Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/i5xD-UbCEeM5ZAYbfvYCcMyG_eE.roa
File: i5xD-UbCEeM5ZAYbfvYCcMyG_eE.roa (raw, json)
Hash identifier: B7zuZE2xmsqST7jy3mfgLfa3srVTK6yx1Xp5qVan3tA=
Subject key identifier: 8B:9C:43:F9:46:C2:11:E3:39:64:06:1B:7E:F6:02:70:CC:86:FD:E1
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F84C7CD70511720CC1E4691A724FE912C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/i5xD-UbCEeM5ZAYbfvYCcMyG_eE.roa
Signing time: Tue 21 Jul 2026 13:05:14 +0000
ROA not before: Tue 21 Jul 2026 13:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140469
IP address blocks: 201.3.124.0/24 maxlen: 24
201.3.125.0/24 maxlen: 24
201.3.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c7:cd:70:51:17:20:cc:1e:46:91:a7:24:fe:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 21 13:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b9c43f946c211e33964061b7ef60270cc86fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:fa:44:9d:97:64:af:87:96:8d:ce:85:5f:
2f:a2:8f:bb:b2:43:04:c9:c9:10:06:82:54:24:5f:
e5:fb:15:25:22:20:31:4d:dc:57:c6:0f:a1:f7:b4:
56:4a:a6:46:58:80:e4:a6:db:5f:88:26:99:7f:0d:
a6:9a:67:ed:de:0a:30:ce:97:19:84:94:0b:ff:2c:
8d:c4:a2:a3:2c:eb:22:3c:db:f0:42:1a:ab:c1:2a:
fb:03:65:a9:93:25:c3:2e:49:ef:75:6c:06:6f:be:
2f:71:38:dd:c5:11:70:c1:b6:fd:30:d6:5f:f8:f5:
27:63:7c:4d:34:8e:d4:29:f3:21:75:d4:98:1c:02:
73:6c:48:0c:fb:04:d0:bc:ee:4e:0c:65:92:10:a2:
39:34:fb:de:1e:a3:cf:01:2b:97:83:d6:08:13:f5:
d6:2d:44:29:27:6c:c5:34:aa:36:1d:9c:cd:f3:e6:
52:ef:b0:a8:2d:06:e2:79:da:fe:e4:8c:de:bf:2f:
ff:51:d7:66:07:00:9a:98:83:96:f2:7e:50:24:86:
75:35:32:fe:4b:50:9a:5c:eb:0b:41:ef:91:b9:6b:
11:b5:09:45:8a:56:c1:bc:00:6b:96:26:1a:c2:9d:
8c:43:c1:a0:03:fa:9a:0a:cf:f7:39:08:ce:2b:3e:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:43:F9:46:C2:11:E3:39:64:06:1B:7E:F6:02:70:CC:86:FD:E1
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/i5xD-UbCEeM5ZAYbfvYCcMyG_eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.124.0-201.3.126.255
Signature Algorithm: sha256WithRSAEncryption
82:60:01:12:e1:0f:9b:aa:70:63:11:51:fe:9f:85:24:8e:c9:
f6:50:6e:e9:f8:e0:26:6f:f9:f5:3e:10:60:a5:90:2d:b3:62:
a8:4f:7c:40:71:f9:be:60:41:bb:1a:c1:4e:1b:2a:94:e2:4f:
4f:0f:30:33:b7:29:a8:45:c4:e1:a9:f2:76:7e:85:fd:e1:89:
24:52:7d:3b:8b:5a:97:c8:89:da:3d:25:31:4e:a9:fd:c3:8e:
2e:b5:97:20:c5:3b:19:7b:7d:86:21:8a:56:b0:3a:85:69:bf:
68:13:f3:ec:9a:2c:c0:26:ba:56:55:73:1a:1b:8d:8f:46:08:
6d:1b:83:12:6a:b2:ea:1d:93:fd:99:a3:d2:df:05:63:62:cd:
80:29:9e:58:0a:69:21:3b:c6:20:b0:6f:b5:0e:e0:f9:de:ec:
fc:26:d3:14:d7:13:70:be:71:5e:aa:1f:f5:d4:b0:af:ba:de:
c9:4a:40:54:3a:41:bc:ae:ba:fa:92:ac:b5:36:0a:04:ba:2a:
85:07:ee:36:e7:46:06:a5:16:db:ae:3f:f2:54:ab:39:f4:3f:
de:ba:cf:3c:a0:2f:b3:38:1f:4a:11:da:2d:04:3a:58:e6:3a:
b8:07:89:00:6e:71:4d:dd:61:d8:25:de:7c:31:eb:be:96:19:
38:36:1c:04
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ+Ex81wURcgzB5Gkack/pEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNzIxMTMwNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjljNDNmOTQ2YzIxMWUzMzk2NDA2MWI3ZWY2MDI3MGNjODZmZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0H6RJ2XZK+Hlo3OhV8voo+7skME
yckQBoJUJF/l+xUlIiAxTdxXxg+h97RWSqZGWIDkpttfiCaZfw2mmmft3gowzpcZ
hJQL/yyNxKKjLOsiPNvwQhqrwSr7A2WpkyXDLknvdWwGb74vcTjdxRFwwbb9MNZf
+PUnY3xNNI7UKfMhddSYHAJzbEgM+wTQvO5ODGWSEKI5NPveHqPPASuXg9YIE/XW
LUQpJ2zFNKo2HZzN8+ZS77CoLQbiedr+5Izevy//UddmBwCamIOW8n5QJIZ1NTL+
S1CaXOsLQe+RuWsRtQlFilbBvABrliYawp2MQ8GgA/qaCs/3OQjOKz7fnQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIucQ/lGwhHjOWQGG372AnDMhv3hMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvaTV4RC1VYkNFZU01WkFZYmZ2WUNjTXlHX2VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALJA3wD
BADJA34wDQYJKoZIhvcNAQELBQADggEBAIJgARLhD5uqcGMRUf6fhSSOyfZQbun4
4CZv+fU+EGClkC2zYqhPfEBx+b5gQbsawU4bKpTiT08PMDO3KahFxOGp8nZ+hf3h
iSRSfTuLWpfIido9JTFOqf3Dji61lyDFOxl7fYYhilawOoVpv2gT8+yaLMAmulZV
cxobjY9GCG0bgxJqsuodk/2Zo9LfBWNizYApnlgKaSE7xiCwb7UO4Pne7Pwm0xTX
E3C+cV6qH/XUsK+63slKQFQ6QbyuuvqSrLU2CgS6KoUH7jbnRgalFtuuP/JUqzn0
P966zzygL7M4H0oR2i0EOljmOrgHiQBucU3dYdgl3nwx676WGTg2HAQ=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:55 2026 by rpki-client