Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/43fr0bjJ5ROcWmZv4cWGOKe6iAM.roa
File: 43fr0bjJ5ROcWmZv4cWGOKe6iAM.roa (raw, json)
Hash identifier: 0avprymNeUudEwmWC7hx2NwOiVDcL07wZUkru6MxbtE=
Subject key identifier: E3:77:EB:D1:B8:C9:E5:13:9C:5A:66:6F:E1:C5:86:38:A7:BA:88:03
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DCA060A80CA34C67C82F879AC803D41C3
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/43fr0bjJ5ROcWmZv4cWGOKe6iAM.roa
Signing time: Sun 26 Apr 2026 13:41:26 +0000
ROA not before: Sun 26 Apr 2026 13:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 191.44.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:06:0a:80:ca:34:c6:7c:82:f8:79:ac:80:3d:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 26 13:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e377ebd1b8c9e5139c5a666fe1c58638a7ba8803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:de:46:3d:35:b3:4a:3c:2d:e3:05:b8:be:
36:b0:77:21:3d:21:24:92:8c:fb:ff:60:38:97:9e:
75:17:8f:4e:2d:a2:07:97:00:ef:99:9b:81:55:fe:
17:c0:ef:4b:1a:64:09:f9:2a:42:bb:bb:d2:64:23:
d0:6e:3a:18:9d:dd:21:19:33:0f:fe:64:74:14:75:
01:63:36:f0:cc:d5:52:39:74:d0:31:e6:3b:68:34:
d9:0f:b7:2a:2e:06:b6:c6:f2:e9:2a:7f:47:c8:d1:
b8:f6:e2:a0:dc:5e:17:16:7f:c6:98:e0:7a:ed:87:
51:aa:e5:35:10:55:11:cc:c4:4c:d4:58:1b:3b:69:
d6:9c:27:ae:a1:1c:33:e4:ca:43:9c:e6:45:f1:5b:
25:be:c7:1b:50:4a:91:1e:f3:d5:cb:4a:8f:19:f1:
d5:bc:94:04:80:7f:b3:10:ed:ab:e6:bf:7f:42:d5:
22:77:8d:8f:7e:7d:3d:1b:34:0b:a4:f7:ce:db:c7:
a5:fb:ba:b0:18:21:e4:d6:3a:82:89:65:01:89:c5:
0c:41:e9:37:b1:76:0b:1c:07:5c:50:98:26:2e:b5:
66:da:41:f0:ec:c5:f7:75:0c:3e:b5:e8:aa:ea:d5:
61:ae:b8:ce:45:9a:5f:ca:f7:ad:19:f5:fc:cb:a9:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:77:EB:D1:B8:C9:E5:13:9C:5A:66:6F:E1:C5:86:38:A7:BA:88:03
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/43fr0bjJ5ROcWmZv4cWGOKe6iAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:24:80:18:0b:3c:78:c1:59:bf:97:bb:1d:c9:4f:44:15:a8:
81:3d:67:f0:8e:15:64:e4:e5:8a:bb:09:7c:85:92:ed:40:6f:
7e:01:41:50:5c:c4:68:18:44:74:2d:58:a3:d6:40:e7:2e:f8:
2c:0e:07:b2:c5:d0:fc:8f:23:9c:37:e1:f8:c1:38:24:35:79:
71:6b:1d:23:8d:98:4b:78:05:d0:e8:3c:86:05:d8:13:ba:2d:
e0:0c:22:2e:ba:7f:fa:73:78:45:37:b8:a2:bc:27:a3:33:f2:
32:22:e2:37:f0:4d:fb:fb:0b:7e:29:a0:52:ae:16:8b:d1:14:
24:b9:ef:a2:79:1f:95:cf:0a:9f:36:9b:d1:8b:28:16:92:b9:
73:52:dd:97:99:c5:0d:da:c8:b9:e2:20:08:2a:46:cd:0a:1b:
3a:3a:a9:19:5c:e8:0d:e2:87:a7:4c:7c:ea:dd:fe:00:9a:f8:
04:4b:6c:19:c4:55:c9:3a:79:d5:3f:c5:ee:30:fa:57:59:6d:
e4:77:bd:5e:b1:04:95:51:16:b8:55:d1:ae:07:aa:61:d3:5e:
49:b7:cc:78:63:08:17:f7:22:64:9d:12:42:c6:00:ff:c6:dc:
d5:bb:37:c5:e9:18:07:63:2e:89:6f:96:76:83:a3:51:fe:bb:
98:c0:83:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3KBgqAyjTGfIL4eayAPUHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNDI2MTM0MTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzc3ZWJkMWI4YzllNTEzOWM1YTY2NmZlMWM1ODYzOGE3YmE4ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN3eRj01s0o8LeMFuL42sHchPSEk
koz7/2A4l551F49OLaIHlwDvmZuBVf4XwO9LGmQJ+SpCu7vSZCPQbjoYnd0hGTMP
/mR0FHUBYzbwzNVSOXTQMeY7aDTZD7cqLga2xvLpKn9HyNG49uKg3F4XFn/GmOB6
7YdRquU1EFURzMRM1FgbO2nWnCeuoRwz5MpDnOZF8VslvscbUEqRHvPVy0qPGfHV
vJQEgH+zEO2r5r9/QtUid42Pfn09GzQLpPfO28el+7qwGCHk1jqCiWUBicUMQek3
sXYLHAdcUJgmLrVm2kHw7MX3dQw+teiq6tVhrrjORZpfyvetGfX8y6ktiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFON369G4yeUTnFpmb+HFhjinuogDMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvNDNmcjBiako1Uk9jV21adjRjV0dPS2U2aUFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxaMA0G
CSqGSIb3DQEBCwUAA4IBAQAeJIAYCzx4wVm/l7sdyU9EFaiBPWfwjhVk5OWKuwl8
hZLtQG9+AUFQXMRoGER0LVij1kDnLvgsDgeyxdD8jyOcN+H4wTgkNXlxax0jjZhL
eAXQ6DyGBdgTui3gDCIuun/6c3hFN7iivCejM/IyIuI38E37+wt+KaBSrhaL0RQk
ue+ieR+VzwqfNpvRiygWkrlzUt2XmcUN2si54iAIKkbNChs6OqkZXOgN4oenTHzq
3f4AmvgES2wZxFXJOnnVP8XuMPpXWW3kd71esQSVURa4VdGuB6ph015Jt8x4YwgX
9yJknRJCxgD/xtzVuzfF6RgHYy6Jb5Z2g6NR/ruYwIM8
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:57 2026 by rpki-client