Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/yl166c7wGrVR6um8TuOPNjAvLxc.roa
File: yl166c7wGrVR6um8TuOPNjAvLxc.roa (raw, json)
Hash identifier: Zl/I7blu5IIWhL1aROXdSRSZ60uYmkKxuIbIT4PDW1k=
Subject key identifier: CA:5D:7A:E9:CE:F0:1A:B5:51:EA:E9:BC:4E:E3:8F:36:30:2F:2F:17
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A004C4E578A28D5B1A04DF785E71D07A9E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/yl166c7wGrVR6um8TuOPNjAvLxc.roa
Signing time: Sat 15 Aug 2026 09:33:27 +0000
ROA not before: Sat 15 Aug 2026 09:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 191.44.66.0/24 maxlen: 24
191.44.67.0/24 maxlen: 24
201.3.227.0/24 maxlen: 24
201.7.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:c4:e5:78:a2:8d:5b:1a:04:df:78:5e:71:d0:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 15 09:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca5d7ae9cef01ab551eae9bc4ee38f36302f2f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:8c:56:7e:3b:54:57:e0:fd:2c:98:29:2d:
d1:75:93:60:a7:69:d0:16:19:ec:68:f6:4b:ea:d9:
39:93:ca:65:f6:ff:03:a9:28:24:7c:3b:0c:e1:b0:
c4:06:c4:d7:c1:3e:1a:8a:e8:80:84:0e:af:d4:9e:
60:3b:3a:00:ca:70:cc:0c:93:2e:e9:a3:a8:37:47:
73:ed:df:b1:e7:17:1b:8e:49:5f:f1:ce:fe:d6:3b:
22:56:f5:b6:94:2c:50:28:7a:fc:2d:2c:75:bd:5d:
47:80:f3:3b:9e:c4:a2:bf:79:49:23:83:62:23:97:
c7:77:98:bf:6a:d1:78:1b:48:d5:03:92:cf:0d:23:
ea:81:b7:2f:36:5e:e7:9b:30:88:cb:51:c7:fa:8c:
ff:c6:99:b6:bc:a2:21:c2:fb:85:2d:7a:b5:3b:1f:
b0:1c:25:6c:60:b0:22:b3:de:c7:f0:84:6e:57:6b:
29:af:26:82:5c:1c:1a:14:73:ed:3b:2e:a8:f9:da:
a7:91:a1:6c:09:16:73:36:3f:26:ef:96:63:f9:d0:
36:c7:f6:02:f8:5e:41:56:1d:6b:08:5b:7e:41:b2:
32:b7:7e:fe:08:8b:8d:81:62:b8:d8:c5:b1:c0:65:
bb:ba:c7:3e:5d:d9:80:3d:d1:de:53:26:af:0a:e2:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5D:7A:E9:CE:F0:1A:B5:51:EA:E9:BC:4E:E3:8F:36:30:2F:2F:17
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/yl166c7wGrVR6um8TuOPNjAvLxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.66.0/23
201.3.227.0/24
201.7.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c9:4c:41:3a:4a:88:c1:ea:7b:5a:42:0d:cd:e5:96:05:5a:
1c:6a:65:64:51:76:a7:d1:89:9c:ec:28:ec:b9:1c:d9:d5:c5:
67:fb:22:a3:e8:06:49:96:f6:ef:07:f8:9a:38:4b:a4:5d:a5:
48:70:25:4c:13:47:34:d0:a2:2b:22:fe:5f:b8:51:78:8e:70:
b0:25:a7:b5:15:37:f8:21:51:a9:4e:3e:77:15:35:6f:0d:26:
27:a3:0d:5b:d2:1b:11:e9:ed:f8:8a:ad:36:93:81:fb:1d:a3:
45:e1:5a:5a:c3:a6:cf:20:4b:48:0b:62:b3:ed:8d:44:79:73:
12:c7:b6:dc:98:c2:4d:5a:79:2c:14:97:2c:e9:6e:ab:9f:4b:
38:6e:a3:cd:eb:71:b5:71:7e:78:d3:14:eb:70:57:0e:6b:7a:
54:7d:94:81:5a:c4:3c:ee:10:c1:b6:54:9b:3c:74:f4:68:c4:
d5:90:75:e0:1b:e5:c6:02:82:91:b3:60:7d:aa:6a:65:ee:b4:
41:78:24:98:af:fe:af:6a:16:03:38:92:32:9a:bc:b7:e7:b8:
70:c8:66:52:a8:ed:09:d2:f9:91:e7:45:4a:c3:b9:ca:fe:31:
95:5e:f9:c4:ca:4b:ac:db:38:1a:2b:b7:05:1b:c2:7b:3e:af:
f4:a4:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:31 2026 by rpki-client