Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/uArW2QBB9WWITmD2t8GU9MA69Ys.roa
File: uArW2QBB9WWITmD2t8GU9MA69Ys.roa (raw, json)
Hash identifier: 4Oj8loxtCPgu8qyShbSYtCC86K8VuqWbloZWByjMYKs=
Subject key identifier: B8:0A:D6:D9:00:41:F5:65:88:4E:60:F6:B7:C1:94:F4:C0:3A:F5:8B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A12CBA647F84767333A169691B66AAA4FE
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/uArW2QBB9WWITmD2t8GU9MA69Ys.roa
Signing time: Sun 11 Oct 2026 20:49:35 +0000
ROA not before: Sun 11 Oct 2026 20:49:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141750
IP address blocks: 191.44.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:ba:64:7f:84:76:73:33:a1:69:69:1b:66:aa:a4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 11 20:49:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b80ad6d90041f565884e60f6b7c194f4c03af58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:ae:42:65:38:4b:43:13:78:32:7b:d1:25:
63:2c:06:65:77:f9:e3:49:7d:19:c7:0e:74:74:b1:
2e:4d:42:96:01:5e:6f:12:0a:17:5b:4f:d5:69:60:
27:fa:9f:94:17:c3:cc:5a:b1:fc:19:46:3d:ac:a7:
39:3d:f6:ca:77:53:2b:7d:2b:21:ca:1a:26:f5:ec:
b8:62:96:5b:05:d9:1a:3a:d6:ca:9d:cf:5c:c4:95:
b4:3d:8e:89:c6:82:bb:0a:32:d0:36:76:f8:9d:38:
d4:a8:24:ef:76:5f:f8:82:e5:5b:a7:20:a5:64:86:
6e:c2:45:22:ab:a6:69:2b:10:ab:65:7f:56:92:b0:
c9:99:32:32:11:33:01:06:99:12:f5:4e:68:8f:4b:
82:cd:de:53:64:f6:7d:f6:2b:38:55:3c:22:9f:5f:
e5:1b:4b:3d:3f:de:d4:dc:83:bb:80:50:5e:93:c9:
16:88:73:4a:6a:24:8c:c7:1c:a9:e7:df:ce:c8:f6:
86:48:cc:e8:1b:27:ae:84:2f:ce:d5:09:5a:57:86:
57:ba:fc:51:2a:20:54:01:12:7a:12:6b:63:0c:a8:
6f:5d:7c:c1:05:fa:c3:b8:2d:cc:83:0b:1b:7f:b7:
9f:f8:bc:e8:2d:87:f4:d1:e4:99:cc:98:c8:50:72:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:D6:D9:00:41:F5:65:88:4E:60:F6:B7:C1:94:F4:C0:3A:F5:8B
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/uArW2QBB9WWITmD2t8GU9MA69Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.98.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:63:e5:b8:10:38:da:ab:5a:a8:9c:0a:10:28:d2:9b:0f:ee:
b0:4e:c6:b3:98:8e:97:a4:66:ce:5d:1f:7b:6b:12:44:9c:72:
47:47:29:3f:11:dc:e6:62:24:59:e8:05:43:12:d3:cb:ab:f7:
c5:2d:a0:f1:a8:88:32:58:97:07:a0:d9:48:b1:05:2d:55:ea:
48:c8:58:d6:65:5b:9b:44:6c:d0:20:92:8c:44:81:e5:41:d8:
50:f6:3a:d9:43:e1:ce:69:01:a1:70:d1:2c:4a:bf:a2:23:e4:
3a:75:30:92:89:0b:2c:eb:30:05:d8:ee:35:7d:5b:f7:86:eb:
a7:dd:15:5c:71:94:63:27:b9:df:6e:35:f2:68:4c:1e:35:e0:
85:1d:86:3b:42:bb:86:cf:6d:02:59:86:31:b7:7e:b0:31:35:
3b:d9:72:8f:6f:9f:f1:2e:3f:e4:5e:cd:8e:4d:5a:75:ca:89:
1d:54:cc:af:72:85:2f:1e:10:2f:64:80:29:74:fe:39:14:3f:
8e:f6:46:9e:25:f6:d6:0a:75:69:16:20:d8:52:7e:be:11:13:
19:ad:5d:67:cf:4e:7c:1d:b8:ae:d6:6b:2d:c2:20:f0:cc:2e:
2a:41:04:86:8e:ae:e0:65:e7:eb:90:7b:8f:10:50:a7:06:a0:
d1:34:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:23:17 2026 by rpki-client