Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ji4h9jJnvm3BttOcAQJv_nPD3IY.roa
File: ji4h9jJnvm3BttOcAQJv_nPD3IY.roa (raw, json)
Hash identifier: 3RFu6F9tPxKf2xcXPYdNc958d3w8mqJgbPkAZSnDfFc=
Subject key identifier: 8E:2E:21:F6:32:67:BE:6D:C1:B6:D3:9C:01:02:6F:FE:73:C3:DC:86
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A1791386A967F016B7BF8664E744C64B7F
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ji4h9jJnvm3BttOcAQJv_nPD3IY.roa
Signing time: Mon 26 Oct 2026 16:38:05 +0000
ROA not before: Mon 26 Oct 2026 16:38:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 191.44.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:13:86:a9:67:f0:16:b7:bf:86:64:e7:44:c6:4b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 26 16:38:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e2e21f63267be6dc1b6d39c01026ffe73c3dc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:5d:7d:9c:68:08:3b:67:29:dc:2e:b9:a3:
6e:24:4f:da:4c:12:6c:79:91:c3:08:10:48:34:cc:
60:10:e9:57:2a:0a:cc:4f:33:e8:95:59:6a:4a:17:
99:71:c8:1c:30:b0:22:4f:84:a9:c4:09:14:f4:b1:
9b:12:15:b6:8d:69:17:81:e2:c0:26:93:21:8a:ae:
c1:47:20:75:71:e8:5c:0e:cf:89:02:d2:2f:4a:d1:
8d:76:4b:96:61:fe:2b:57:7f:5b:03:0b:84:42:31:
d1:ff:84:4e:f1:80:92:41:6a:a2:2b:49:09:13:e8:
a8:3e:b0:16:23:eb:35:1e:4b:20:be:34:51:2c:d4:
08:60:15:32:bb:ed:7e:0b:70:21:fe:5b:90:47:20:
21:e8:60:3e:a9:2f:d5:36:f7:c4:28:c1:59:36:2f:
89:74:52:71:4e:b4:2b:b0:38:31:78:8a:57:fd:99:
c6:79:b9:5d:ef:03:39:64:0d:8f:58:74:46:02:88:
65:c5:e9:4a:cd:fc:1d:78:05:11:98:9e:d2:9a:e7:
79:f5:0c:59:6d:87:4d:73:d6:ef:7a:cc:f1:a0:0c:
b6:b5:88:1b:3a:19:7d:c2:72:a0:ce:cd:2e:f9:8a:
a7:d0:86:65:f7:95:d7:72:76:8f:40:84:68:12:57:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2E:21:F6:32:67:BE:6D:C1:B6:D3:9C:01:02:6F:FE:73:C3:DC:86
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ji4h9jJnvm3BttOcAQJv_nPD3IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.83.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2d:10:3d:88:f2:f6:41:27:7e:66:63:64:2a:67:31:08:f8:
b8:0b:c4:50:97:0c:60:12:c8:9d:83:bd:25:db:26:2c:85:59:
a1:d7:8a:19:e3:6b:11:2f:4d:c6:6d:b3:1d:c2:b0:36:2b:ba:
43:11:18:2b:fe:76:f2:f1:f8:69:c0:fa:50:40:c6:c5:11:f4:
6e:84:14:46:16:e8:40:6c:90:a7:83:40:2d:17:1b:70:26:98:
1e:16:a7:2a:e7:75:ab:ec:81:32:36:08:f2:b9:60:4d:0f:c2:
32:d4:cf:1e:57:3d:60:2d:df:4f:77:20:2f:9e:68:99:ec:90:
e5:44:e6:10:c2:33:2c:09:fb:ab:b9:82:7d:48:f1:26:30:d9:
63:98:a8:c1:b1:7b:4a:1f:09:3d:cb:ce:51:69:91:b0:5b:a8:
92:e0:d2:95:4e:11:60:6f:c4:fc:5f:cb:bf:5b:6b:e5:7b:1d:
dd:e5:3d:3d:cd:09:e7:4e:a7:5b:12:59:ed:f8:68:c7:06:aa:
7f:bc:f4:14:ce:8c:b4:5f:6a:c3:9e:69:a3:17:2b:76:36:8c:
64:1b:99:3a:14:b9:40:40:a2:7a:53:89:0e:67:81:08:e3:7c:
21:fe:c6:5a:00:97:00:f8:a5:19:da:db:03:55:94:4b:29:57:
47:83:37:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF5E4apZ/AWt7+GZOdExkt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYxMDI2MTYzODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTJlMjFmNjMyNjdiZTZkYzFiNmQzOWMwMTAyNmZmZTczYzNkYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgtdfZxoCDtnKdwuuaNuJE/aTBJs
eZHDCBBINMxgEOlXKgrMTzPolVlqSheZccgcMLAiT4SpxAkU9LGbEhW2jWkXgeLA
JpMhiq7BRyB1cehcDs+JAtIvStGNdkuWYf4rV39bAwuEQjHR/4RO8YCSQWqiK0kJ
E+ioPrAWI+s1HksgvjRRLNQIYBUyu+1+C3Ah/luQRyAh6GA+qS/VNvfEKMFZNi+J
dFJxTrQrsDgxeIpX/ZnGebld7wM5ZA2PWHRGAohlxelKzfwdeAURmJ7Smud59QxZ
bYdNc9bveszxoAy2tYgbOhl9wnKgzs0u+Yqn0IZl95XXcnaPQIRoEldXEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4uIfYyZ75twbbTnAECb/5zw9yGMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvamk0aDlqSm52bTNCdHRPY0FRSnZfblBEM0lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxTMA0G
CSqGSIb3DQEBCwUAA4IBAQBjLRA9iPL2QSd+ZmNkKmcxCPi4C8RQlwxgEsidg70l
2yYshVmh14oZ42sRL03GbbMdwrA2K7pDERgr/nby8fhpwPpQQMbFEfRuhBRGFuhA
bJCng0AtFxtwJpgeFqcq53Wr7IEyNgjyuWBND8Iy1M8eVz1gLd9PdyAvnmiZ7JDl
ROYQwjMsCfuruYJ9SPEmMNljmKjBsXtKHwk9y85RaZGwW6iS4NKVThFgb8T8X8u/
W2vlex3d5T09zQnnTqdbElnt+GjHBqp/vPQUzoy0X2rDnmmjFyt2NoxkG5k6FLlA
QKJ6U4kOZ4EI43wh/sZaAJcA+KUZ2tsDVZRLKVdHgzfB
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:25:09 2026 by rpki-client