Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/A-Oh0JYT9drn09RfxxPebsgJWMU.roa
File: A-Oh0JYT9drn09RfxxPebsgJWMU.roa (raw, json)
Hash identifier: xjeadXzD393dXyO0vYIRfjJYtrRyYNKRWCv+NOXt0R0=
Subject key identifier: 03:E3:A1:D0:96:13:F5:DA:E7:D3:D4:5F:C7:13:DE:6E:C8:09:58:C5
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E21FAAEE4757FE8B87FB33A4BAB938303
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/A-Oh0JYT9drn09RfxxPebsgJWMU.roa
Signing time: Wed 13 May 2026 15:35:37 +0000
ROA not before: Wed 13 May 2026 15:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197644
IP address blocks: 191.44.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:fa:ae:e4:75:7f:e8:b8:7f:b3:3a:4b:ab:93:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 13 15:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03e3a1d09613f5dae7d3d45fc713de6ec80958c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:5b:2e:a3:72:76:d4:69:31:40:65:81:a9:
f4:11:2c:fa:4a:c2:97:34:88:4a:69:08:52:56:2e:
d7:4d:d9:5c:e9:ac:0e:04:d0:d3:cd:43:a3:55:f7:
e2:b4:95:da:33:b0:aa:ee:1d:02:70:8f:58:c1:da:
d9:d6:2c:22:0d:32:cb:9c:7f:67:d7:28:6a:e8:c3:
70:62:34:63:92:60:fb:bc:23:9a:2b:30:05:04:c8:
3c:77:db:b0:33:5e:6c:c8:95:6b:c6:a6:99:93:03:
9f:c7:d7:98:a3:93:54:cb:53:f9:5a:01:9b:fc:4b:
68:13:53:71:0c:9e:81:b3:54:4b:da:d3:cd:fc:6a:
e2:ba:53:3f:eb:f6:ee:58:77:a6:cc:8d:10:9d:50:
c7:2b:8c:79:de:76:bd:ed:82:22:ee:46:ae:d3:99:
9c:bd:80:59:08:ce:61:e5:35:bd:cc:de:a1:3b:7e:
4f:9a:bf:78:9a:a3:03:b2:11:86:b4:77:64:33:67:
c2:b4:ab:bb:f7:7d:0a:b8:8a:1e:fa:9d:89:da:73:
19:a6:7a:a0:a8:e1:9d:58:5f:06:e2:51:7c:1e:cc:
e0:05:02:7d:ff:18:6e:5d:1a:e4:e0:75:ad:c0:5f:
4e:3d:c7:a1:ba:8f:7c:99:e0:71:1e:75:73:74:04:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:A1:D0:96:13:F5:DA:E7:D3:D4:5F:C7:13:DE:6E:C8:09:58:C5
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/A-Oh0JYT9drn09RfxxPebsgJWMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.115.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a8:a2:12:6f:ee:30:06:1c:86:6b:af:fd:02:00:12:7b:c5:
4b:81:89:f4:9f:30:e2:59:84:da:ba:84:58:54:76:7b:c0:a7:
70:39:38:03:89:c8:26:7a:69:86:a9:14:f1:70:32:b8:70:3e:
8d:13:01:93:d6:ae:8f:09:e0:d3:1e:73:53:ff:b8:d2:b7:bb:
71:14:e3:52:26:4e:23:64:eb:a9:c5:6a:05:91:c4:4e:c6:ee:
59:c5:f7:49:3f:ac:2b:29:a4:ff:48:bc:31:4b:d3:cd:a4:26:
7e:97:dd:82:b4:78:49:c3:c0:f4:a3:4c:89:8d:cc:c3:b7:b0:
7e:da:83:e0:e2:e9:47:b0:0b:31:b9:eb:70:7f:d7:eb:36:3c:
b4:1d:fc:9c:20:11:13:ad:3b:61:f1:62:79:10:95:d2:1f:b8:
34:97:1b:d1:06:93:8d:db:4f:4b:70:02:23:dd:b6:81:5c:b2:
bc:0b:1c:88:da:32:fd:97:0b:c3:bd:60:86:51:1c:c4:d4:37:
10:4f:77:7f:04:6f:7d:84:55:0b:91:ee:49:34:48:96:f2:03:
b0:a2:67:23:11:fa:36:b1:47:6b:7a:63:24:4f:36:5f:fc:8f:
e5:80:23:2e:58:ec:a9:a8:f0:e3:6c:d1:e2:ee:cb:35:51:19:
cd:2e:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:16 2026 by rpki-client