Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8pARH6tQiMW5VOww33fEnzxJ8JM.roa
File: 8pARH6tQiMW5VOww33fEnzxJ8JM.roa (raw, json)
Hash identifier: oalnnS5D3eLopK4CN73XkDh+N3g2fvrPYgN9383me2M=
Subject key identifier: F2:90:11:1F:AB:50:88:C5:B9:54:EC:30:DF:77:C4:9F:3C:49:F0:93
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E02075AC5EE2B9C76FC0BAD8CA313CF8A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8pARH6tQiMW5VOww33fEnzxJ8JM.roa
Signing time: Thu 07 May 2026 10:41:36 +0000
ROA not before: Thu 07 May 2026 10:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 191.44.71.0/24 maxlen: 24
191.44.88.0/24 maxlen: 24
191.44.91.0/24 maxlen: 24
191.44.125.0/24 maxlen: 24
191.44.126.0/24 maxlen: 24
191.44.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:07:5a:c5:ee:2b:9c:76:fc:0b:ad:8c:a3:13:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 7 10:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f290111fab5088c5b954ec30df77c49f3c49f093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:18:a1:98:32:2a:44:a9:a8:02:7a:4b:bf:
47:82:ce:45:e4:2f:03:89:7c:c6:77:97:7e:0a:7b:
29:9a:13:5b:f7:80:98:c0:3f:d9:5b:d4:3c:23:47:
5f:c2:1a:bd:d7:39:27:1a:30:97:37:26:a2:94:a0:
49:b3:de:fc:63:2e:c4:ee:c5:cf:df:11:61:40:bd:
a2:3c:05:1b:e4:31:7a:15:44:b3:e9:2c:e7:7f:76:
6e:09:e6:fa:24:55:60:0f:73:25:56:81:30:4e:14:
3e:2e:d9:21:98:0a:91:2d:2d:d7:38:5f:e0:b5:9b:
94:50:65:3a:95:f8:34:26:cb:fb:6f:83:2e:58:8b:
79:02:ae:4a:35:34:c7:4e:2a:e7:c4:0e:d0:43:88:
f9:29:b0:d8:47:d1:b4:7e:d6:46:ce:40:12:af:16:
d4:ae:ff:d1:a9:9b:26:72:a8:2c:25:55:2e:03:82:
c3:5c:11:8b:58:01:dc:51:0f:65:22:75:41:55:fa:
4f:6b:a5:02:35:1f:11:da:ed:d9:14:ae:96:e5:06:
67:ee:00:81:a1:c1:e4:df:46:33:c3:2b:c3:61:43:
de:21:f7:5b:9d:c6:53:7a:58:d8:ec:61:02:29:84:
40:d9:69:62:6c:0e:07:8a:a3:2d:d7:87:4e:90:d3:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:11:1F:AB:50:88:C5:B9:54:EC:30:DF:77:C4:9F:3C:49:F0:93
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/8pARH6tQiMW5VOww33fEnzxJ8JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.71.0/24
191.44.88.0/24
191.44.91.0/24
191.44.125.0-191.44.127.255
Signature Algorithm: sha256WithRSAEncryption
7b:55:a2:9f:72:21:13:95:a0:ad:f3:64:12:0c:59:76:d2:61:
f8:c3:20:d9:cd:e5:53:cf:4b:cc:a3:eb:ac:48:b3:5e:17:e8:
a1:b4:96:3f:40:16:19:a4:2b:66:7a:48:63:b7:ed:88:db:95:
e7:5c:40:10:78:ab:4a:9a:f1:68:42:20:71:63:48:0d:cf:98:
4b:28:c1:a3:ee:02:a6:57:52:de:c8:5a:cc:bf:ff:c8:3c:e1:
db:8a:a1:9b:54:84:f3:bd:41:e2:94:ef:00:10:d9:ff:26:72:
d5:e6:e5:1f:e8:30:fd:ae:4b:98:a0:89:fc:5e:d4:0e:19:2b:
50:e3:dc:e8:2e:3a:06:02:2a:f6:76:ba:0e:cc:69:51:5a:ac:
34:7b:99:bc:60:71:26:36:e6:99:9d:6b:fd:25:ff:d2:78:b5:
bc:30:c6:74:fd:25:65:a0:44:dc:db:8a:48:e2:10:70:78:c7:
68:74:b6:06:05:54:62:1c:91:b7:b7:fd:b9:b5:65:30:f4:d4:
cd:73:98:15:65:12:49:bc:f5:a2:27:c9:f6:83:85:a1:98:50:
45:b5:79:3c:9f:58:62:62:8d:55:f7:ab:de:fe:95:62:4e:af:
ba:4f:d3:dc:5b:a7:36:00:ef:c1:d2:19:73:4d:2d:18:89:d1:
a0:03:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 20:20:49 2026 by rpki-client