Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/33J6EJ-3RSTZgSnOfloCZfYpU1s.roa
File: 33J6EJ-3RSTZgSnOfloCZfYpU1s.roa (raw, json)
Hash identifier: t8zyzjK0ohAXvM2b/JKXTKhdTg2MFonpvr6OXKhZDWM=
Subject key identifier: DF:72:7A:10:9F:B7:45:24:D9:81:29:CE:7E:5A:02:65:F6:29:53:5B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FDB2DB8AC5784B07FCE84B2E7755B124A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/33J6EJ-3RSTZgSnOfloCZfYpU1s.roa
Signing time: Fri 07 Aug 2026 07:43:54 +0000
ROA not before: Fri 07 Aug 2026 07:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 191.44.80.0/24 maxlen: 24
191.44.82.0/24 maxlen: 24
191.44.96.0/24 maxlen: 24
191.44.97.0/24 maxlen: 24
191.44.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:2d:b8:ac:57:84:b0:7f:ce:84:b2:e7:75:5b:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 7 07:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df727a109fb74524d98129ce7e5a0265f629535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:5b:ff:47:45:df:0c:e8:e5:aa:2c:9c:bd:
af:a8:39:70:f7:e8:5c:c5:14:71:83:84:fb:42:ed:
01:cd:16:f4:71:31:ac:60:87:e5:30:8c:13:f2:ff:
62:19:03:e2:a4:8f:4e:0f:34:88:d8:a1:b7:57:0b:
5f:f2:fb:4f:a9:38:d6:7a:65:95:bc:10:b6:34:86:
20:81:1b:39:0f:9d:a8:43:f5:26:96:1f:8d:19:dd:
01:80:0b:33:e5:1e:f3:5f:29:86:8c:60:e6:62:d9:
64:19:66:2d:12:4b:f9:ed:0f:72:df:9f:fe:54:31:
05:59:f8:e3:91:4c:fb:06:84:2f:dc:65:f4:e9:48:
fb:4e:34:4c:0b:78:db:fc:ec:cf:6f:3a:e7:07:60:
56:be:5d:21:d6:5e:34:e1:fe:08:da:80:48:e7:f2:
28:49:e9:00:b3:b7:41:87:7a:ba:42:20:d0:be:9f:
15:23:40:38:73:5b:f7:66:ba:ce:96:89:a9:18:89:
56:a0:98:5f:cd:04:c2:db:b6:06:f1:c4:70:ce:3f:
cf:45:b0:b9:9d:21:2b:db:d2:d6:53:c1:3d:31:c3:
f7:38:24:e9:84:6f:b5:36:39:c1:09:ed:88:55:60:
2b:a5:2c:bf:09:3d:f6:af:54:aa:80:aa:37:d7:87:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:72:7A:10:9F:B7:45:24:D9:81:29:CE:7E:5A:02:65:F6:29:53:5B
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/33J6EJ-3RSTZgSnOfloCZfYpU1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.80.0/24
191.44.82.0/24
191.44.96.0/23
191.44.101.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6b:a9:ce:7a:8f:47:ff:39:e0:60:94:07:21:68:83:1f:ea:
c6:35:96:da:dc:03:cb:74:46:5f:b5:39:c1:cf:87:bf:d3:08:
79:e9:54:18:fd:e7:92:c6:e7:ad:b0:4e:73:a1:db:23:d0:90:
e1:85:3b:9d:2a:e3:69:c4:cd:5e:fb:f5:ea:a7:92:40:9f:8c:
81:e8:17:7f:76:cf:fa:88:e8:ab:eb:38:83:9b:87:6f:5e:de:
6c:ea:67:9a:ec:fe:1f:de:f3:25:5f:1c:94:08:dd:97:73:5b:
81:24:ed:de:f5:c1:4e:e2:b3:07:a3:00:6b:c0:6d:02:d8:ed:
c6:e4:12:02:0d:79:eb:0b:e2:d3:f9:ba:f8:a1:1c:91:5b:fd:
2b:e8:cf:67:f8:32:d9:5d:bd:ab:59:43:31:fb:50:fd:22:24:
6a:71:7e:2a:86:90:bd:55:53:ee:86:d1:98:4a:c5:07:f8:72:
55:37:f7:5d:65:47:2b:4e:cf:48:2d:3c:f2:8c:86:18:fb:23:
a0:50:2d:c2:13:60:c7:59:2c:80:cc:ee:0e:dc:af:af:5e:56:
bb:b0:3e:99:6d:dd:16:3f:9c:17:9f:a4:27:24:34:ac:44:e3:
f9:1d:b7:49:e9:6e:9a:2f:c0:05:66:9f:c8:94:95:34:ef:db:
da:c6:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:50 2026 by rpki-client