Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DXhW05AaUxKgKfFZALTUXoukrf0.roa
File: DXhW05AaUxKgKfFZALTUXoukrf0.roa (raw, json)
Hash identifier: aygJbXm0jBENKkWE5cq/ZPih5L5O7wNfBCDVk2kAw5w=
Subject key identifier: 0D:78:56:D3:90:1A:53:12:A0:29:F1:59:00:B4:D4:5E:8B:A4:AD:FD
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DBFDEDBAE7B3BF75589E3632B33006CC8
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DXhW05AaUxKgKfFZALTUXoukrf0.roa
Signing time: Fri 24 Apr 2026 14:22:26 +0000
ROA not before: Fri 24 Apr 2026 14:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202792
IP address blocks: 191.44.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:de:db:ae:7b:3b:f7:55:89:e3:63:2b:33:00:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 24 14:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d7856d3901a5312a029f15900b4d45e8ba4adfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:6a:0f:f5:37:da:5d:86:64:d3:d4:01:24:
62:0d:84:c5:7f:fa:0e:a6:92:bf:30:d5:4d:f4:76:
41:a6:13:15:9a:4d:fa:65:29:0a:18:7a:2a:e6:8f:
c8:26:c7:18:f0:2f:43:0d:6c:d7:c2:90:83:fb:ee:
d8:81:a2:f3:19:31:a6:cb:95:2e:e5:28:e5:63:65:
bd:9a:29:f7:24:83:eb:16:04:be:54:5c:76:73:36:
92:ac:68:d4:ec:9a:76:75:ad:f8:7c:7d:75:0b:4b:
61:41:1d:14:1c:dd:c0:db:76:36:3c:70:76:74:0a:
4c:b9:45:d7:42:43:1e:d7:fc:cf:b2:d2:8e:bf:0c:
26:3f:a3:16:06:26:60:56:60:9d:dc:95:69:55:47:
3a:b4:9c:2a:ba:30:03:ad:a5:f5:a2:b2:fc:c6:a3:
d8:03:bc:43:49:44:6b:9d:cb:f2:5f:7d:82:39:95:
95:f1:0b:ff:9d:fa:c9:46:e7:9b:5b:d2:47:47:58:
e7:e4:cc:70:c7:a4:91:f4:2e:ec:d9:24:6f:02:86:
8c:9b:f1:76:ad:a1:19:f6:93:e0:4e:ce:25:06:96:
1d:06:34:6d:79:b1:40:18:a6:f6:61:cf:22:08:5c:
0f:d3:f9:49:a7:f6:13:67:13:df:dd:e7:cd:16:9b:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:56:D3:90:1A:53:12:A0:29:F1:59:00:B4:D4:5E:8B:A4:AD:FD
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DXhW05AaUxKgKfFZALTUXoukrf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.83.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f6:ea:53:1f:22:e8:50:3f:0c:99:4c:00:d0:1f:1e:4b:54:
77:0d:fc:43:3c:2d:aa:7e:3c:ed:52:5d:46:80:82:27:f8:7f:
e5:82:62:fb:4f:83:3a:97:c7:77:ab:4c:14:6f:d1:18:88:1d:
38:af:6f:86:e1:3d:28:e8:19:90:2d:21:1f:58:54:a4:c2:21:
56:62:6e:1a:cc:96:16:f2:80:4c:8c:cc:2d:e8:57:68:c0:c7:
09:60:ea:5f:d4:8e:0b:eb:ef:8c:3d:e1:cf:60:50:78:89:61:
21:62:8d:1a:95:21:4b:6f:02:5f:8c:cb:99:57:bf:19:17:2f:
5a:11:e4:66:bb:59:e4:7f:ce:a0:f4:1a:66:cb:93:6b:bc:fb:
93:6a:2b:bc:65:62:07:cc:a9:7e:93:0f:de:aa:cc:c6:5f:c2:
2a:1e:07:9e:ff:e1:f1:bc:0c:d1:b7:cd:3c:82:92:ee:a3:e2:
b6:d8:c0:28:f2:d5:c0:1d:71:5f:b6:e2:eb:67:50:09:2f:48:
7b:3c:02:ef:eb:1c:be:d7:bf:4f:8e:f6:cd:4e:5a:92:4a:59:
a6:84:10:c1:52:76:63:eb:0b:be:57:2c:b8:50:57:52:29:22:
ce:e5:97:8b:23:59:fd:20:c6:f9:59:4d:b8:cc:3b:f4:52:f0:
92:9b:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:45:48 2026 by rpki-client