Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/3BUunQ65RehAqWSpuJh1QVBSE-w.roa
File: 3BUunQ65RehAqWSpuJh1QVBSE-w.roa (raw, json)
Hash identifier: PfrngzR/g2RHvLSDSJgZSlskCDUk/4ayKxkAN0OxUuc=
Subject key identifier: DC:15:2E:9D:0E:B9:45:E8:40:A9:64:A9:B8:98:75:41:50:52:13:EC
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0662F23CE545E2C96A185BBA22503D827
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/3BUunQ65RehAqWSpuJh1QVBSE-w.roa
Signing time: Thu 03 Sep 2026 07:32:40 +0000
ROA not before: Thu 03 Sep 2026 07:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 191.44.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:2f:23:ce:54:5e:2c:96:a1:85:bb:a2:25:03:d8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 3 07:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc152e9d0eb945e840a964a9b8987541505213ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:2f:de:68:87:e3:43:51:92:c8:f1:46:61:
38:a8:0f:fc:fd:9a:91:14:a9:54:12:33:64:87:bc:
c9:5a:88:3d:b5:a3:ca:fb:58:50:1f:b8:ff:9b:1b:
59:ee:d7:8d:9e:36:79:43:38:c4:fb:b6:76:6a:6f:
29:ed:44:6b:29:95:33:1a:50:d2:32:78:03:11:55:
5a:22:82:f9:07:a2:92:47:22:41:00:e6:91:f0:55:
db:99:cd:de:3f:aa:b9:2d:28:a9:47:f7:2d:72:1a:
a4:43:c0:5b:22:b5:05:61:e4:13:c3:eb:a9:82:79:
e3:1e:0d:95:a5:5e:76:62:43:53:8a:23:5a:b4:ee:
fb:f6:78:3a:2b:fd:75:88:72:21:22:12:f5:53:f6:
45:38:a4:d5:af:21:93:06:9f:4e:fb:db:2c:a3:c9:
c4:d1:24:56:26:e2:1b:c5:bc:12:93:13:d1:a0:78:
77:29:1d:39:45:ec:f3:70:a5:28:89:40:27:6a:c0:
e8:3c:d8:d5:af:15:eb:0c:ed:14:c2:35:e2:0e:a4:
4b:71:5e:da:a1:3f:6d:3b:1d:be:2f:b9:30:34:a7:
e4:a0:37:70:72:1e:a8:12:6e:12:c4:0f:fc:57:b8:
6f:30:a1:2a:7a:e7:2e:8d:43:ed:d4:fd:07:ab:7d:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:15:2E:9D:0E:B9:45:E8:40:A9:64:A9:B8:98:75:41:50:52:13:EC
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/3BUunQ65RehAqWSpuJh1QVBSE-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.94.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6f:a6:a7:d4:7c:e2:e9:c9:27:85:e4:2d:09:42:ba:86:ae:
01:07:c4:36:a8:5b:c2:2a:37:96:d8:db:93:c7:88:d7:1f:0a:
91:ce:0a:1f:30:5e:8d:73:fc:c5:14:f0:41:a2:d3:60:d7:f3:
99:d7:e8:4b:31:36:fd:d1:6f:74:79:c0:14:4e:f6:52:5e:c0:
61:a8:0f:d9:9f:6a:9d:89:25:13:98:25:3b:8c:99:cc:18:db:
c9:c3:e1:98:94:af:be:a2:79:eb:4e:78:97:12:49:d7:da:47:
cc:84:84:cd:78:c0:8e:21:46:ef:a6:ab:a2:2b:58:7c:c6:d1:
00:94:6e:76:a6:43:25:1b:d4:26:cd:39:76:0a:11:f8:21:06:
4d:3d:43:21:5f:70:c8:74:81:bd:81:2c:41:00:e8:7e:77:29:
4e:60:b1:04:0b:d9:c6:a9:de:56:da:e2:dd:99:22:fc:72:ae:
6d:29:2b:0c:54:23:dd:cf:e3:2d:54:f3:3c:9b:8c:73:f4:96:
61:12:e5:02:5f:58:17:aa:73:de:77:c1:62:99:8a:db:40:10:
f7:c6:2e:34:a9:f6:f7:cd:d9:06:ac:60:d9:38:6a:d7:71:23:
1c:4a:fc:ad:44:1f:f3:f3:44:84:8d:cf:ea:09:d3:57:b8:e7:
e5:dd:3f:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBmLyPOVF4slqGFu6IlA9gnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwOTAzMDczMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzE1MmU5ZDBlYjk0NWU4NDBhOTY0YTliODk4NzU0MTUwNTIxM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgwv3miH40NRksjxRmE4qA/8/ZqR
FKlUEjNkh7zJWog9taPK+1hQH7j/mxtZ7teNnjZ5QzjE+7Z2am8p7URrKZUzGlDS
MngDEVVaIoL5B6KSRyJBAOaR8FXbmc3eP6q5LSipR/ctchqkQ8BbIrUFYeQTw+up
gnnjHg2VpV52YkNTiiNatO779ng6K/11iHIhIhL1U/ZFOKTVryGTBp9O+9sso8nE
0SRWJuIbxbwSkxPRoHh3KR05RezzcKUoiUAnasDoPNjVrxXrDO0UwjXiDqRLcV7a
oT9tOx2+L7kwNKfkoDdwch6oEm4SxA/8V7hvMKEqeucujUPt1P0Hq32+UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwVLp0OuUXoQKlkqbiYdUFQUhPsMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvM0JVdW5RNjVSZWhBcVdTcHVKaDFRVkJTRS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxeMA0G
CSqGSIb3DQEBCwUAA4IBAQADb6an1Hzi6cknheQtCUK6hq4BB8Q2qFvCKjeW2NuT
x4jXHwqRzgofMF6Nc/zFFPBBotNg1/OZ1+hLMTb90W90ecAUTvZSXsBhqA/Zn2qd
iSUTmCU7jJnMGNvJw+GYlK++onnrTniXEknX2kfMhITNeMCOIUbvpquiK1h8xtEA
lG52pkMlG9QmzTl2ChH4IQZNPUMhX3DIdIG9gSxBAOh+dylOYLEEC9nGqd5W2uLd
mSL8cq5tKSsMVCPdz+MtVPM8m4xz9JZhEuUCX1gXqnPed8FimYrbQBD3xi40qfb3
zdkGrGDZOGrXcSMcSvytRB/z80SEjc/qCdNXuOfl3T9b
-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:47 2026 by rpki-client