Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/muPWE_3xduyBwxC7K8xvGwjtHOo.roa
File: muPWE_3xduyBwxC7K8xvGwjtHOo.roa (raw, json)
Hash identifier: 9EbXo8tYziInu+WsdlQoRAdnNi0wAKV6caIvMW4pyl8=
Subject key identifier: 9A:E3:D6:13:FD:F1:76:EC:81:C3:10:BB:2B:CC:6F:1B:08:ED:1C:EA
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E06C299612CAF5FC0B13774464459DCED
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/muPWE_3xduyBwxC7K8xvGwjtHOo.roa
Signing time: Fri 08 May 2026 08:44:37 +0000
ROA not before: Fri 08 May 2026 08:44:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201741
IP address blocks: 191.44.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:c2:99:61:2c:af:5f:c0:b1:37:74:46:44:59:dc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 8 08:44:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ae3d613fdf176ec81c310bb2bcc6f1b08ed1cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:40:09:df:ca:20:46:73:45:06:fa:45:93:
c4:cd:9d:5a:4f:42:6b:93:73:01:e6:e7:84:47:0a:
b8:cb:ed:0e:10:65:b9:6d:a5:4a:71:8f:8e:2a:8f:
ba:b5:00:df:36:1f:ea:76:37:2f:9e:04:6e:b7:13:
fa:48:f1:64:72:9a:6d:04:61:26:cf:6c:f2:2e:df:
e2:68:43:75:6c:38:a9:e6:6f:bf:28:d1:ec:b2:b5:
f9:44:a3:c4:c2:11:0d:9c:c5:e8:b2:1b:f8:6a:2b:
a9:3a:ed:28:60:fe:a4:ad:d2:c4:09:80:e5:bc:fd:
f5:c7:be:af:f5:aa:1a:eb:6f:75:68:0a:a0:b0:b5:
a7:a0:53:62:46:50:b2:e0:31:f1:1d:df:74:35:fa:
80:68:8f:0b:68:1b:95:ab:d5:6c:27:79:f9:18:12:
83:1b:2f:d9:4c:d3:44:4a:5c:08:f6:15:98:1f:91:
32:f5:8c:c1:b8:02:ac:41:72:12:b4:78:69:60:e4:
9f:72:22:9c:e1:1d:a3:e1:42:0c:b2:3e:b6:c5:e2:
32:93:ce:a7:01:3f:46:b0:72:90:d0:29:dc:40:57:
96:d9:28:12:78:31:c3:d4:60:07:27:01:8c:e0:41:
1a:ad:e1:64:ab:84:ff:f6:8d:fc:c6:22:15:ee:e1:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E3:D6:13:FD:F1:76:EC:81:C3:10:BB:2B:CC:6F:1B:08:ED:1C:EA
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/muPWE_3xduyBwxC7K8xvGwjtHOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:89:0c:f4:c7:0e:1f:da:51:4b:d8:85:4e:3a:bd:2a:97:ec:
3c:c4:a2:43:58:1e:43:53:49:f2:e2:ad:81:d7:30:34:be:2a:
c9:4a:1b:60:55:76:7c:a2:66:18:83:66:28:d4:0c:6b:d1:3c:
5b:d5:69:87:ed:db:1b:71:fe:87:d2:2b:aa:ac:ea:61:da:eb:
85:84:90:87:b0:41:30:88:67:93:f6:7e:2a:bb:97:ac:b4:56:
fd:8e:74:1c:22:92:56:e6:9d:4a:07:7b:7c:96:21:7e:8a:ff:
b2:7c:b8:ce:1c:ee:a4:bd:4e:b3:e1:4d:8c:02:b5:6d:7b:e1:
4b:4a:3e:f9:13:56:db:b1:3d:fc:43:8f:a6:b8:ce:c0:2d:2e:
66:ab:cf:03:74:80:36:a9:02:32:98:94:8b:72:f3:20:c2:a2:
7d:e8:e7:43:39:6e:8d:05:e2:c8:ec:48:ce:81:96:2b:8e:7d:
bb:d4:c6:66:e6:ba:04:40:77:19:57:c3:a8:b7:37:e0:ca:83:
27:ed:c8:c5:e4:e0:6a:e4:e9:97:30:d7:13:c9:da:e8:b3:34:
39:b4:76:1d:cc:5d:4f:5e:05:20:37:63:6d:53:a8:a3:e4:4d:
91:c9:03:bf:5b:2e:7f:62:e3:7e:54:e5:32:4e:f2:47:0f:e1:
36:6e:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:28:00 2026 by rpki-client