Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Ec0yvbah3uWGl6aKeCIyV4BmJMs.roa
File: Ec0yvbah3uWGl6aKeCIyV4BmJMs.roa (raw, json)
Hash identifier: A1JMXoc32RJvvNxgJAfThNWBISalyWRk1AbNtmyfUiE=
Subject key identifier: 11:CD:32:BD:B6:A1:DE:E5:86:97:A6:8A:78:22:32:57:80:66:24:CB
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F26B28DC5808C48DD075312B87EDF0FAA
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Ec0yvbah3uWGl6aKeCIyV4BmJMs.roa
Signing time: Fri 03 Jul 2026 06:37:43 +0000
ROA not before: Fri 03 Jul 2026 06:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 191.44.99.0/24 maxlen: 24
201.3.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:b2:8d:c5:80:8c:48:dd:07:53:12:b8:7e:df:0f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 3 06:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11cd32bdb6a1dee58697a68a78223257806624cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:d7:ef:4d:5a:58:1c:5c:4b:2c:e2:60:19:
93:b6:4b:6d:fc:ec:eb:44:4c:3a:77:7d:a6:47:41:
9e:b4:d0:8a:8d:05:d8:46:40:e8:82:b0:8e:96:c9:
b4:8a:ce:44:cf:40:0b:4d:a2:97:b4:97:fb:2a:03:
8b:d0:b6:ae:94:67:6d:c1:d8:b9:84:8d:f4:a6:ae:
f1:c7:eb:ef:52:65:49:fa:30:9b:9a:8f:d3:79:0f:
af:cb:0a:69:3b:c5:40:3a:af:3c:f4:06:0f:63:7e:
47:2d:5d:bc:f3:1e:70:f3:fc:c0:bf:b9:8d:45:df:
67:7e:62:9f:2b:a1:31:fe:2d:4c:68:ff:30:67:17:
61:8b:7d:ef:5d:67:b2:36:04:1c:5a:e0:83:f2:d6:
ea:e6:7c:a8:b8:52:cb:b8:96:a9:03:91:7a:34:4d:
75:c8:73:c2:78:9c:ec:fa:08:39:98:14:79:93:9b:
15:7b:20:43:ba:30:74:09:b3:87:e2:dc:60:e9:5c:
4a:90:28:ed:51:8b:5a:dc:0d:9d:c9:0b:96:2e:ec:
cc:33:20:90:08:54:71:82:24:40:07:10:57:a7:2b:
f6:c1:29:2b:7a:52:61:fd:c3:01:9a:65:4b:ed:66:
a7:a1:ba:ba:85:61:be:e8:1f:1f:af:99:17:ba:65:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:32:BD:B6:A1:DE:E5:86:97:A6:8A:78:22:32:57:80:66:24:CB
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Ec0yvbah3uWGl6aKeCIyV4BmJMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.99.0/24
201.3.230.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c7:21:93:e0:06:28:bc:48:bd:76:86:3c:31:61:1b:26:e0:
7b:3b:3c:5a:f9:ed:2b:53:80:18:ff:21:22:60:16:15:72:75:
95:07:f8:b0:64:3b:1f:6f:3a:af:b2:a4:dd:7c:d4:c6:8e:41:
ab:ee:c2:1d:38:ce:f7:e3:c7:5a:cb:08:90:b0:ff:a1:0a:ae:
31:02:f4:81:0c:aa:64:f5:47:08:d0:b3:0a:ca:8e:82:ea:e5:
b8:f1:0a:33:70:84:2d:af:16:0a:ea:23:c9:ba:1a:c9:a6:81:
61:5d:d5:df:e6:14:98:99:6e:d4:35:42:be:85:48:c1:2a:3b:
b2:e6:f7:97:c2:d7:bc:3a:49:ce:b1:7a:b7:33:e1:48:3a:a3:
23:63:0c:29:28:80:50:22:62:c1:2e:96:af:d4:cc:76:14:04:
28:76:89:38:ee:9a:36:97:5c:43:71:5a:5d:bd:88:bc:f6:27:
70:ad:90:a8:70:75:08:d6:bf:58:fe:64:4c:73:4f:a1:b8:ad:
40:4b:79:93:60:84:2a:b7:ff:9c:1f:e3:e3:16:3f:25:82:cb:
c9:20:6e:76:71:ed:d7:89:4b:10:8c:8b:42:d0:b0:2e:4a:78:
a9:e2:97:f9:35:03:c9:fa:89:db:4d:a2:3c:0c:86:4b:63:22:
20:75:82:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8mso3FgIxI3QdTErh+3w+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNzAzMDYzNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWNkMzJiZGI2YTFkZWU1ODY5N2E2OGE3ODIyMzI1NzgwNjYyNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeTX701aWBxcSyziYBmTtktt/Ozr
REw6d32mR0GetNCKjQXYRkDogrCOlsm0is5Ez0ALTaKXtJf7KgOL0LaulGdtwdi5
hI30pq7xx+vvUmVJ+jCbmo/TeQ+vywppO8VAOq889AYPY35HLV288x5w8/zAv7mN
Rd9nfmKfK6Ex/i1MaP8wZxdhi33vXWeyNgQcWuCD8tbq5nyouFLLuJapA5F6NE11
yHPCeJzs+gg5mBR5k5sVeyBDujB0CbOH4txg6VxKkCjtUYta3A2dyQuWLuzMMyCQ
CFRxgiRABxBXpyv2wSkrelJh/cMBmmVL7Wanobq6hWG+6B8fr5kXumU3bwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBHNMr22od7lhpemingiMleAZiTLMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvRWMweXZiYWgzdVdHbDZhS2VDSXlWNEJtSk1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvyxjAwQA
yQPmMA0GCSqGSIb3DQEBCwUAA4IBAQBSxyGT4AYovEi9doY8MWEbJuB7Ozxa+e0r
U4AY/yEiYBYVcnWVB/iwZDsfbzqvsqTdfNTGjkGr7sIdOM7348daywiQsP+hCq4x
AvSBDKpk9UcI0LMKyo6C6uW48QozcIQtrxYK6iPJuhrJpoFhXdXf5hSYmW7UNUK+
hUjBKjuy5veXwte8OknOsXq3M+FIOqMjYwwpKIBQImLBLpav1Mx2FAQodok47po2
l1xDcVpdvYi89idwrZCocHUI1r9Y/mRMc0+huK1AS3mTYIQqt/+cH+PjFj8lgsvJ
IG52ce3XiUsQjItC0LAuSnip4pf5NQPJ+onbTaI8DIZLYyIgdYLq
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client