Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/0ybTE-EszynKZ6VH_XdK1sE67TI.roa
File: 0ybTE-EszynKZ6VH_XdK1sE67TI.roa (raw, json)
Hash identifier: 7GcVuPzHjm/1GzdoilaiBUHDeR8fii+55ats7kIfVzo=
Subject key identifier: D3:26:D3:13:E1:2C:CF:29:CA:67:A5:47:FD:77:4A:D6:C1:3A:ED:32
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A05D377DFE21164E0E78A6E744BDC8C052
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/0ybTE-EszynKZ6VH_XdK1sE67TI.roa
Signing time: Tue 01 Sep 2026 13:45:12 +0000
ROA not before: Tue 01 Sep 2026 13:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212947
IP address blocks: 191.44.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:37:7d:fe:21:16:4e:0e:78:a6:e7:44:bd:c8:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 1 13:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d326d313e12ccf29ca67a547fd774ad6c13aed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:b7:75:fd:a0:8d:84:fc:4e:23:90:e0:c1:
8c:96:43:35:bf:28:db:29:bf:b7:03:61:a0:43:80:
53:a6:07:96:a9:e5:ca:32:96:3e:8f:9d:c3:e2:f1:
e3:73:0b:65:a5:07:94:3b:4c:61:c5:06:a4:e3:52:
4d:e6:57:5a:e3:23:cc:92:06:af:1e:7d:0a:47:c1:
93:5b:98:de:8d:aa:f7:b3:3d:03:33:4e:73:7a:9c:
64:fb:17:20:c4:85:63:82:eb:85:f5:af:7b:4f:61:
59:41:8c:dc:f0:d8:42:14:14:9e:08:7d:d9:73:5b:
ef:b6:dc:d1:a6:3c:2c:5f:35:df:c2:c2:af:a9:c4:
23:7c:0b:6f:96:9b:ea:11:23:f6:11:70:1c:2f:34:
fa:5f:05:4a:14:ef:e8:31:6f:cc:6c:9e:8d:bd:08:
35:e6:3f:03:d2:ac:93:58:4e:2b:15:cc:53:27:5e:
32:d3:f3:b0:f9:f7:c3:43:02:d0:43:4a:c7:d0:e8:
2f:8a:3b:61:eb:92:52:07:8a:c2:b2:4e:75:aa:17:
14:63:39:0a:34:b7:3b:bc:83:a9:7e:7a:ec:6d:72:
f4:68:1b:fb:9f:03:61:3e:1e:10:db:2e:43:13:a5:
62:d4:e0:f3:49:2b:91:3e:42:c1:6c:f8:14:57:c8:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:D3:13:E1:2C:CF:29:CA:67:A5:47:FD:77:4A:D6:C1:3A:ED:32
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/0ybTE-EszynKZ6VH_XdK1sE67TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.96.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8f:ae:9a:bc:d7:43:1b:32:08:60:e2:b5:27:cb:2d:79:54:
7d:5f:73:96:59:46:73:18:d1:25:42:db:50:ec:a0:b3:7f:0b:
fc:d8:b4:a3:7d:ab:34:32:93:ba:6b:f6:2d:d0:0c:8f:29:ba:
29:f4:e8:58:28:cf:ad:d9:8a:e4:5f:ac:0a:26:d6:e4:a5:43:
6d:20:1c:2c:68:07:bf:ec:c2:f6:6b:68:19:ac:bc:45:f2:ee:
74:37:cd:9f:48:b0:09:ff:2d:50:f7:07:79:03:42:5a:52:b7:
82:3f:ad:97:36:2e:49:53:8e:a2:32:ac:6c:38:03:41:6d:2b:
27:12:e9:5f:08:75:7a:6e:f2:8b:98:1e:5a:a5:b0:59:db:05:
69:43:14:bc:ed:86:69:ee:61:2d:a7:f4:47:26:f9:44:57:ba:
93:89:32:e5:0d:f3:1e:3e:28:7d:ab:b5:21:dd:0d:45:96:a0:
ae:51:97:77:96:ed:e5:d0:67:1e:61:da:30:be:9b:7a:c9:d0:
4b:a7:d2:f9:08:45:c1:b8:6d:52:c9:b4:3a:d8:11:69:77:f3:
ba:14:64:0d:2e:63:bd:40:e5:db:a9:4f:9e:8c:2d:50:d4:1a:
83:aa:4a:ef:86:8c:be:e4:23:fd:ec:95:99:ab:85:6e:0f:2f:
09:31:af:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBdN33+IRZODnim50S9yMBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwOTAxMTM0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzI2ZDMxM2UxMmNjZjI5Y2E2N2E1NDdmZDc3NGFkNmMxM2FlZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCG3df2gjYT8TiOQ4MGMlkM1vyjb
Kb+3A2GgQ4BTpgeWqeXKMpY+j53D4vHjcwtlpQeUO0xhxQak41JN5lda4yPMkgav
Hn0KR8GTW5jejar3sz0DM05zepxk+xcgxIVjguuF9a97T2FZQYzc8NhCFBSeCH3Z
c1vvttzRpjwsXzXfwsKvqcQjfAtvlpvqESP2EXAcLzT6XwVKFO/oMW/MbJ6NvQg1
5j8D0qyTWE4rFcxTJ14y0/Ow+ffDQwLQQ0rH0Ogvijth65JSB4rCsk51qhcUYzkK
NLc7vIOpfnrsbXL0aBv7nwNhPh4Q2y5DE6Vi1ODzSSuRPkLBbPgUV8jWpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNMm0xPhLM8pymelR/13StbBOu0yMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvMHliVEUtRXN6eW5LWjZWSF9YZEsxc0U2N1RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxgMA0G
CSqGSIb3DQEBCwUAA4IBAQBIj66avNdDGzIIYOK1J8steVR9X3OWWUZzGNElQttQ
7KCzfwv82LSjfas0MpO6a/Yt0AyPKbop9OhYKM+t2YrkX6wKJtbkpUNtIBwsaAe/
7ML2a2gZrLxF8u50N82fSLAJ/y1Q9wd5A0JaUreCP62XNi5JU46iMqxsOANBbSsn
EulfCHV6bvKLmB5apbBZ2wVpQxS87YZp7mEtp/RHJvlEV7qTiTLlDfMePih9q7Uh
3Q1FlqCuUZd3lu3l0GceYdowvpt6ydBLp9L5CEXBuG1SybQ62BFpd/O6FGQNLmO9
QOXbqU+ejC1Q1BqDqkrvhoy+5CP97JWZq4VuDy8JMa8F
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:15 2026 by rpki-client