Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/CT7CUpJmJPLajKgOQIFrWv5R9bI.roa
File: CT7CUpJmJPLajKgOQIFrWv5R9bI.roa (raw, json)
Hash identifier: kW/49sudv3kAXReOsUWamQV3RVaaDJfvruQZFjeF4XM=
Subject key identifier: 09:3E:C2:52:92:66:24:F2:DA:8C:A8:0E:40:81:6B:5A:FE:51:F5:B2
Certificate issuer: /CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Certificate serial: 019F4691BC7B8A0D9F5465AE51945562BB65
Authority key identifier: 26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/CT7CUpJmJPLajKgOQIFrWv5R9bI.roa
Signing time: Thu 09 Jul 2026 11:09:43 +0000
ROA not before: Thu 09 Jul 2026 11:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43700
IP address blocks: 185.254.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:91:bc:7b:8a:0d:9f:54:65:ae:51:94:55:62:bb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Validity
Not Before: Jul 9 11:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=093ec252926624f2da8ca80e40816b5afe51f5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:c7:45:c9:dd:d5:b8:9b:9c:03:7b:16:0a:
36:57:d4:0d:0f:6c:e0:7e:92:9e:01:ae:72:8a:ad:
2b:21:31:04:d1:75:dc:50:67:01:6e:55:fa:ac:47:
14:f1:e1:0b:d1:f3:5c:40:81:c4:17:31:af:c4:cc:
ed:66:b7:a8:d6:1f:bc:b3:06:41:10:79:c2:da:ea:
3b:7a:da:b1:ad:fb:94:cd:5d:4f:4d:a0:fe:c5:3c:
2a:aa:69:21:0b:17:d9:d3:b2:59:ab:4f:8a:69:93:
11:c7:ec:d6:49:5b:a2:f4:03:c8:7c:10:a6:34:cc:
bf:db:84:40:c5:a9:30:8e:f5:e6:fd:c0:30:b6:60:
c8:c6:d8:0c:37:7c:57:7b:88:40:21:e1:bb:34:b2:
57:2e:bb:55:72:bd:ea:af:1e:af:01:97:25:49:6a:
2e:18:82:58:e3:08:eb:a4:4a:ae:15:5f:15:3b:4d:
cb:54:aa:7d:b4:d8:b7:c3:35:bb:60:55:de:5f:d2:
26:7b:bb:2a:68:81:28:b8:06:ba:12:05:38:e2:3e:
81:75:64:4b:e6:0c:f9:d1:7b:9b:0d:8e:e4:7e:24:
a9:f0:09:9e:28:e0:91:ff:65:3d:ca:6a:48:a6:1b:
83:7a:96:c4:e2:fc:90:01:f9:f9:49:20:c5:59:c5:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3E:C2:52:92:66:24:F2:DA:8C:A8:0E:40:81:6B:5A:FE:51:F5:B2
X509v3 Authority Key Identifier:
keyid:26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/CT7CUpJmJPLajKgOQIFrWv5R9bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.44.0/22
Signature Algorithm: sha256WithRSAEncryption
70:90:64:9e:58:30:21:32:e8:65:e1:70:34:7b:c4:01:db:a2:
a9:8e:ee:68:73:f1:c3:fc:4c:2d:8f:0b:e9:e3:ea:c2:f1:7c:
6c:a6:fe:e0:4a:84:6c:2b:be:dc:8d:f0:63:bc:1a:23:0f:f1:
a4:2d:05:80:93:cb:44:55:72:60:85:0e:ee:6e:74:a8:1c:bc:
25:49:60:99:5f:ef:d1:80:26:4b:8d:b1:38:b9:a2:4a:0e:b6:
5f:c1:de:ff:07:4d:13:1c:bf:a2:82:c4:0c:b3:46:89:4b:2f:
9d:46:8b:d3:0b:a6:2c:7e:8a:c0:73:bd:d3:b9:d7:3b:cf:b5:
70:88:ff:f4:cf:33:5f:91:b8:98:fb:d8:d5:44:3f:3b:9b:f7:
ea:a1:09:12:b1:03:4e:8e:e0:a9:d7:45:5b:01:a3:b5:57:ee:
cb:89:56:00:29:9b:01:d9:21:45:90:23:2d:60:64:69:2f:58:
f5:c7:12:c5:93:55:cd:3a:1b:95:38:ba:9c:84:5b:e2:e6:a6:
44:80:ca:2a:3d:7e:22:c8:b0:73:de:ba:11:6c:60:99:1a:0c:
16:2e:6c:cd:dc:b4:d0:2c:d0:75:6d:68:50:6d:8e:ab:59:8b:
ae:3d:5d:9a:db:e9:3f:52:2a:6d:e4:83:3d:3b:fd:80:bf:b4:
b1:d5:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:37 2026 by rpki-client