Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/2fOu3akN7Ffewk90s7BRFJLj9vQ.roa
File: 2fOu3akN7Ffewk90s7BRFJLj9vQ.roa (raw, json)
Hash identifier: tbJdKWT2BB43JlYmWbpZmGtBR96IOquty8lnbV7NgJw=
Subject key identifier: D9:F3:AE:DD:A9:0D:EC:57:DE:C2:4F:74:B3:B0:51:14:92:E3:F6:F4
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E472969C6F004AACD863485C0633BE401
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/2fOu3akN7Ffewk90s7BRFJLj9vQ.roa
Signing time: Wed 20 May 2026 20:52:36 +0000
ROA not before: Wed 20 May 2026 20:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214033
IP address blocks: 191.44.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:47:29:69:c6:f0:04:aa:cd:86:34:85:c0:63:3b:e4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 20 20:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9f3aedda90dec57dec24f74b3b0511492e3f6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:d3:cb:e5:cf:90:2f:d2:d3:b5:4d:f5:21:
54:95:37:a8:eb:49:77:58:1a:d6:6b:88:77:aa:bc:
3e:eb:c7:59:31:3e:0e:a4:60:ea:3f:15:ad:41:22:
c6:8b:9d:fa:34:53:40:43:2f:4b:80:55:c9:bd:d0:
25:92:68:5f:bc:f0:0e:4f:c3:d3:ed:40:8f:c9:9c:
b1:09:f0:cf:db:af:9f:44:82:c5:0e:54:64:08:fe:
19:fe:90:53:c4:c1:b5:d5:e9:63:5d:df:e6:93:13:
4a:f4:09:66:ab:fa:28:98:c9:7e:53:22:1c:93:d6:
e2:d3:86:ae:43:a9:35:2f:7d:bf:ea:f9:23:26:93:
89:c5:14:99:3e:db:2c:8e:12:bd:d0:67:a9:95:76:
12:2d:34:c6:22:6c:00:46:6d:1b:ed:8c:8f:dd:d8:
21:48:fd:28:fa:82:88:5b:dd:d5:f9:9b:f0:ae:b9:
87:56:b4:5c:15:e6:30:e9:2a:b9:50:ff:71:68:f9:
84:f0:f5:25:84:e1:bb:4d:dd:fc:ee:c5:6f:f9:9a:
be:2f:63:be:26:02:74:14:78:32:bd:de:49:f3:1b:
b4:c6:65:3a:46:8c:0a:77:8f:f2:97:09:d6:2e:42:
21:6e:09:0d:03:fb:c9:0e:4e:84:5e:ec:83:54:25:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:AE:DD:A9:0D:EC:57:DE:C2:4F:74:B3:B0:51:14:92:E3:F6:F4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/2fOu3akN7Ffewk90s7BRFJLj9vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.111.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6b:66:09:6b:b9:18:6e:09:3a:a4:2d:a5:36:7a:09:69:0f:
b3:02:80:f8:dc:79:30:d5:65:7e:36:20:ba:3b:5e:b4:de:8f:
60:bf:d3:8e:ab:80:04:e4:7e:56:8d:f6:ab:da:c5:bc:2b:d7:
31:2f:b3:d3:21:2d:a2:ce:b1:68:bc:8c:b3:9c:f6:58:4b:1e:
18:01:75:b9:32:bd:5d:80:5b:99:ce:05:18:ea:eb:fa:30:15:
7e:54:0d:ae:35:a4:80:3a:a2:30:e1:9b:be:e0:65:32:56:07:
8d:4c:a5:eb:3c:9e:fb:ea:d8:c2:51:49:51:e6:bd:25:be:d9:
91:aa:e8:14:4c:31:36:96:7e:ca:b7:e6:ad:f5:0d:e3:14:4f:
5c:6c:85:7e:a3:fb:ab:d5:c8:cd:8d:94:78:48:b0:48:26:c0:
cf:6b:1e:71:50:ee:97:a1:ab:1d:bc:fb:7b:95:b0:1d:71:5b:
d8:72:cd:0f:ba:61:30:bc:57:8d:5e:1e:c2:73:fa:10:4e:3f:
2c:25:3a:82:21:df:7f:33:48:99:16:03:9e:bd:f9:4c:c1:84:
ef:ff:5b:ac:e9:60:af:5d:fd:69:5e:5b:e0:c8:c1:ea:89:6d:
f0:63:8d:c0:1d:12:bc:35:39:73:64:08:71:9a:ee:b8:c9:b9:
26:3c:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:13:20 2026 by rpki-client