Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/03QkTi9GzFT7SMJ6M9A2QpgBAk4.roa
File: 03QkTi9GzFT7SMJ6M9A2QpgBAk4.roa (raw, json)
Hash identifier: 7L7n0N6ltSkOIvNajMsESRPk2kRWJAtjZLHis/0BwL0=
Subject key identifier: D3:74:24:4E:2F:46:CC:54:FB:48:C2:7A:33:D0:36:42:98:01:02:4E
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EFB28C8D46BACA870537692410D8738E5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/03QkTi9GzFT7SMJ6M9A2QpgBAk4.roa
Signing time: Wed 24 Jun 2026 19:43:34 +0000
ROA not before: Wed 24 Jun 2026 19:43:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 191.44.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 11:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:28:c8:d4:6b:ac:a8:70:53:76:92:41:0d:87:38:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 24 19:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d374244e2f46cc54fb48c27a33d036429801024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:92:30:75:dc:43:69:58:1d:d0:2f:c0:68:
ea:07:a1:31:f1:9c:2a:d8:44:e3:87:d9:42:ee:79:
1e:b6:2f:f3:b4:e2:f4:40:62:a9:94:a7:b5:74:16:
f0:8f:ff:16:4d:95:54:8f:eb:9b:d7:3c:a0:0c:60:
2e:20:df:86:31:ee:43:39:60:5c:88:3a:51:15:16:
69:e3:7c:81:76:5f:92:ae:d6:ea:f1:f9:94:2c:6b:
dd:5e:ce:d5:1b:b8:89:06:6b:d6:d7:16:dd:02:1b:
0a:4f:a6:07:27:16:11:50:f7:55:d7:31:1a:dc:88:
0f:e9:d7:df:ea:1f:56:f1:6a:28:29:a5:1e:9e:62:
5d:1c:7d:22:e5:81:41:66:0a:00:5a:98:f5:76:a4:
8d:81:ce:84:bb:53:8f:e3:f3:53:c7:f3:76:7a:f5:
1e:e9:3b:3e:21:80:b6:f9:e2:03:11:7b:59:43:d3:
d6:24:ca:0e:5a:5c:fe:d0:cb:76:50:6b:29:21:66:
d6:5f:3d:89:4e:92:b0:00:d6:79:e4:55:dd:da:58:
a7:88:c6:7b:74:29:d0:b8:d9:4e:a6:8f:c1:0c:66:
ff:b0:03:ea:25:cf:5d:e1:f1:d4:39:4c:31:ef:b2:
52:85:28:51:72:f5:3f:c3:b7:0e:71:d7:07:31:3f:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:24:4E:2F:46:CC:54:FB:48:C2:7A:33:D0:36:42:98:01:02:4E
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/03QkTi9GzFT7SMJ6M9A2QpgBAk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.69.0/24
Signature Algorithm: sha256WithRSAEncryption
99:92:05:0a:ed:1c:23:9f:03:7d:c8:85:92:e0:98:8b:7a:ba:
fe:08:9c:6e:25:3d:2b:70:f9:09:a2:78:26:2a:35:d0:f0:57:
9b:41:b6:af:38:ab:0f:df:b0:e6:73:4c:8c:80:9a:93:ee:ae:
f4:22:42:38:4b:66:46:0a:71:69:ee:9b:3e:04:2e:ed:fb:17:
ef:23:9a:50:e8:86:d6:f8:93:d3:ae:3a:6f:d6:bf:8e:60:ab:
7f:ca:5d:26:6d:ad:c3:24:70:82:9a:f4:aa:e1:17:85:dd:ee:
24:fc:b6:c1:f6:d0:cd:18:f3:d7:26:01:92:34:f6:78:75:43:
27:86:dd:3a:20:4d:dc:83:3d:3e:ce:c3:86:0b:26:79:71:85:
6f:0c:c5:5f:62:38:1d:0b:44:63:f9:01:f0:f9:43:2e:96:95:
8d:71:6e:a1:91:55:81:fb:52:b1:44:14:35:8d:5f:fb:3a:81:
5e:3c:7f:33:f6:44:4c:47:78:93:c4:f5:e9:4c:a4:87:7d:bf:
da:83:3f:46:f0:5c:f3:35:a1:21:e3:74:d8:c8:b2:0a:fd:08:
cf:7a:32:61:55:09:70:f6:2a:d3:f5:4c:94:0c:6c:fc:7e:5f:
76:ab:6e:9f:c8:b2:19:0b:6a:bd:3e:9c:92:7b:c3:c6:92:8a:
3e:49:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:44:47 2026 by rpki-client