Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DqWF2X2tlpaWoKW3M-h_pfiIBsM.roa
File: DqWF2X2tlpaWoKW3M-h_pfiIBsM.roa (raw, json)
Hash identifier: K3UVs8N6n7r4Y81Q9GwwqI8qlZtJnAVbJ6DN6YqS8Hw=
Subject key identifier: 0E:A5:85:D9:7D:AD:96:96:96:A0:A5:B7:33:E8:7F:A5:F8:88:06:C3
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F2CF2E525ADC4BB3427163BB2BD485302
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DqWF2X2tlpaWoKW3M-h_pfiIBsM.roa
Signing time: Sat 04 Jul 2026 11:45:43 +0000
ROA not before: Sat 04 Jul 2026 11:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 191.44.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:f2:e5:25:ad:c4:bb:34:27:16:3b:b2:bd:48:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 4 11:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ea585d97dad969696a0a5b733e87fa5f88806c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:11:db:66:31:17:dd:29:4e:53:7d:27:59:
be:97:6a:91:14:56:d8:51:5c:23:e0:d2:7b:bc:f5:
98:5b:be:39:b4:7f:ce:82:ba:5d:6c:d5:03:cb:f6:
4e:06:88:29:39:ab:5f:f5:21:88:3b:58:17:69:4c:
35:9d:af:b0:a6:27:c3:61:14:e0:58:d2:43:24:6c:
99:79:1b:64:c5:4a:5c:5a:1b:fb:fa:83:41:73:72:
05:f3:cb:f6:c7:7c:77:12:97:b2:67:90:01:63:a5:
a3:d1:5c:a8:9f:bf:e5:03:73:2e:a9:3c:20:2d:84:
58:0d:70:40:ca:a5:be:f8:84:a8:9d:a7:86:ab:7e:
60:7e:4f:a8:eb:ff:0c:86:fb:60:0d:3d:41:15:5f:
b7:1e:3f:06:fe:05:22:bf:4a:5a:e2:4e:e0:0d:53:
cd:cd:28:51:b7:e3:9d:73:5e:b0:f1:08:ac:04:69:
aa:7d:80:d8:e3:27:90:8d:51:f2:72:9f:93:d5:93:
55:90:90:55:8a:18:e7:06:95:30:20:23:2d:67:90:
f6:d4:f9:d2:b5:ea:0b:70:ee:e0:d9:78:99:cf:f1:
4e:95:2b:fc:c7:fd:98:08:2e:59:bd:f9:69:65:42:
aa:3d:75:e3:28:7c:83:a0:e7:64:b0:1f:46:9d:ee:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:85:D9:7D:AD:96:96:96:A0:A5:B7:33:E8:7F:A5:F8:88:06:C3
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/DqWF2X2tlpaWoKW3M-h_pfiIBsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:27:44:28:9f:0e:83:7f:b2:03:e5:ab:3f:f8:be:6f:e4:89:
b1:9d:a8:79:92:04:2d:ed:48:c3:54:e3:a3:a0:25:6d:3c:6d:
cd:f1:b7:e2:ec:e7:38:96:a0:f0:1d:4e:43:1f:80:cb:a7:1a:
bc:73:28:76:87:53:78:52:4b:2e:f6:85:4f:dc:9e:42:34:34:
cb:a9:c2:d6:0d:9f:cf:d6:23:6a:9e:73:b5:33:6d:aa:49:35:
63:30:56:14:cd:62:a9:dc:1b:73:14:a4:b9:37:2d:2c:e5:4e:
db:f1:e6:01:16:f0:79:f1:9e:ac:59:01:36:a5:90:ca:6c:5e:
bc:d6:ac:b9:11:ea:6d:ca:3f:6c:57:e4:5a:9e:05:23:99:cc:
ba:1b:eb:01:72:7e:cb:91:7c:49:36:30:1f:ea:3e:9f:c6:f5:
32:7c:47:90:cd:ca:51:14:d4:62:a4:09:2a:43:6e:b0:0e:4d:
c9:68:5f:ec:05:11:04:e8:6d:3a:8e:ca:05:af:e9:50:d7:49:
0d:66:a8:51:86:6d:ae:73:8d:4e:15:d1:10:3f:f6:b4:ad:45:
45:dd:6c:7b:79:29:1d:af:25:52:c5:fd:64:16:71:dd:24:0f:
7f:ea:80:7a:3c:5b:7e:bd:3e:90:2b:57:90:c6:20:e2:1a:ea:
95:18:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client