Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6P3-4YK9QeEE0oZT06pEweWT8co.roa
File: 6P3-4YK9QeEE0oZT06pEweWT8co.roa (raw, json)
Hash identifier: o0rAyUZr5noVwGqS3zuNM7Dp7MTAXKOBH68gBB9os6g=
Subject key identifier: E8:FD:FE:E1:82:BD:41:E1:04:D2:86:53:D3:AA:44:C1:E5:93:F1:CA
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F8943DF67008D437AD3896B90D7FA3DE5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6P3-4YK9QeEE0oZT06pEweWT8co.roa
Signing time: Wed 22 Jul 2026 09:59:14 +0000
ROA not before: Wed 22 Jul 2026 09:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197450
IP address blocks: 191.44.93.0/24 maxlen: 24
191.44.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:43:df:67:00:8d:43:7a:d3:89:6b:90:d7:fa:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 22 09:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8fdfee182bd41e104d28653d3aa44c1e593f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:c9:a3:70:d2:68:d1:7b:4e:09:cc:a2:90:
61:43:ae:2f:cb:b5:91:61:ad:8f:b4:3c:7a:c1:49:
fd:b4:84:30:3f:45:c6:e9:04:81:bc:4a:a2:a6:d8:
6e:02:44:00:6f:96:32:1c:8f:bc:8b:ef:be:30:6a:
02:58:be:5a:50:49:56:89:52:6a:8c:56:61:d2:42:
ba:e8:c7:a5:5c:f9:27:39:a9:27:34:56:3a:9a:1b:
0d:c2:c0:bb:39:60:7a:58:dd:87:65:3e:c9:e0:b5:
da:f6:70:90:17:db:28:80:9f:6d:c6:a6:e5:69:aa:
41:84:b3:71:a8:df:5e:c9:de:2d:b6:45:4b:07:bb:
ac:7a:cd:f6:7e:76:62:7f:c2:4a:1c:3b:21:0c:62:
7c:75:4b:b0:90:5d:6f:9d:d9:20:0f:60:d1:7a:97:
bf:3c:37:7c:52:75:c6:36:de:14:50:1a:49:2c:0c:
35:23:82:e2:af:3e:e6:a2:18:a3:02:e0:73:8d:9c:
ed:75:2c:fb:6a:d1:62:2e:e1:f0:6b:22:7a:ca:6e:
ca:5b:cf:70:ff:e1:a2:dd:6d:e5:66:fc:cb:59:a3:
13:31:8a:ba:23:04:b6:70:85:2b:86:79:73:9c:6e:
ed:10:49:4b:93:f4:be:b7:a4:a8:78:e4:a9:71:e5:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:FE:E1:82:BD:41:E1:04:D2:86:53:D3:AA:44:C1:E5:93:F1:CA
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/6P3-4YK9QeEE0oZT06pEweWT8co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.93.0-191.44.94.255
Signature Algorithm: sha256WithRSAEncryption
47:67:04:9b:42:d9:d2:e8:bb:28:88:29:54:47:e2:40:ff:a6:
3a:a5:a9:e0:fc:2f:ea:d5:69:ef:5c:13:2a:66:a3:38:e2:b6:
fe:15:1e:71:22:34:30:37:d3:9c:73:18:70:b4:a9:93:60:05:
d8:35:e1:fa:68:9b:7c:39:52:8c:e6:96:59:dc:f9:6b:98:40:
c1:ce:4a:a5:a1:97:22:78:ee:f8:1f:c5:54:63:bd:2c:5e:2a:
81:56:de:9e:f3:5d:87:89:76:ae:ab:22:d0:1a:4e:ae:aa:79:
a0:e5:10:31:49:5e:a9:cf:6a:19:18:d5:7a:d4:0b:ac:04:b3:
b4:bf:3d:21:12:95:45:ea:93:46:87:95:5a:2c:09:5a:7e:b3:
bd:71:ab:ac:d4:a0:ce:10:ea:21:7d:d8:9a:2a:e7:9b:4c:83:
79:38:55:0b:6c:34:7b:60:d1:28:d7:c7:ed:e1:7f:2e:3b:fd:
4f:3f:73:6e:8f:fc:24:73:b6:10:9c:21:da:8b:39:3e:2c:89:
db:07:6e:f6:0b:9b:f0:5f:b3:bf:ba:2a:c6:81:b3:a2:ab:68:
c0:92:91:3f:bf:59:3a:63:1b:b1:f4:b4:06:f0:08:51:de:97:
29:16:fe:0c:eb:50:14:0b:71:a8:d7:74:f1:4c:4d:a6:ae:f1:
7b:a1:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:46:06 2026 by rpki-client