Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cg5xET6RmMQBfyR10Oj77Wt2nnw.roa
File: Cg5xET6RmMQBfyR10Oj77Wt2nnw.roa (raw, json)
Hash identifier: 6G9wmLDzIpT6cXH6+NXZsQQtpH7ZueqUnINpN3O5z3s=
Subject key identifier: 0A:0E:71:11:3E:91:98:C4:01:7F:24:75:D0:E8:FB:ED:6B:76:9E:7C
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FA400E4BBFE1905CCB6B62CCD32D718BD
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cg5xET6RmMQBfyR10Oj77Wt2nnw.roa
Signing time: Mon 27 Jul 2026 14:35:49 +0000
ROA not before: Mon 27 Jul 2026 14:35:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 191.44.80.0/24 maxlen: 24
191.44.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:00:e4:bb:fe:19:05:cc:b6:b6:2c:cd:32:d7:18:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 27 14:35:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a0e71113e9198c4017f2475d0e8fbed6b769e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:18:cb:5f:c5:41:82:d8:f1:c7:82:4e:c5:
5a:6d:99:73:1e:9c:72:7a:01:59:2f:1f:f4:8d:30:
8d:73:3c:89:31:ea:ee:b8:2b:03:11:08:bf:87:e6:
1c:b4:1e:f6:9c:ce:98:f5:31:c7:d9:cc:3b:ad:29:
52:43:6d:7b:22:b8:81:eb:d4:a3:11:d5:65:83:7e:
13:a4:7f:8d:94:60:46:d5:ff:4b:62:14:87:3a:1e:
e7:38:c5:a0:db:8b:eb:20:43:93:4a:c4:f8:4b:57:
29:ea:73:c8:93:c8:b6:e1:0d:e8:63:d3:29:9e:c9:
b4:37:ea:9b:48:48:f1:ae:3b:b3:b9:96:f6:ad:24:
3d:bc:2c:a6:00:cb:29:21:23:2e:4f:f3:3b:91:93:
6a:66:2a:a1:c9:dd:a6:51:56:fe:82:40:38:7a:9e:
e7:0d:a8:bd:79:fb:32:2b:4f:85:a1:7a:8f:c5:e9:
be:33:f0:d2:f4:cc:79:c1:4c:fb:f7:a8:85:a1:0f:
34:01:2f:eb:c0:ad:c8:c9:8b:78:83:63:fd:e1:bd:
f2:26:bc:06:c7:f1:60:d3:73:70:b4:b3:01:72:be:
5d:dd:aa:0a:73:f4:43:c6:6d:24:c7:68:57:8f:c9:
93:cf:31:0d:39:ca:8b:ae:65:36:7a:3d:ba:32:e3:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:71:11:3E:91:98:C4:01:7F:24:75:D0:E8:FB:ED:6B:76:9E:7C
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Cg5xET6RmMQBfyR10Oj77Wt2nnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.80.0/24
191.44.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:71:01:22:d1:07:98:67:27:ed:5f:3f:9a:b5:be:c5:3f:cb:
1c:57:b7:2e:4f:80:2e:6e:6b:64:00:5f:4e:e9:b4:c3:30:2d:
e5:54:1f:39:35:aa:d2:e6:e9:51:d2:ef:18:61:f6:bb:57:d6:
97:81:40:c2:d3:d3:90:db:bb:0d:70:22:54:fd:f9:be:0b:67:
d2:93:8e:da:d3:52:0e:28:b3:02:0e:d5:d4:77:26:20:5e:7a:
dc:dc:d9:1b:50:f7:90:fe:d8:6a:6d:3c:9c:f3:90:71:2a:02:
7c:61:14:1d:77:e4:91:90:80:cd:d3:59:13:29:6b:1e:44:9a:
03:1a:26:94:a5:74:bc:e6:17:5b:cd:78:aa:9d:fe:bd:0c:af:
ad:03:e4:a3:e7:b9:af:9f:b3:9c:4f:42:33:3b:f9:a2:85:df:
c3:41:96:0c:d0:01:39:7d:24:bd:01:6b:ce:33:cb:32:83:bd:
4d:3e:1b:66:37:35:97:a7:6d:af:a9:63:f6:c9:53:01:b9:95:
47:48:d2:97:ef:60:e1:c2:70:a7:36:e4:bd:6d:1e:85:92:c5:
11:d9:0b:ee:39:18:29:ce:17:e6:d7:84:59:f7:f9:1c:7a:74:
79:b2:5e:05:6b:6d:1e:76:d3:63:df:89:e5:79:f0:71:83:73:
d4:54:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:43:14 2026 by rpki-client