Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/bc5e8d-b3c2-4a06-9dce-3bd2d367d49e/1/ctCu_7Yo9mMRVDFTphE9nbr8avI.roa
File: ctCu_7Yo9mMRVDFTphE9nbr8avI.roa (raw, json)
Hash identifier: wMmJ2Y7jfygGvMY5GSS04oJ15EGDFkS/vg9w8jgMPPw=
Subject key identifier: 72:D0:AE:FF:B6:28:F6:63:11:54:31:53:A6:11:3D:9D:BA:FC:6A:F2
Certificate issuer: /CN=79813223b3dfdade5062fa96bcbca9b79be455e3
Certificate serial: 01A1B05101CB2E708019D59A9EDEC1F85851
Authority key identifier: 79:81:32:23:B3:DF:DA:DE:50:62:FA:96:BC:BC:A9:B7:9B:E4:55:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYEyI7Pf2t5QYvqWvLypt5vkVeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bc5e8d-b3c2-4a06-9dce-3bd2d367d49e/1/ctCu_7Yo9mMRVDFTphE9nbr8avI.roa
Signing time: Fri 06 Nov 2026 10:04:21 +0000
ROA not before: Fri 06 Nov 2026 10:04:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56595
IP address blocks: 193.201.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bc5e8d-b3c2-4a06-9dce-3bd2d367d49e/1/eYEyI7Pf2t5QYvqWvLypt5vkVeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bc5e8d-b3c2-4a06-9dce-3bd2d367d49e/1/eYEyI7Pf2t5QYvqWvLypt5vkVeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYEyI7Pf2t5QYvqWvLypt5vkVeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:51:01:cb:2e:70:80:19:d5:9a:9e:de:c1:f8:58:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79813223b3dfdade5062fa96bcbca9b79be455e3
Validity
Not Before: Nov 6 10:04:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72d0aeffb628f66311543153a6113d9dbafc6af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:f0:04:e9:35:0b:6c:88:5a:5d:11:bc:d8:
62:7b:7a:c8:4c:d4:ae:dd:f0:7a:db:5f:9e:30:93:
e4:8b:67:e2:fc:cd:5e:f1:a3:6c:6d:c6:37:95:00:
f5:f2:15:66:f1:14:f9:8e:7c:56:2d:17:7b:1a:a0:
ac:59:21:aa:b0:14:b7:3d:ff:64:76:2c:1a:51:70:
70:cb:42:37:3a:cd:62:38:10:7c:a0:c7:7e:0f:d0:
f3:76:94:13:52:04:7e:34:7c:2f:eb:c8:d1:99:c7:
f3:12:49:30:89:4e:fb:71:16:23:59:af:78:78:e0:
65:2e:7e:6c:52:83:c0:fc:09:42:ef:51:b4:1d:21:
ff:8b:41:1e:ae:ad:77:dd:e5:ce:a3:c2:ee:e1:7c:
44:27:59:0d:0f:28:87:cd:9b:03:62:7c:c7:d2:d4:
18:53:14:64:aa:a9:c6:9f:66:23:e0:9e:7c:c3:ef:
ce:99:ca:5c:4b:ff:c7:53:90:80:dc:2d:48:f3:94:
5c:9f:e9:04:ae:c6:b7:2b:9c:c2:58:ca:4d:8f:81:
d8:42:2e:e6:bd:a2:35:7d:b0:1a:0b:51:d4:c2:1e:
40:2b:44:2c:da:f8:5c:21:43:b3:15:25:26:56:64:
2a:e1:b1:f1:4e:03:67:da:4f:5f:31:02:34:44:24:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D0:AE:FF:B6:28:F6:63:11:54:31:53:A6:11:3D:9D:BA:FC:6A:F2
X509v3 Authority Key Identifier:
keyid:79:81:32:23:B3:DF:DA:DE:50:62:FA:96:BC:BC:A9:B7:9B:E4:55:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYEyI7Pf2t5QYvqWvLypt5vkVeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc5e8d-b3c2-4a06-9dce-3bd2d367d49e/1/ctCu_7Yo9mMRVDFTphE9nbr8avI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc5e8d-b3c2-4a06-9dce-3bd2d367d49e/1/eYEyI7Pf2t5QYvqWvLypt5vkVeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.64.0/23
Signature Algorithm: sha256WithRSAEncryption
07:d8:17:7f:8a:63:2f:40:c3:2d:f1:b6:5b:10:ba:14:33:41:
f7:2d:16:8d:ce:03:21:f4:02:9c:d2:2b:e3:6a:8b:65:d8:24:
5d:f1:09:44:1f:eb:9d:04:47:c7:dd:db:7b:ab:c8:5d:f4:aa:
da:38:d1:e9:f7:65:1d:d9:18:c2:97:3f:15:04:75:27:92:c6:
f2:b7:df:ee:94:84:6b:52:7d:0f:0c:79:72:9c:8a:ce:7d:25:
5a:01:5d:ae:a6:d5:ac:42:f9:78:57:a3:14:48:df:ab:f9:92:
a0:55:d5:5b:7e:fd:24:bf:44:1f:0e:17:9d:91:77:ad:48:ae:
d9:de:0d:2e:53:5a:06:82:dd:31:7a:01:db:c5:45:bc:42:17:
ae:b5:73:f0:3a:07:9a:6a:1c:47:25:c9:a6:be:b7:c8:c4:15:
26:3a:c5:0c:3f:b1:9d:e2:72:a3:09:db:fe:e2:d9:12:fc:d4:
ed:a8:75:cf:48:f6:93:5e:d6:b4:3f:a9:4e:6e:3e:b9:bf:14:
59:e5:a5:aa:83:f2:2a:96:c8:0a:b6:2d:f9:fd:90:83:0a:4a:
f1:06:ba:bd:78:09:cd:be:f8:d2:39:a6:38:25:48:30:95:a8:
88:5e:af:14:2a:a4:b5:39:00:78:83:25:e6:b7:48:2f:50:2b:
ae:e4:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:12:05 2026 by rpki-client