Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/byUQEvP_uehAGiL0Xx-YKvXAbM8.roa
File: byUQEvP_uehAGiL0Xx-YKvXAbM8.roa (raw, json)
Hash identifier: 69VfIf/rQuHl3PbBOD5/2gcIGyfbaratoIF1XThzBNA=
Subject key identifier: 6F:25:10:12:F3:FF:B9:E8:40:1A:22:F4:5F:1F:98:2A:F5:C0:6C:CF
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A09279BF4FAFF714298684002188049D42
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/byUQEvP_uehAGiL0Xx-YKvXAbM8.roa
Signing time: Fri 11 Sep 2026 21:57:27 +0000
ROA not before: Fri 11 Sep 2026 21:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 191.44.66.0/24 maxlen: 24
201.3.227.0/24 maxlen: 24
201.7.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:79:bf:4f:af:f7:14:29:86:84:00:21:88:04:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 11 21:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f251012f3ffb9e8401a22f45f1f982af5c06ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:6c:50:ee:66:39:c0:22:f8:ea:1a:c9:f5:
d5:8a:81:25:a3:ad:07:d0:9e:60:6a:da:00:37:17:
fc:cc:96:bd:fd:1e:98:40:a0:69:90:88:9b:ed:dd:
03:ac:f8:54:27:1e:fa:32:f5:2c:6b:0b:25:5a:58:
86:b8:bc:5a:3d:4e:44:1f:ad:12:8c:61:fc:09:b2:
df:86:72:56:7d:d1:05:4b:b8:71:bd:4d:4e:6c:a2:
9a:18:1e:28:29:da:a4:2e:92:6c:36:80:36:9d:ed:
5a:0e:5d:0a:62:9e:4d:15:59:86:ab:be:de:9c:11:
4c:3e:6c:89:cf:23:3f:1f:ca:00:d3:b2:09:70:28:
c5:62:3e:56:f8:7f:12:6a:7e:60:e5:f9:b9:7a:b9:
28:25:5c:79:1c:04:bd:18:50:ca:d9:ce:77:39:8a:
29:51:ef:41:8d:f0:5e:c3:dc:90:e4:4d:44:c6:cf:
51:ec:cd:82:8f:55:bf:c5:0a:db:43:69:f7:a0:72:
06:d5:6d:e7:b8:91:b0:df:93:d5:7f:9e:b0:8e:87:
34:fb:6a:b9:cb:5a:13:ed:bc:88:8a:80:d1:4a:a5:
35:63:2a:19:9a:38:08:b0:00:13:b6:1b:70:56:ba:
d1:74:fe:94:f4:c0:82:ef:5a:78:e6:74:8f:8f:52:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:25:10:12:F3:FF:B9:E8:40:1A:22:F4:5F:1F:98:2A:F5:C0:6C:CF
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/byUQEvP_uehAGiL0Xx-YKvXAbM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.66.0/24
201.3.227.0/24
201.7.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:6e:ce:ac:f4:cc:2b:63:f3:f1:e2:9a:d5:3f:a3:f9:46:02:
76:90:42:b1:21:15:a5:eb:b8:d8:de:67:5d:08:74:c7:93:eb:
d5:8a:82:39:fd:71:0e:e9:51:d8:f8:b5:19:13:ac:eb:68:6a:
b5:fc:b4:a4:ec:18:b1:9b:29:1b:3f:f3:48:be:45:3b:4a:1b:
7d:cc:4e:eb:87:24:dc:3d:3f:0a:d6:96:e4:33:bc:1a:14:3e:
d0:ad:c2:37:a5:03:6f:f3:33:61:a8:ea:c8:a1:4f:90:fa:f2:
35:58:63:d7:6f:09:2a:b0:2a:50:94:45:c4:2c:3f:41:22:aa:
24:c0:fb:6f:42:86:c9:83:99:11:c0:77:a8:69:5b:89:df:79:
fe:d7:ec:bb:fe:9d:43:0d:57:a8:11:c3:0f:a2:05:a8:7c:c7:
4f:da:2a:92:05:bb:14:ea:a0:b4:d8:89:04:0a:5d:fb:30:f3:
7f:42:61:c2:d2:8b:fb:1a:2b:ea:cb:a0:54:51:bf:e5:88:9d:
1f:21:59:9c:be:d1:8b:d7:c0:5a:f6:18:04:4a:6e:5e:53:e9:
c6:e4:e4:a9:31:93:10:d9:0b:6c:d2:22:1a:c8:7e:1f:76:c8:
06:23:c8:88:97:9b:3c:8d:78:45:d6:28:12:08:56:f5:74:55:
48:da:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:44:06 2026 by rpki-client