Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/vVhOUqARNjovz5jkg5snO_Z_3Hw.roa
File: vVhOUqARNjovz5jkg5snO_Z_3Hw.roa (raw, json)
Hash identifier: WXpbuR53+rhANJCw2X5TVSj1FGwHpiMpo8VNtz6KwuY=
Subject key identifier: BD:58:4E:52:A0:11:36:3A:2F:CF:98:E4:83:9B:27:3B:F6:7F:DC:7C
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0D28D636FF57AB2062BC08EEFB4D1A54D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/vVhOUqARNjovz5jkg5snO_Z_3Hw.roa
Signing time: Thu 24 Sep 2026 08:34:36 +0000
ROA not before: Thu 24 Sep 2026 08:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 191.44.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:8d:63:6f:f5:7a:b2:06:2b:c0:8e:ef:b4:d1:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 24 08:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd584e52a011363a2fcf98e4839b273bf67fdc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:eb:ad:e2:9f:2c:ea:3f:7b:67:40:87:d8:
e5:c4:91:30:5d:ee:f0:f4:85:3c:a3:c6:06:ad:f2:
fe:0e:d7:3f:45:e3:68:3e:50:15:1e:c3:04:b6:d2:
0f:1a:ad:5d:55:4e:bc:ff:85:be:55:60:1a:45:a9:
57:6c:cf:54:15:87:65:f2:fa:63:6b:ee:c8:b1:66:
6f:4c:3a:08:95:d4:0b:2e:65:f3:24:4b:50:1e:c1:
e8:bf:bf:b1:ef:ec:f4:b4:20:60:01:5d:5f:f6:80:
23:9c:e4:88:2c:ef:8c:e3:19:75:df:48:fc:4d:20:
c5:d7:02:87:57:cb:6f:9c:98:e7:1b:f6:7e:ff:96:
14:7d:67:44:c6:e0:0d:80:c4:d3:7f:4c:3d:63:a7:
c3:7e:8b:53:7c:9c:16:60:e4:bc:7d:af:ed:2f:0a:
2f:8a:56:58:0f:48:26:d2:23:bf:7c:9e:84:cb:54:
5e:07:8a:13:a7:2c:d2:b2:d0:fb:23:e2:b9:c1:89:
5c:9a:90:69:83:c1:ac:35:a5:0a:14:08:ba:aa:e7:
4e:52:c3:b5:96:6a:23:27:ca:9c:59:b0:76:b0:fc:
20:57:07:51:58:18:04:3d:a8:0e:45:3a:14:86:c9:
17:e0:0b:fb:4d:88:39:09:b6:fd:75:18:10:88:78:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:4E:52:A0:11:36:3A:2F:CF:98:E4:83:9B:27:3B:F6:7F:DC:7C
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/vVhOUqARNjovz5jkg5snO_Z_3Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.103.0/24
Signature Algorithm: sha256WithRSAEncryption
59:64:df:b1:a1:2b:84:b5:c0:44:42:7f:46:b0:88:91:a5:2e:
94:71:9a:46:20:2e:c6:e5:28:03:ca:8d:fc:d5:a6:3f:cb:8b:
7c:a3:dc:0a:fa:f5:ef:b4:29:2e:16:22:40:4d:a2:70:ae:b4:
9a:80:f7:c3:18:59:f4:88:1c:77:fc:7d:f8:aa:bf:67:17:e6:
75:19:c1:a1:31:92:bf:4c:f5:2e:57:75:7e:1c:7a:14:dc:a9:
72:f1:ac:e0:3d:87:01:58:47:bd:20:a4:16:f6:87:16:cf:0b:
ad:ee:c5:a1:91:dc:b0:da:f6:1b:bd:0a:3f:56:59:d1:f0:e0:
dd:1e:ed:0e:7d:c0:3d:56:18:99:3a:d0:66:0e:b9:6d:52:40:
76:26:e8:08:c1:8d:7a:46:7f:25:58:39:51:39:d3:34:8a:76:
b4:5d:8a:58:d7:c6:e9:9c:cb:14:66:4e:8f:48:32:d7:ac:22:
f6:bc:b3:4f:fe:fe:3e:ee:d8:1a:3e:55:c8:ef:17:74:41:3c:
e2:25:ed:37:79:11:10:b0:4d:b6:d1:44:72:40:82:52:43:0d:
78:ff:c1:ca:ad:15:e2:0b:2e:f7:b1:02:81:3f:67:2f:54:1b:
81:01:35:3e:c8:f6:de:68:92:f6:af:58:3a:2e:01:bd:9e:e4:
6b:e9:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:12 2026 by rpki-client