Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/EW4zgaHtGQF0vINHbFH6L0JR7-I.roa
File: EW4zgaHtGQF0vINHbFH6L0JR7-I.roa (raw, json)
Hash identifier: zkfXMzIApJDLbxfjA3MNqFpO9+o+V0SBnATyC2eCqGQ=
Subject key identifier: 11:6E:33:81:A1:ED:19:01:74:BC:83:47:6C:51:FA:2F:42:51:EF:E2
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EF4CB2A80B81E3353513E070E1CEC9D29
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/EW4zgaHtGQF0vINHbFH6L0JR7-I.roa
Signing time: Tue 23 Jun 2026 14:03:35 +0000
ROA not before: Tue 23 Jun 2026 14:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 191.44.90.0/24 maxlen: 24
191.44.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:cb:2a:80:b8:1e:33:53:51:3e:07:0e:1c:ec:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 23 14:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=116e3381a1ed190174bc83476c51fa2f4251efe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:bb:e2:3e:1f:44:83:ec:d0:f4:bf:97:13:
08:55:bc:ed:66:27:b9:57:35:9f:64:b4:cb:f9:7c:
72:f3:69:f0:dc:4c:fe:a4:70:c5:93:81:ae:4d:c4:
5e:ee:ac:02:0f:c3:f8:ca:2b:2a:be:8b:dc:cd:d5:
b9:29:eb:cc:c8:72:42:28:2b:ba:f0:56:31:6e:7b:
af:58:31:57:4f:1a:d8:04:27:17:4c:89:46:c6:97:
e1:1e:65:45:16:96:69:74:0c:66:29:f5:60:96:ca:
98:df:c1:8e:42:26:52:b0:d3:ef:b3:26:03:2b:7d:
c1:9d:20:19:02:74:1c:75:ad:7a:fe:da:b5:72:81:
51:73:35:7f:e4:4c:5a:b4:54:b1:55:16:b7:74:41:
18:81:56:ab:f5:43:61:00:5f:af:9d:0d:06:99:3b:
9a:c5:cb:a8:6b:43:11:a0:da:e6:32:7c:ac:71:a5:
ad:d5:be:4f:a7:c1:cd:e4:39:ac:b3:4c:3d:cb:6c:
7e:54:59:0d:6a:d6:7f:c6:43:3c:2d:7d:7a:53:e1:
90:75:35:0d:d6:9e:64:28:11:ef:6c:b4:d1:e6:3f:
9c:3f:02:84:fb:ce:f5:88:9e:f1:b0:94:3d:5b:45:
3e:3a:aa:1a:3c:7e:bb:e9:cc:3b:5b:a3:f6:03:19:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:33:81:A1:ED:19:01:74:BC:83:47:6C:51:FA:2F:42:51:EF:E2
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/EW4zgaHtGQF0vINHbFH6L0JR7-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.90.0/24
191.44.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:77:f6:e5:e4:41:a0:0d:43:cc:c2:14:4f:9c:ac:24:c9:90:
db:25:df:10:23:a4:3b:d2:7f:b5:a8:6a:ca:c0:6c:13:6b:5e:
64:9e:12:ec:3d:b0:50:f9:15:86:9c:75:ef:dd:bd:86:ac:af:
fb:5c:a0:30:3d:09:60:4d:b4:e1:10:c2:db:ef:d2:94:05:fe:
05:a0:60:cd:03:16:88:3d:4b:ef:4c:e8:e8:eb:f6:14:2c:c6:
53:2c:40:36:58:dd:be:da:70:a0:cf:66:d4:92:f9:23:e8:0b:
e5:d8:54:34:b7:03:f1:5d:5a:18:47:9f:22:4c:7a:0a:e8:c6:
71:b0:e4:c6:1c:61:5d:12:17:ae:3d:fd:37:14:69:84:aa:99:
62:24:42:2a:ff:b4:68:8c:7a:29:80:dd:7f:61:47:77:67:c3:
bc:14:ea:16:1a:6b:d4:42:b9:e3:00:13:d9:6d:db:11:ca:8a:
6a:11:93:ff:f2:27:c9:87:53:a6:8a:69:77:45:dd:3f:77:2e:
bc:e9:60:ad:af:55:a6:03:a3:d4:6f:af:1e:a0:3d:a5:06:8e:
17:84:21:a0:e4:a9:be:e9:31:1f:12:f1:f4:98:6c:bc:67:14:
65:01:66:57:4d:7f:3a:25:f1:3e:eb:3a:f9:2e:8d:ee:a1:e3:
a9:00:93:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ70yyqAuB4zU1E+Bw4c7J0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNjIzMTQwMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTZlMzM4MWExZWQxOTAxNzRiYzgzNDc2YzUxZmEyZjQyNTFlZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5q74j4fRIPs0PS/lxMIVbztZie5
VzWfZLTL+Xxy82nw3Ez+pHDFk4GuTcRe7qwCD8P4yisqvovczdW5KevMyHJCKCu6
8FYxbnuvWDFXTxrYBCcXTIlGxpfhHmVFFpZpdAxmKfVglsqY38GOQiZSsNPvsyYD
K33BnSAZAnQcda16/tq1coFRczV/5ExatFSxVRa3dEEYgVar9UNhAF+vnQ0GmTua
xcuoa0MRoNrmMnyscaWt1b5Pp8HN5Dmss0w9y2x+VFkNatZ/xkM8LX16U+GQdTUN
1p5kKBHvbLTR5j+cPwKE+871iJ7xsJQ9W0U+OqoaPH676cw7W6P2AxkRCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBFuM4Gh7RkBdLyDR2xR+i9CUe/iMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvRVc0emdhSHRHUUYwdklOSGJGSDZMMEpSNy1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvyxaAwQA
vyx0MA0GCSqGSIb3DQEBCwUAA4IBAQCld/bl5EGgDUPMwhRPnKwkyZDbJd8QI6Q7
0n+1qGrKwGwTa15knhLsPbBQ+RWGnHXv3b2GrK/7XKAwPQlgTbThEMLb79KUBf4F
oGDNAxaIPUvvTOjo6/YULMZTLEA2WN2+2nCgz2bUkvkj6Avl2FQ0twPxXVoYR58i
THoK6MZxsOTGHGFdEheuPf03FGmEqpliJEIq/7RojHopgN1/YUd3Z8O8FOoWGmvU
QrnjABPZbdsRyopqEZP/8ifJh1Omiml3Rd0/dy686WCtr1WmA6PUb68eoD2lBo4X
hCGg5Km+6TEfEvH0mGy8ZxRlAWZXTX86JfE+6zr5Lo3uoeOpAJPE
-----END CERTIFICATE-----
Generated at Sun Jul 12 15:24:51 2026 by rpki-client