Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/AWfM8x2tgU125KGqWCbfvockSRU.roa
File: AWfM8x2tgU125KGqWCbfvockSRU.roa (raw, json)
Hash identifier: 9HhKEc933SpbtWhNUftdRmPkbHV3sG6pd/19mDeJEOU=
Subject key identifier: 01:67:CC:F3:1D:AD:81:4D:76:E4:A1:AA:58:26:DF:BE:87:24:49:15
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A070C25BBF6826031FC17BED491E534F5E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/AWfM8x2tgU125KGqWCbfvockSRU.roa
Signing time: Sat 05 Sep 2026 08:49:40 +0000
ROA not before: Sat 05 Sep 2026 08:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218788
IP address blocks: 191.44.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:c2:5b:bf:68:26:03:1f:c1:7b:ed:49:1e:53:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 5 08:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0167ccf31dad814d76e4a1aa5826dfbe87244915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:f1:d4:b6:03:23:e4:52:b5:36:36:ee:4c:
0e:9d:d6:d5:03:ef:9b:dd:87:41:67:e6:32:4e:3a:
ea:61:e4:09:49:31:58:df:85:b2:f3:d5:50:8c:92:
2d:b8:db:b0:9b:68:ba:de:63:9a:23:32:0c:aa:0f:
d6:f2:26:6d:6d:1c:07:d7:6a:dd:d1:66:b4:14:8b:
ab:0f:87:44:65:18:80:58:4a:8a:12:89:ed:7f:8b:
dd:f3:44:ed:df:2e:c3:58:d2:50:3a:fa:f4:84:db:
eb:32:82:47:82:d1:99:1d:c3:cb:d1:a0:29:3d:5c:
ac:8b:b0:e1:6e:6f:5a:86:16:de:9c:8b:94:dc:86:
04:31:41:e0:4c:a4:1a:65:f5:75:a8:71:a7:a6:6f:
b2:78:1b:c1:04:4a:9a:09:7e:19:42:15:ed:91:3a:
71:1a:51:9c:bf:35:64:12:2d:8e:19:21:00:12:20:
ba:d9:09:07:0f:04:2e:e8:7f:d5:9e:68:b3:b0:97:
5c:06:27:f8:13:5b:bb:ff:43:1c:0f:f6:4a:e4:d3:
1b:07:43:26:a9:ac:51:84:8c:d6:b0:81:fe:da:ac:
89:4b:a0:c6:b9:7a:d0:49:bc:3b:8b:b8:e8:da:49:
bd:c4:e5:8d:92:e0:89:d5:04:5f:9d:6c:4f:32:12:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:CC:F3:1D:AD:81:4D:76:E4:A1:AA:58:26:DF:BE:87:24:49:15
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/AWfM8x2tgU125KGqWCbfvockSRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.93.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0a:19:94:90:5c:93:08:ef:c3:f8:a9:d5:8f:18:60:68:cc:
33:bf:52:ce:8d:98:d9:c2:bd:dd:91:c1:b7:10:01:ea:2a:2f:
53:da:f9:6c:bf:01:77:91:59:d5:67:31:ab:46:28:f6:b1:02:
b8:bb:be:ca:e0:12:10:d9:81:ce:ef:04:cf:85:39:99:16:a7:
5e:6f:bc:cb:a6:c8:03:9f:75:8f:7c:fb:91:f0:7b:43:b5:a4:
17:5b:e0:3e:e8:02:73:32:cf:27:d9:d7:b4:99:7f:c9:24:3f:
a0:f2:56:2f:4e:f0:d8:34:3b:7c:90:44:2e:b9:79:68:ac:08:
05:b2:e2:fd:1c:09:8c:76:2c:df:eb:b0:a2:07:a2:b7:bf:d0:
b0:3f:51:6b:98:ce:b0:c4:54:0a:07:c4:fc:75:38:87:33:ac:
49:b7:b5:52:07:02:c5:43:95:cf:27:1a:03:9f:db:f6:79:ff:
fc:72:6f:c6:7d:11:a9:1a:d2:bb:d7:b3:2e:7a:26:f4:46:02:
8a:d2:46:af:a6:2b:39:83:f8:11:b4:d3:6d:c8:ef:c0:47:f4:
e2:36:8f:6d:7f:cd:34:3a:fc:81:8a:9e:c7:3a:c5:a9:b5:a9:
c4:5f:0a:6d:fe:ad:50:7b:9c:b1:aa:bc:f1:32:39:34:14:e4:
64:79:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:55:43 2026 by rpki-client