Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/X24SMyhhEzJhIEJZt8GBk865dy8.roa
File: X24SMyhhEzJhIEJZt8GBk865dy8.roa (raw, json)
Hash identifier: C99CiP9jroJvfjWkBUqNpUU1eE61i2kxw+mxk90HNok=
Subject key identifier: 5F:6E:12:33:28:61:13:32:61:20:42:59:B7:C1:81:93:CE:B9:77:2F
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DEE111165938768C364DA5879596AC0A5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/X24SMyhhEzJhIEJZt8GBk865dy8.roa
Signing time: Sun 03 May 2026 13:39:49 +0000
ROA not before: Sun 03 May 2026 13:39:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401896
IP address blocks: 191.44.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:11:11:65:93:87:68:c3:64:da:58:79:59:6a:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 3 13:39:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f6e12332861133261204259b7c18193ceb9772f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:cb:7d:0f:9c:4d:10:46:14:39:6f:0a:34:
dc:be:0a:b3:17:de:14:ba:50:7d:f4:57:5a:2a:e2:
78:37:45:a7:2f:88:c2:5f:1e:27:b5:2a:5b:be:fc:
c7:f2:a2:9b:48:bc:d8:ab:a4:fb:49:6f:d6:e5:49:
ae:ea:c3:be:f7:22:96:57:ef:ca:4c:22:08:5b:c5:
2f:04:3e:77:c9:d8:29:f4:f5:c0:e4:f3:34:c4:9d:
6e:ea:55:90:da:63:c0:16:ac:d1:96:a9:91:2b:2e:
30:6d:c1:3b:98:99:c7:96:11:ca:c8:44:89:0c:84:
ff:75:a8:6b:7e:c7:97:68:98:60:da:91:ab:0b:8c:
69:53:c0:52:ca:50:77:fe:d2:a6:92:0c:42:c6:b5:
d1:8b:f8:bc:66:dc:ac:fe:ac:de:80:5f:6c:ba:84:
72:45:19:3b:37:1b:62:4f:14:6b:3c:3d:0f:d3:87:
aa:3a:ab:c3:bd:88:77:e7:d9:ae:24:4f:eb:87:b7:
c9:54:89:ad:a8:e0:9d:9f:c9:d7:01:da:4e:26:0e:
7d:7c:c0:be:7a:a1:18:db:bc:9f:03:23:ab:96:5d:
f5:65:f2:87:47:7e:e7:39:e7:f2:b2:34:76:1c:9b:
07:be:ad:3f:7a:50:cf:75:11:21:a8:8c:a2:b3:cb:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:12:33:28:61:13:32:61:20:42:59:B7:C1:81:93:CE:B9:77:2F
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/X24SMyhhEzJhIEJZt8GBk865dy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.121.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ec:bb:ae:5d:31:db:48:b2:96:a5:e6:94:f4:1f:3c:1e:fa:
01:ba:16:40:5a:1f:37:e4:3c:c9:dd:4a:79:99:23:9d:42:99:
da:2d:32:fc:0e:1b:2d:03:f7:73:b9:ff:81:5f:f6:02:1f:62:
ea:62:87:f8:77:18:06:a3:e8:91:0d:cd:ff:53:d6:6c:5b:c6:
a6:28:21:8d:fc:2b:c3:43:4f:08:69:87:76:24:80:b4:80:20:
91:54:74:b8:ac:c4:b2:77:c9:9c:3c:ef:99:be:48:a6:1d:57:
f9:4f:dd:20:b3:80:ce:e0:4c:e6:96:98:cd:6e:9e:40:3a:ec:
63:94:d7:12:bf:fa:72:bb:e3:6a:b2:35:1c:97:cd:a1:f6:bd:
1c:15:92:4e:9c:49:41:e1:5f:87:3f:b8:f8:0a:ce:de:b8:b8:
36:ef:de:94:99:76:5d:85:7f:cc:da:30:cc:93:65:8e:6e:0e:
4e:a8:c7:14:72:8d:c1:e0:93:82:dd:2f:a4:06:7c:eb:48:4c:
35:6a:5c:14:10:2f:f4:48:d9:b8:7d:95:25:06:04:ca:04:de:
df:b9:4d:8d:ca:f1:c0:02:15:9b:d0:a1:0a:63:87:74:74:8d:
94:cd:ff:c7:0f:01:2b:c0:9c:72:d3:2a:29:1b:43:b8:0d:04:
9e:e8:08:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3uERFlk4dow2TaWHlZasClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNTAzMTMzOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjZlMTIzMzI4NjExMzMyNjEyMDQyNTliN2MxODE5M2NlYjk3NzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbPLfQ+cTRBGFDlvCjTcvgqzF94U
ulB99FdaKuJ4N0WnL4jCXx4ntSpbvvzH8qKbSLzYq6T7SW/W5Umu6sO+9yKWV+/K
TCIIW8UvBD53ydgp9PXA5PM0xJ1u6lWQ2mPAFqzRlqmRKy4wbcE7mJnHlhHKyESJ
DIT/dahrfseXaJhg2pGrC4xpU8BSylB3/tKmkgxCxrXRi/i8Ztys/qzegF9suoRy
RRk7NxtiTxRrPD0P04eqOqvDvYh359muJE/rh7fJVImtqOCdn8nXAdpOJg59fMC+
eqEY27yfAyOrll31ZfKHR37nOefysjR2HJsHvq0/elDPdREhqIyis8sRAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF9uEjMoYRMyYSBCWbfBgZPOuXcvMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvWDI0U015aGhFekpoSUVKWnQ4R0JrODY1ZHk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyx5MA0G
CSqGSIb3DQEBCwUAA4IBAQA57LuuXTHbSLKWpeaU9B88HvoBuhZAWh835DzJ3Up5
mSOdQpnaLTL8DhstA/dzuf+BX/YCH2LqYof4dxgGo+iRDc3/U9ZsW8amKCGN/CvD
Q08IaYd2JIC0gCCRVHS4rMSyd8mcPO+ZvkimHVf5T90gs4DO4EzmlpjNbp5AOuxj
lNcSv/pyu+NqsjUcl82h9r0cFZJOnElB4V+HP7j4Cs7euLg2796UmXZdhX/M2jDM
k2WObg5OqMcUco3B4JOC3S+kBnzrSEw1alwUEC/0SNm4fZUlBgTKBN7fuU2NyvHA
AhWb0KEKY4d0dI2Uzf/HDwErwJxy0yopG0O4DQSe6AjC
-----END CERTIFICATE-----
Generated at Wed May 13 18:04:57 2026 by rpki-client