Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/42_0ug2dGigJMsvteOuVRD2RYcc.roa
File: 42_0ug2dGigJMsvteOuVRD2RYcc.roa (raw, json)
Hash identifier: aPgBNQyedzgdnbe0Jt75oDD/lviWJtdKRNa/M/leQv8=
Subject key identifier: E3:6F:F4:BA:0D:9D:1A:28:09:32:CB:ED:78:EB:95:44:3D:91:61:C7
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A04D9D0B0F8668C83D3C694AC057888CDB
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/42_0ug2dGigJMsvteOuVRD2RYcc.roa
Signing time: Sat 29 Aug 2026 13:02:12 +0000
ROA not before: Sat 29 Aug 2026 13:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25194
IP address blocks: 191.44.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:9d:0b:0f:86:68:c8:3d:3c:69:4a:c0:57:88:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 29 13:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e36ff4ba0d9d1a280932cbed78eb95443d9161c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:e3:59:9e:04:db:b4:2f:1b:47:21:3a:b6:
a7:ea:36:e7:cb:58:5e:47:d6:0e:2e:3c:7a:0a:3f:
18:44:b4:0a:1c:9d:1d:bd:31:17:c8:ec:6e:cf:b6:
fa:5e:88:f7:6c:42:1f:24:cb:49:c3:59:5e:dc:50:
e4:e6:b2:8d:eb:1a:48:43:b9:27:02:27:10:99:c0:
9a:41:89:e5:8f:a9:ea:54:0f:5e:2b:83:4f:08:a4:
8a:d5:0f:6d:bc:e5:f8:a3:fb:6f:e2:d3:b8:14:5e:
56:82:c6:ef:48:85:f6:6c:88:5c:32:5e:09:48:a2:
ce:61:c2:81:a7:77:d7:74:5e:2b:1c:1d:46:30:4c:
e5:66:47:a7:16:2d:c3:0c:c5:da:d3:d4:97:75:1e:
da:87:da:97:c0:38:66:0c:6b:19:3a:0a:01:75:aa:
14:0b:9b:51:2e:43:e8:1c:f5:0d:5e:66:88:fe:6f:
52:e5:e6:c7:9b:3a:db:33:e9:a9:80:f5:ce:62:4f:
e1:9f:f1:f1:fa:44:ea:71:c0:53:ec:21:97:3c:4d:
c7:d6:bd:12:f2:bf:3b:26:87:11:b8:2f:9e:de:36:
c5:5d:b7:44:29:97:47:c2:6d:41:9a:1f:e3:75:ef:
ea:44:36:da:c6:9d:12:44:36:d3:b0:3e:2d:79:1e:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:F4:BA:0D:9D:1A:28:09:32:CB:ED:78:EB:95:44:3D:91:61:C7
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/42_0ug2dGigJMsvteOuVRD2RYcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:17:35:00:7e:6d:90:9c:d5:8a:2c:46:92:58:19:62:cc:12:
cd:94:30:3e:b3:8a:6e:97:cf:14:ee:00:ce:00:01:d6:ad:45:
9b:07:12:a7:60:16:03:19:1a:97:84:f2:ac:dc:b6:50:55:7a:
fe:dc:27:60:93:c9:82:92:5b:f1:7d:67:82:3a:55:f4:98:b1:
12:3d:1f:e1:81:13:6f:3a:c0:80:85:81:ac:12:05:82:af:22:
0c:2c:dc:10:93:39:6d:e5:fa:d3:fd:d9:e4:34:9b:3d:f4:7e:
b4:80:c6:e2:de:d9:14:a0:62:c4:63:df:39:06:ea:97:2a:07:
75:fb:2d:92:13:b0:35:62:41:7d:76:e3:27:b4:22:f1:e1:7c:
91:2c:2e:bf:c2:d7:83:98:b2:82:99:42:8c:d2:21:cd:cc:cf:
55:47:bc:00:95:54:9c:08:4e:3f:f7:cd:03:3c:45:36:69:17:
01:b8:f4:77:e3:49:d5:f4:e9:fb:25:5c:92:57:6b:20:68:6c:
ca:75:b6:09:c3:7a:01:b0:d6:5e:38:10:02:df:d7:da:3e:eb:
3d:ed:21:43:63:68:29:ac:71:c7:b1:fc:cb:f6:df:61:71:ea:
57:b7:e2:ba:ae:ea:c5:0e:ca:d7:fc:5d:dd:b6:89:6e:81:5a:
9e:09:8f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:44 2026 by rpki-client