Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ctV3P_eoB1zIzAVZkP9TmxWjT24.roa
File: ctV3P_eoB1zIzAVZkP9TmxWjT24.roa (raw, json)
Hash identifier: h+xusp2PhR8hlnZc4PtsgdzzkRCbD1zyGGhvIxq+qGg=
Subject key identifier: 72:D5:77:3F:F7:A8:07:5C:C8:CC:05:59:90:FF:53:9B:15:A3:4F:6E
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F95F429A227BC5BBC6E5016E9AE22948E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ctV3P_eoB1zIzAVZkP9TmxWjT24.roa
Signing time: Fri 24 Jul 2026 21:07:14 +0000
ROA not before: Fri 24 Jul 2026 21:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:f4:29:a2:27:bc:5b:bc:6e:50:16:e9:ae:22:94:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 24 21:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72d5773ff7a8075cc8cc055990ff539b15a34f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:f1:52:43:b7:08:0c:bd:4b:ff:40:95:38:
1a:a4:08:bd:a8:fb:9b:90:58:54:40:e0:ee:90:4c:
25:fb:10:61:65:f1:8a:48:e5:77:ba:ba:9c:a5:f9:
41:46:30:eb:9c:d3:79:1d:59:7d:b3:c0:08:ae:38:
1e:f3:91:62:c7:70:c3:f9:68:1b:8e:53:b1:6d:94:
f4:7d:8f:0a:d0:ff:63:a7:09:8f:90:f8:e7:69:34:
1d:6d:96:03:f1:12:88:28:84:70:11:70:5b:3d:85:
45:9e:d0:89:e0:68:72:2d:d1:d3:11:9a:75:c4:db:
37:c2:f2:59:c3:04:be:0e:ee:a1:3e:81:45:de:e0:
1d:49:8d:ec:2a:0d:2d:51:dc:dc:60:4b:1d:67:e9:
f3:6b:6b:3f:c2:77:c2:71:ec:2d:68:9c:6a:79:2a:
65:df:be:0b:80:9e:c2:fa:ad:a2:57:46:03:b9:35:
8a:3f:19:08:5b:c9:de:5c:37:00:a0:13:41:27:00:
59:59:b4:91:d9:ad:81:3a:40:03:fb:ad:d1:3d:46:
54:ba:48:82:af:73:d0:58:51:e9:f2:e5:59:54:60:
42:2b:93:69:80:c4:eb:1b:db:4a:6f:94:72:ae:86:
83:14:8b:a0:38:65:1d:37:74:cd:1b:71:80:e5:27:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:77:3F:F7:A8:07:5C:C8:CC:05:59:90:FF:53:9B:15:A3:4F:6E
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ctV3P_eoB1zIzAVZkP9TmxWjT24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7c:ea:25:b7:9a:34:b7:4b:01:04:0b:f5:e2:ff:45:70:5d:
09:a9:07:dd:33:80:77:bd:e3:cc:2c:4c:6b:8b:85:1c:ad:25:
93:0c:65:39:cd:e1:8a:28:3e:30:8c:fb:40:a5:fd:bc:1b:e7:
bc:a9:51:0e:60:7f:42:d2:4f:e6:61:6a:27:2e:15:70:a2:61:
20:37:c3:a9:a2:57:8c:fa:89:14:d6:58:90:d0:69:6f:92:62:
e9:46:77:4e:5a:86:6c:32:97:c3:85:1d:4a:f2:e1:61:f7:02:
65:be:54:fb:b9:a0:92:99:4f:a7:06:e8:81:e8:96:1c:bb:c7:
3a:3f:6b:ea:51:54:61:07:fb:ce:aa:7b:37:37:b9:90:2b:db:
38:e7:39:2c:6d:2d:00:42:01:1e:3b:f4:6d:59:33:2c:dd:8c:
9a:17:32:bf:01:90:cb:38:2d:e2:c5:f0:25:03:60:47:07:7e:
20:54:a0:40:55:74:bc:53:78:97:ec:aa:49:67:e9:78:4a:ea:
bc:b0:88:c2:fa:1e:23:86:7e:c2:a3:fe:e2:39:ce:74:53:93:
ee:d2:c4:28:de:42:04:3f:e5:0d:7d:b4:f4:05:d5:a2:7a:5a:
c6:80:76:69:07:d6:32:a9:b5:12:ba:c7:e5:da:08:0a:f7:b8:
58:b1:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:46:26 2026 by rpki-client