Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DVvcvq7auqvesQ1N7mnQ1Mj35lo.roa
File: DVvcvq7auqvesQ1N7mnQ1Mj35lo.roa (raw, json)
Hash identifier: KhNnfhTe8cu2g6YtYT4TG7nBi85yQfIW5zFAqVO973I=
Subject key identifier: 0D:5B:DC:BE:AE:DA:BA:AB:DE:B1:0D:4D:EE:69:D0:D4:C8:F7:E6:5A
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A13C3560088F9DECE37B935C3ED10400D1
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DVvcvq7auqvesQ1N7mnQ1Mj35lo.roa
Signing time: Wed 14 Oct 2026 20:58:13 +0000
ROA not before: Wed 14 Oct 2026 20:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 191.44.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:35:60:08:8f:9d:ec:e3:7b:93:5c:3e:d1:04:00:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 14 20:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d5bdcbeaedabaabdeb10d4dee69d0d4c8f7e65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:7c:30:b4:00:16:a7:2a:2b:e1:48:21:31:
60:51:b0:12:de:91:a1:69:e3:08:b9:36:83:71:da:
21:ea:50:e9:21:c4:81:45:8c:06:85:e0:be:86:5c:
3d:49:f4:a0:38:91:23:83:3f:07:f4:50:cd:92:d7:
ae:2a:f7:0d:bd:d7:5a:b2:06:18:e4:c9:65:48:73:
6e:40:a5:a2:59:03:4b:86:d5:df:88:36:48:36:0d:
9c:fd:6f:9f:b0:0b:e0:0b:6f:d9:f5:80:75:8d:2d:
3a:7e:04:34:5f:24:34:3f:28:b1:7c:2c:83:06:9b:
67:38:04:66:17:fc:f7:2f:ec:83:a8:96:78:76:74:
98:ce:7e:2d:70:b0:e5:67:1d:ca:4e:dd:87:fd:b9:
35:1f:fa:fd:b0:05:d9:64:cf:49:4f:61:b9:da:3e:
c5:1e:c4:56:4f:d8:9a:15:7a:99:3a:68:b0:44:15:
3a:97:63:ae:bb:6b:83:2a:73:14:59:71:73:2d:ba:
4b:2c:bd:9c:1a:5b:6c:d9:c1:3c:5d:c9:8f:a8:93:
d7:2d:f4:0f:01:8c:fa:c7:f9:5f:a5:46:3b:ee:fa:
9b:e7:3c:1e:ad:27:8c:79:39:3d:b9:be:36:42:24:
09:1f:73:41:80:a6:91:61:36:16:4a:6e:33:d2:09:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:DC:BE:AE:DA:BA:AB:DE:B1:0D:4D:EE:69:D0:D4:C8:F7:E6:5A
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DVvcvq7auqvesQ1N7mnQ1Mj35lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.78.0/24
Signature Algorithm: sha256WithRSAEncryption
96:02:80:16:a5:da:0b:ed:e0:79:79:11:64:cc:19:98:7d:41:
1e:2d:77:e0:82:59:d5:c1:e1:a2:b8:b4:81:a0:93:16:4e:16:
d0:ef:e9:84:e5:b9:6d:a8:c1:44:66:c0:6a:5d:85:bf:68:78:
a9:7e:dc:0b:5d:2c:ee:b6:11:b6:7c:52:1d:c0:a1:c7:e6:01:
02:e7:dc:2a:56:ba:22:b7:94:7a:e8:a0:7c:2f:87:a2:95:77:
98:04:1b:b1:ad:cd:f5:eb:1a:d3:03:3f:5a:6d:0a:ed:f6:e5:
d6:81:a5:d0:44:0a:62:07:cb:24:2f:1f:8a:9d:9a:f2:bc:c1:
73:32:58:02:7f:ac:bf:69:10:07:7b:11:dd:72:e9:ea:ea:cd:
eb:d5:11:82:fe:ea:ea:b0:da:16:30:37:2b:be:10:59:4e:c3:
11:16:39:22:a7:e0:16:b1:18:38:bf:4e:9d:e0:8e:f5:4a:b5:
98:35:fc:1d:be:18:4a:65:ce:7a:85:87:79:fb:3c:59:12:d3:
13:7b:81:47:78:d4:03:9c:19:a1:ad:88:91:9a:8b:15:92:6c:
e2:6e:ed:55:99:2b:72:da:34:37:67:9b:0a:d9:67:db:a1:c3:
ff:0d:a4:18:15:39:fc:da:bc:41:1e:03:c4:ce:ab:42:04:79:
b6:54:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:39:31 2026 by rpki-client