Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/26kBDVeG_VYi-ZFZd5G68UN3tuk.roa
File: 26kBDVeG_VYi-ZFZd5G68UN3tuk.roa (raw, json)
Hash identifier: 9OHeXcyNPbisJqScgFJQwj3uD+4wKe3BPgYKS/U9OyU=
Subject key identifier: DB:A9:01:0D:57:86:FD:56:22:F9:91:59:77:91:BA:F1:43:77:B6:E9
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F08D6B4489019A7251A3CFC66815D95E6
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/26kBDVeG_VYi-ZFZd5G68UN3tuk.roa
Signing time: Sat 27 Jun 2026 11:28:36 +0000
ROA not before: Sat 27 Jun 2026 11:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 191.44.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:d6:b4:48:90:19:a7:25:1a:3c:fc:66:81:5d:95:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 27 11:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dba9010d5786fd5622f991597791baf14377b6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:ba:20:1f:6d:e5:7d:1e:b2:d5:6f:e4:a2:
06:39:6a:5a:95:23:f9:41:9d:aa:27:8c:5b:a8:61:
bb:10:bd:f5:03:78:10:5f:23:89:de:10:e6:fb:18:
6a:81:57:f9:6e:5b:d5:51:b0:ec:2e:10:11:a4:a6:
0f:f1:38:fb:5d:3d:97:4e:94:c0:6e:90:f7:8c:36:
64:b5:e1:3d:00:7a:32:95:9d:6b:a4:75:2f:c0:d8:
31:2c:05:e5:81:25:ac:76:8a:89:b1:80:cf:4e:58:
df:eb:95:f2:ff:8e:2b:27:aa:59:48:21:fc:5e:1f:
58:8f:e9:04:db:30:f1:02:a1:f6:e9:f7:b5:f9:ef:
03:d5:54:a5:0f:db:b8:3e:72:e7:65:fe:0c:84:84:
57:91:4a:bd:7c:c9:09:c0:e1:2f:01:80:47:e4:38:
4b:78:11:fc:cb:53:16:ad:c6:fa:0d:7f:b1:43:6f:
97:9d:e8:1c:b5:8f:b0:14:a3:76:eb:1b:0d:e8:c9:
68:2c:52:e9:da:e1:1b:76:58:ef:43:b8:52:d0:1e:
ad:d8:54:57:8a:ab:61:a0:9e:0e:41:a1:e5:ca:63:
4e:9e:49:80:a9:c3:0a:c7:f6:39:b7:d9:4a:90:ec:
9c:1f:cc:2a:cf:53:50:1a:34:7f:22:41:77:67:e2:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:01:0D:57:86:FD:56:22:F9:91:59:77:91:BA:F1:43:77:B6:E9
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/26kBDVeG_VYi-ZFZd5G68UN3tuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.86.0/24
Signature Algorithm: sha256WithRSAEncryption
08:11:60:24:cf:27:67:3c:be:25:dc:0f:32:54:04:b1:93:fd:
e0:73:b5:e5:94:0c:e9:ea:b3:2f:10:de:9d:7f:30:88:7a:70:
b8:27:b5:02:3a:13:69:69:08:8d:dc:b8:a2:6a:3e:c2:67:50:
d4:9d:31:0e:90:2c:ba:a6:b9:e9:e3:17:d6:b3:fa:db:34:4b:
c8:d5:e4:84:30:a9:93:71:70:b7:d4:cb:f6:8e:d6:35:8c:9e:
c6:ff:54:f5:b2:32:5b:ed:f1:61:d6:c1:2b:6e:38:1b:b0:78:
e3:90:61:37:2d:92:bb:ec:61:4a:3f:3d:88:fa:e2:c5:a0:db:
05:1a:0d:8b:4c:bc:6a:23:24:ac:7b:d7:03:b5:c2:b1:cf:97:
51:82:a6:82:dc:db:8a:1e:79:88:2f:2a:74:e2:3a:8c:b4:39:
74:77:f5:3e:e2:0a:25:57:35:49:84:5a:9e:78:ef:6b:32:1a:
de:55:f1:d6:3d:1c:3b:19:dc:45:b9:1a:62:dc:16:c8:25:60:
96:6c:1f:21:a6:b9:48:5e:28:41:60:29:45:7c:39:2b:86:e0:
27:c9:23:df:f8:3c:8d:93:e9:db:94:49:a5:0c:37:1b:fb:7f:
54:85:37:b1:15:c7:f3:15:94:eb:df:02:94:63:af:c3:a4:d9:
c8:9c:5f:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8I1rRIkBmnJRo8/GaBXZXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNjI3MTEyODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmE5MDEwZDU3ODZmZDU2MjJmOTkxNTk3NzkxYmFmMTQzNzdiNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkG6IB9t5X0estVv5KIGOWpalSP5
QZ2qJ4xbqGG7EL31A3gQXyOJ3hDm+xhqgVf5blvVUbDsLhARpKYP8Tj7XT2XTpTA
bpD3jDZkteE9AHoylZ1rpHUvwNgxLAXlgSWsdoqJsYDPTljf65Xy/44rJ6pZSCH8
Xh9Yj+kE2zDxAqH26fe1+e8D1VSlD9u4PnLnZf4MhIRXkUq9fMkJwOEvAYBH5DhL
eBH8y1MWrcb6DX+xQ2+XnegctY+wFKN26xsN6MloLFLp2uEbdljvQ7hS0B6t2FRX
iqthoJ4OQaHlymNOnkmAqcMKx/Y5t9lKkOycH8wqz1NQGjR/IkF3Z+JwwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNupAQ1Xhv1WIvmRWXeRuvFDd7bpMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvMjZrQkRWZUdfVllpLVpGWmQ1RzY4VU4zdHVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxWMA0G
CSqGSIb3DQEBCwUAA4IBAQAIEWAkzydnPL4l3A8yVASxk/3gc7XllAzp6rMvEN6d
fzCIenC4J7UCOhNpaQiN3Liiaj7CZ1DUnTEOkCy6prnp4xfWs/rbNEvI1eSEMKmT
cXC31Mv2jtY1jJ7G/1T1sjJb7fFh1sErbjgbsHjjkGE3LZK77GFKPz2I+uLFoNsF
Gg2LTLxqIySse9cDtcKxz5dRgqaC3NuKHnmILyp04jqMtDl0d/U+4golVzVJhFqe
eO9rMhreVfHWPRw7GdxFuRpi3BbIJWCWbB8hprlIXihBYClFfDkrhuAnySPf+DyN
k+nblEmlDDcb+39UhTexFcfzFZTr3wKUY6/DpNnInF8l
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:51 2026 by rpki-client