Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/E91WWpvV4lXyHffMSvxfdSrUDmM.roa
File: E91WWpvV4lXyHffMSvxfdSrUDmM.roa (raw, json)
Hash identifier: 90O/a7wAtjyEacehoZ42dp670UixAdI1/EBuf87GSBI=
Subject key identifier: 13:DD:56:5A:9B:D5:E2:55:F2:1D:F7:CC:4A:FC:5F:75:2A:D4:0E:63
Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial: 019CD69B5828DFB8A42F588BBEBE666539DC
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/E91WWpvV4lXyHffMSvxfdSrUDmM.roa
Signing time: Tue 10 Mar 2026 07:17:10 +0000
ROA not before: Tue 10 Mar 2026 07:17:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200642
IP address blocks: 2001:678:1188::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:9b:58:28:df:b8:a4:2f:58:8b:be:be:66:65:39:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Validity
Not Before: Mar 10 07:17:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13dd565a9bd5e255f21df7cc4afc5f752ad40e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:16:df:61:06:4b:ee:9f:f0:5f:e0:8c:88:
28:bd:5a:3e:31:a5:fe:0b:82:5f:44:20:37:ad:ae:
1c:dc:08:9e:5d:5a:e7:7b:da:95:b5:b6:58:e1:ea:
56:03:37:ce:35:57:77:a7:5b:8c:5d:03:d6:a9:1a:
da:3d:47:02:3b:c2:4b:e4:2c:c2:e3:f9:f3:86:6b:
bd:71:fa:5c:a9:e7:d1:a2:31:5c:a2:89:2c:49:47:
f1:2d:32:c4:fa:ae:16:e7:1d:ad:76:a6:d3:74:fb:
4c:ef:83:8b:58:78:49:67:34:b9:bd:77:3a:a7:f0:
2f:cb:fe:ac:59:fe:be:bb:09:4d:d7:ad:7b:9f:c0:
48:d3:e4:ce:13:56:32:b4:14:c9:6d:d5:b9:b9:a3:
d1:88:34:6f:13:d2:50:50:0a:9f:cc:9a:a9:a7:32:
b1:6e:6c:18:1a:58:61:71:6f:df:c9:67:c4:79:e5:
2f:42:de:ee:55:46:2a:52:12:c4:3f:0e:91:2c:e3:
e6:56:a1:28:03:90:9f:af:0c:3b:10:a5:a3:8c:f2:
ec:5c:18:89:21:ab:6c:31:88:90:9c:38:c6:bd:01:
ad:fb:ad:f2:fa:ae:70:a5:cd:af:13:98:0a:b3:da:
f1:ea:d0:42:f5:53:34:2a:f7:52:ea:bb:87:7b:24:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:56:5A:9B:D5:E2:55:F2:1D:F7:CC:4A:FC:5F:75:2A:D4:0E:63
X509v3 Authority Key Identifier:
keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/E91WWpvV4lXyHffMSvxfdSrUDmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1188::/48
Signature Algorithm: sha256WithRSAEncryption
8b:eb:45:92:08:a2:a2:58:97:18:d2:63:9d:a0:3d:c0:3c:ef:
9f:83:2f:93:4d:ce:c6:29:03:6e:64:7e:31:5f:26:d6:e3:4d:
e0:9d:04:c8:8c:84:6d:11:0a:70:9f:9d:73:db:84:d5:0b:4b:
b0:06:3f:65:46:ac:36:1c:e3:dc:56:58:03:15:70:05:45:ad:
10:69:fe:95:eb:6e:75:29:6b:e4:6c:84:9b:60:e2:f2:ae:fc:
4e:6e:37:59:bc:eb:81:14:71:f7:60:d9:8e:ef:68:0d:dd:ad:
7c:de:1b:4f:bd:b1:41:a9:a1:2e:d9:6c:5d:4e:1d:d4:11:38:
6d:02:af:a2:8b:e2:3f:8d:21:44:3c:df:d3:d7:29:3b:0a:a8:
3a:e5:b7:dc:3a:c8:52:38:7c:d5:6c:3b:ed:61:c9:52:5c:40:
4a:1a:43:2a:ad:2c:19:5e:1b:e4:e2:c8:41:3e:10:43:d6:0d:
e7:b3:b3:26:ee:ff:f1:91:90:1a:e7:38:d2:61:7f:35:c9:c3:
cb:48:da:42:40:3b:27:d9:14:6b:5a:06:21:3c:a2:ff:f9:a3:
e5:e6:1c:20:8b:71:1e:66:4b:12:00:76:d4:fe:c7:64:03:23:
dc:37:20:61:d8:b6:ee:91:a8:b3:93:0f:0d:ee:f7:5c:c2:7f:
2e:a3:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:13:51 2026 by rpki-client