Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa
File: Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa (raw, json)
Hash identifier: sNTPIkd73n/EU/DbG6UaXBNfki1s2gEUwvwhofodNus=
Subject key identifier: 09:C9:B8:A9:36:85:56:87:84:05:01:AA:EC:07:47:92:6B:37:B1:B1
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019F3635321EC71FEA178009C07904F27946
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa
Signing time: Mon 06 Jul 2026 06:54:43 +0000
ROA not before: Mon 06 Jul 2026 06:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 192.94.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:35:32:1e:c7:1f:ea:17:80:09:c0:79:04:f2:79:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jul 6 06:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09c9b8a936855687840501aaec0747926b37b1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:28:d6:2a:0e:b2:87:45:a7:2d:3c:83:44:
ab:e4:72:d9:98:04:dc:d1:a0:e9:52:87:41:be:1c:
f3:7f:19:9c:09:d9:7b:ce:11:1e:4c:9c:f2:66:34:
51:c5:3b:4f:d3:55:6b:1c:ed:ee:63:15:19:7b:ab:
5a:cb:19:da:bf:83:4b:81:cc:84:6d:3c:d9:58:e0:
7e:27:e7:0a:80:f0:3b:aa:8f:c3:62:b7:18:32:fe:
ec:0d:1e:17:c0:e7:e4:d6:b0:da:1c:a5:1f:36:33:
b7:5e:14:01:04:a5:9c:b4:9a:dd:8a:46:a3:ce:48:
f7:c1:ff:58:04:a3:cf:0a:3d:9a:81:15:40:6a:f1:
56:a1:d5:76:b8:14:a2:02:4c:f6:7f:45:80:4a:5a:
9d:6b:17:14:29:f9:95:45:b3:ad:9f:02:23:a2:5a:
fa:13:df:87:47:e8:79:a0:4c:41:28:d2:fa:58:6b:
f0:ea:4c:69:2b:c1:21:b7:fd:36:dc:f1:82:80:b7:
a9:4b:ed:c3:1f:e0:32:ca:c8:b1:cd:68:8e:80:42:
23:92:25:33:bd:d8:10:fe:93:99:e7:2f:c4:1d:70:
3f:b4:bd:50:7c:44:7e:87:f2:fe:1e:2f:78:01:ff:
62:2a:ee:4f:04:fe:39:4d:c9:9d:33:09:1d:1b:2b:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:B8:A9:36:85:56:87:84:05:01:AA:EC:07:47:92:6B:37:B1:B1
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:44:57:d3:37:c6:79:78:f2:7d:2e:91:62:eb:e0:fd:16:8a:
33:bb:1a:94:65:c0:75:3f:f6:c8:e2:8c:50:82:d2:68:a8:eb:
a1:7a:ec:66:f2:bb:68:6d:3e:32:49:d9:03:01:2a:50:3a:30:
11:85:11:91:cb:1d:9a:35:a2:88:89:91:d6:45:aa:6b:8e:37:
c8:c2:f8:d2:f0:07:c9:a5:4d:a5:3a:4b:b4:54:5d:69:e0:dc:
38:6a:ea:aa:35:23:20:ce:60:38:1b:f6:96:ea:b8:cd:44:c5:
e1:76:fe:f6:1f:54:4b:bc:2c:99:bb:c0:1c:67:f4:07:6b:66:
72:76:0a:30:5b:06:c9:b1:6e:7d:5a:7c:df:08:ee:d9:e2:5d:
eb:2b:71:2d:99:97:69:b0:e9:45:bd:ee:3a:9a:0b:ed:f2:63:
a5:49:61:31:ab:d0:79:27:3f:65:7e:38:58:4d:22:62:1c:09:
81:83:31:8b:0e:89:5f:e2:36:2b:70:c1:2a:cc:ca:77:8a:ba:
f0:fc:4c:07:af:84:b4:8c:93:16:3f:85:63:fd:f0:18:f5:4d:
b7:6b:f6:f3:c1:13:7b:71:91:4e:04:55:6c:27:55:41:29:b1:
de:30:aa:96:ac:42:ee:d3:c1:f9:ab:f3:da:1d:3e:cd:9d:8e:
7a:d1:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:50 2026 by rpki-client