Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/yN3bFcSZswklucBJQktk7JQwJfM.roa
File: yN3bFcSZswklucBJQktk7JQwJfM.roa (raw, json)
Hash identifier: EPR1M/1H5wR9U+WxwhZ7vCyHrjYVaVrg1oU2tDxsgMs=
Subject key identifier: C8:DD:DB:15:C4:99:B3:09:25:B9:C0:49:42:4B:64:EC:94:30:25:F3
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A116ABE4E3F9C4A38B9B9D34C363F287F5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/yN3bFcSZswklucBJQktk7JQwJfM.roa
Signing time: Wed 07 Oct 2026 14:02:06 +0000
ROA not before: Wed 07 Oct 2026 14:02:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 191.44.65.0/24 maxlen: 24
191.44.67.0/24 maxlen: 24
191.44.83.0/24 maxlen: 24
201.4.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:ab:e4:e3:f9:c4:a3:8b:9b:9d:34:c3:63:f2:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 7 14:02:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8dddb15c499b30925b9c049424b64ec943025f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:9b:ff:2f:ce:d7:ac:1d:95:c3:9c:9e:37:
26:14:2e:c9:06:5f:3f:e0:88:9e:b9:24:11:e4:c4:
55:7a:5a:32:6b:6e:72:7b:de:8f:d8:68:51:30:95:
db:22:af:4d:76:df:91:60:e9:ef:ef:89:ac:3a:f3:
8e:8a:e6:3a:04:75:e0:cf:21:6e:53:77:8f:05:53:
2f:4d:c5:0e:56:dd:d8:1d:82:0c:9e:97:9a:88:6c:
86:71:a9:d8:f8:0e:f0:71:ff:8c:a9:b5:05:f8:7c:
7b:13:81:11:2a:a6:1b:ce:57:13:0c:de:95:2b:e0:
0e:ec:0e:9b:ab:b7:77:f8:0d:67:df:05:46:68:4c:
e1:48:39:c8:8e:7b:1b:61:df:e1:86:2e:57:fb:8b:
21:b1:86:67:83:2c:fa:e5:d7:84:a2:b3:8b:54:22:
41:67:8e:31:a9:c4:36:8f:84:3c:2f:f9:49:2f:f4:
7f:7e:bc:29:0b:50:21:85:ce:1b:ed:f4:a3:c2:43:
23:cb:a6:ca:b9:75:b8:cc:4b:3a:d1:fb:a4:8e:09:
c8:ab:7d:ed:d9:30:7b:80:f2:63:e8:be:16:71:0b:
70:98:b4:5c:27:c2:64:80:b4:ac:c8:94:e8:41:f2:
4b:23:8a:84:4f:9b:ba:22:e5:40:00:fb:f0:45:83:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DD:DB:15:C4:99:B3:09:25:B9:C0:49:42:4B:64:EC:94:30:25:F3
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/yN3bFcSZswklucBJQktk7JQwJfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.65.0/24
191.44.67.0/24
191.44.83.0/24
201.4.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:44:df:f3:db:71:8a:19:29:c9:20:61:c3:6f:dd:a3:c3:93:
82:fa:d0:1d:71:00:f6:7d:4d:c2:0f:b0:a2:3f:8c:dd:fe:39:
13:04:0d:52:d9:2e:e5:b2:8c:73:38:12:12:15:38:7c:5d:6a:
04:2b:9a:a5:f3:28:91:28:18:54:72:9f:d8:9a:34:01:d6:80:
0f:1e:a6:ae:6b:9b:26:2a:c9:5a:3a:a6:57:99:c8:10:f5:06:
b6:88:35:c2:cb:1b:07:57:db:98:e7:76:c5:c8:39:e5:50:b2:
76:3c:3b:63:c3:82:68:f5:b2:24:b4:ae:0b:94:bf:bf:c1:6c:
b6:76:2a:78:af:e5:48:8d:6e:02:90:27:8b:1c:ad:69:a5:41:
57:b7:b3:40:83:ee:7c:39:b2:49:28:01:13:25:72:c5:e5:8e:
3f:37:89:2b:9a:87:e3:f9:60:c9:01:6f:91:86:af:e3:e5:5e:
85:32:ec:16:e0:78:d2:a4:54:07:6a:53:a9:64:aa:fb:84:a2:
7f:97:03:78:d0:44:e3:ab:ee:96:c5:8b:bb:2a:64:f5:16:77:
18:34:6d:b6:d2:d1:e3:80:6e:f3:f9:3d:41:ea:2e:12:a5:10:
c0:65:db:cf:c3:77:d4:8d:65:79:8f:8e:ea:cd:c1:da:9f:0e:
25:19:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:36:11 2026 by rpki-client