92:ae:f9:50:65:63:30:a0:
e5:78:72:55:61:6b:52:38:8f:41:fc:d2:31:40:3c:
ee:43:99:1b:ee:a7:ad:77:83:51:f6:41:89:8a:fa:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CD:E8:44:AB:6D:FF:DD:07:C6:F0:F7:2D:A3:D6:53:A5:EB:EC:40
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/rc3oRKtt_90HxvD3LaPWU6Xr7EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:23:a0:6c:5c:49:15:5a:b2:db:08:92:32:a0:ea:df:df:1c:
fa:d3:3e:e0:de:54:62:c6:ff:a2:d3:af:bf:7e:b4:df:a2:ad:
6d:99:93:5f:1f:96:ff:5b:28:d0:71:17:48:01:a4:1d:ce:55:
c2:fc:2b:b2:68:3c:fb:ed:3e:1a:fa:0f:74:94:3c:e5:03:b2:
24:55:49:30:54:02:93:53:ee:08:81:0d:ea:8a:c9:40:3d:24:
83:c0:6a:fb:56:8f:b4:99:2f:20:99:27:a5:73:af:94:f1:26:
22:2b:d3:6f:b5:42:0f:41:0f:92:a6:dd:ea:71:94:d1:40:4c:
da:eb:8c:6d:86:4f:09:16:c7:f6:a9:96:3c:05:a5:12:2c:98:
d1:38:69:24:0b:84:1b:87:47:ba:65:f8:24:29:12:17:82:71:
db:c1:e0:95:86:7f:f2:6d:20:fc:39:2d:e0:2b:18:f6:a0:3d:
38:7a:8a:09:09:b7:8a:3a:50:b5:ea:2f:9e:92:e7:d3:04:f7:
b7:2c:c2:cd:b7:4e:cf:47:ee:d0:d8:7d:d2:f8:bc:fb:37:0b:
35:96:5e:01:5f:38:84:4a:39:33:a9:18:7b:e6:bf:3a:06:b3:
23:47:42:15:1a:70:78:3d:ea:91:24:00:f1:2e:95:86:24:e8:
8c:e1:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:00 2026 by rpki-client