Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/9M_-ThZ_MlDw68ktO_KoQ_tgoFc.roa
File: 9M_-ThZ_MlDw68ktO_KoQ_tgoFc.roa (raw, json)
Hash identifier: 41W7/WG92yACTO9/WSh91Wkc9P9VltWflHv1S2/kcm8=
Subject key identifier: F4:CF:FE:4E:16:7F:32:50:F0:EB:C9:2D:3B:F2:A8:43:FB:60:A0:57
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E35B715F6564EDE9BAE12AB1C7A2D03D0
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/9M_-ThZ_MlDw68ktO_KoQ_tgoFc.roa
Signing time: Sun 17 May 2026 11:34:11 +0000
ROA not before: Sun 17 May 2026 11:34:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203997
IP address blocks: 191.44.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:35:b7:15:f6:56:4e:de:9b:ae:12:ab:1c:7a:2d:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 17 11:34:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4cffe4e167f3250f0ebc92d3bf2a843fb60a057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:14:fb:ec:f6:73:c2:f3:46:11:90:8e:1b:
f9:4f:22:a2:c8:7b:41:8f:00:70:ad:75:28:0c:eb:
0c:cd:67:0f:83:f1:3d:4b:dc:25:59:19:4c:5b:82:
6e:0f:0a:05:31:4a:f5:79:77:81:5f:33:d6:ca:78:
7b:51:7e:53:e7:d5:f9:46:2a:40:f9:b7:e6:d6:d1:
9b:99:59:af:55:41:b3:c6:d4:fe:53:5d:9d:d0:12:
80:76:31:04:13:17:8a:7c:ff:50:76:f1:eb:bd:fa:
ee:f8:a7:02:33:a1:93:84:73:b8:78:1c:ad:2d:a8:
f9:94:62:1f:29:3a:05:77:5d:cf:81:60:77:38:dc:
71:19:62:f0:78:e4:e0:09:34:00:96:16:76:de:00:
44:56:6e:61:af:4c:30:c8:bc:29:77:50:4c:96:f3:
18:f8:72:67:34:86:36:11:45:77:b8:ad:bf:58:a3:
1b:1e:fb:48:d8:51:af:da:bb:2c:f0:c1:9d:73:84:
60:ef:ad:ef:e2:98:55:2a:aa:12:e1:fd:39:52:4a:
c6:4e:48:68:17:11:1e:fb:37:a8:78:a0:33:91:9b:
8c:ef:68:04:a1:23:9f:6a:fa:29:65:98:82:06:04:
61:dc:2c:e3:3e:4a:66:eb:49:a1:f4:97:fa:1f:4f:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:FE:4E:16:7F:32:50:F0:EB:C9:2D:3B:F2:A8:43:FB:60:A0:57
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/9M_-ThZ_MlDw68ktO_KoQ_tgoFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f5:b7:d4:a7:7e:f7:ae:dd:c1:ce:06:f8:70:5f:33:2e:b9:
c7:3b:96:e4:11:54:f8:08:5d:b6:04:75:47:b7:d6:85:6e:ad:
6a:a4:b8:36:c2:a3:8b:75:95:b8:30:bb:63:6a:d9:18:ec:55:
e9:59:8b:ba:f4:9c:03:5f:e2:3e:c0:f8:02:40:81:6d:ca:d2:
33:ba:dc:c6:fa:c0:a2:dc:2e:35:65:ed:b8:55:3b:45:b8:4b:
d1:98:eb:e7:32:bd:b1:65:25:e8:a1:d6:cc:83:8f:66:c4:ec:
5f:2f:7b:a2:9f:19:b3:25:4e:ef:a5:7b:3f:47:44:5e:a6:69:
87:e2:61:8b:3b:20:af:f2:e9:da:85:79:36:a8:cd:ce:8c:e5:
4f:d7:eb:bc:59:29:f0:ee:60:18:30:4f:76:df:a2:62:58:63:
77:69:b8:e8:cd:e4:cf:dc:8c:44:e5:63:9b:f8:6c:0c:85:15:
f6:ff:90:92:30:81:03:23:37:79:5c:c2:35:71:8a:b1:f1:21:
43:6c:96:07:9f:8b:36:72:1f:a2:72:f8:46:92:ed:cc:4a:ab:
18:c3:fd:e6:08:b7:dd:7a:1b:40:1f:e3:27:46:69:44:6e:99:
32:fd:f2:c7:1a:67:a1:e7:43:bc:bd:09:12:8d:05:bf:06:8b:
f8:c4:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:16 2026 by rpki-client