Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YgPQpNulEjkeK9wtyFQR0DkM0yY.roa
File: YgPQpNulEjkeK9wtyFQR0DkM0yY.roa (raw, json)
Hash identifier: LkuyLeFTokxSw8qbdZQyhXapgPJjs1vSfaA9BGdmkik=
Subject key identifier: 62:03:D0:A4:DB:A5:12:39:1E:2B:DC:2D:C8:54:11:D0:39:0C:D3:26
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A17C50155A0FA3D34970E6BED772155E2D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YgPQpNulEjkeK9wtyFQR0DkM0yY.roa
Signing time: Tue 27 Oct 2026 07:43:05 +0000
ROA not before: Tue 27 Oct 2026 07:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 191.44.124.0/24 maxlen: 24
201.3.230.0/24 maxlen: 24
201.4.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:50:15:5a:0f:a3:d3:49:70:e6:be:d7:72:15:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 27 07:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6203d0a4dba512391e2bdc2dc85411d0390cd326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:31:e9:57:1a:ef:ad:9f:1b:b7:9a:9c:47:
03:81:95:7a:be:a1:d0:cb:0e:1e:77:e2:91:eb:f6:
38:29:4d:94:56:28:17:27:42:b2:b9:a2:c7:f2:5b:
d0:ed:16:b5:fd:a2:23:4d:32:d2:cf:d4:e6:04:1a:
80:b7:f5:18:09:2b:b1:b8:fa:8c:29:9e:35:51:53:
41:d1:f5:38:af:d8:4e:a5:4f:6b:a5:a2:ec:be:fd:
e3:24:6d:82:90:09:8e:96:1d:ef:45:b0:01:67:e3:
22:23:2d:d8:55:1a:f1:c9:c2:ff:62:38:96:18:8d:
1e:bb:28:70:a1:76:46:39:81:a1:46:86:45:0e:64:
72:d4:c5:6c:fc:18:78:2f:de:3b:18:40:62:a8:41:
c2:a9:b4:47:43:b5:17:15:3b:08:cc:cc:b1:a4:bb:
1e:0f:8a:4a:5a:39:c2:8e:a5:c0:25:72:a9:3a:e2:
71:ba:0e:0f:63:d1:f0:67:f8:8d:09:f4:7c:54:7b:
9c:34:da:dd:12:e9:97:99:36:b2:66:2d:5c:82:b6:
d6:17:d4:62:06:00:94:db:78:c6:3e:ee:ed:12:97:
a6:9a:3a:c9:5c:1c:d5:e9:9e:a8:d1:3d:30:b5:f1:
46:fe:4e:5c:21:f5:6b:47:fd:26:fc:d9:9c:54:35:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:D0:A4:DB:A5:12:39:1E:2B:DC:2D:C8:54:11:D0:39:0C:D3:26
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YgPQpNulEjkeK9wtyFQR0DkM0yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.124.0/24
201.3.230.0/24
201.4.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:75:ba:c6:5a:5f:bc:03:e4:cd:0d:f5:ee:70:88:b5:26:aa:
d1:ba:22:61:e1:7c:09:e2:e0:69:4d:db:79:e2:74:d9:d7:8f:
60:f1:c9:3b:3d:a2:0a:41:ab:58:c5:6e:1c:0c:c8:26:a3:83:
32:48:44:03:03:2e:4e:66:e3:e2:66:0f:6d:ef:02:cf:d5:cc:
8a:05:96:1f:39:ee:e4:a8:84:93:31:1f:20:66:99:45:6e:60:
86:31:a2:19:97:c7:1f:ef:38:7a:97:90:e3:8b:fe:1c:11:fa:
2c:34:87:fd:b3:da:e0:2d:27:ea:b8:34:bd:90:f1:b9:8e:be:
3b:37:0b:e3:8a:7e:8e:84:b7:ba:43:25:b3:b6:ac:91:de:64:
ca:63:a6:e1:97:10:b3:e8:3d:95:79:5d:19:16:58:e2:14:21:
36:a2:c1:2c:1d:ad:19:18:ac:b1:ae:9c:52:e4:f1:29:13:54:
c2:d1:9a:4b:69:b7:9a:3e:83:a6:2e:41:4c:3b:55:34:09:69:
8d:b3:1f:57:ee:4c:33:96:4d:e0:87:0e:2a:da:2e:e4:19:eb:
4b:c7:03:94:98:b6:79:82:97:50:2b:49:67:5a:7b:64:29:ff:
ed:e3:21:c6:df:67:fc:9d:c8:b5:ce:68:fa:49:76:a0:2c:5e:
13:66:cd:93
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaF8UBVaD6PTSXDmvtdyFV4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYxMDI3MDc0MzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjAzZDBhNGRiYTUxMjM5MWUyYmRjMmRjODU0MTFkMDM5MGNkMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKsx6Vca762fG7eanEcDgZV6vqHQ
yw4ed+KR6/Y4KU2UVigXJ0KyuaLH8lvQ7Ra1/aIjTTLSz9TmBBqAt/UYCSuxuPqM
KZ41UVNB0fU4r9hOpU9rpaLsvv3jJG2CkAmOlh3vRbABZ+MiIy3YVRrxycL/YjiW
GI0euyhwoXZGOYGhRoZFDmRy1MVs/Bh4L947GEBiqEHCqbRHQ7UXFTsIzMyxpLse
D4pKWjnCjqXAJXKpOuJxug4PY9HwZ/iNCfR8VHucNNrdEumXmTayZi1cgrbWF9Ri
BgCU23jGPu7tEpemmjrJXBzV6Z6o0T0wtfFG/k5cIfVrR/0m/NmcVDUprwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGID0KTbpRI5HivcLchUEdA5DNMmMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvWWdQUXBOdWxFamtlSzl3dHlGUVIwRGtNMHlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvyx8AwQA
yQPmAwQAyQRDMA0GCSqGSIb3DQEBCwUAA4IBAQC3dbrGWl+8A+TNDfXucIi1JqrR
uiJh4XwJ4uBpTdt54nTZ149g8ck7PaIKQatYxW4cDMgmo4MySEQDAy5OZuPiZg9t
7wLP1cyKBZYfOe7kqISTMR8gZplFbmCGMaIZl8cf7zh6l5Dji/4cEfosNIf9s9rg
LSfquDS9kPG5jr47Nwvjin6OhLe6QyWztqyR3mTKY6bhlxCz6D2VeV0ZFljiFCE2
osEsHa0ZGKyxrpxS5PEpE1TC0ZpLabeaPoOmLkFMO1U0CWmNsx9X7kwzlk3ghw4q
2i7kGetLxwOUmLZ5gpdQK0lnWntkKf/t4yHG32f8nci1zmj6SXagLF4TZs2T
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:00:29 2026 by rpki-client