Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Efn78si8Hh8LXRmqvFE5DZ7imrk.roa
File: Efn78si8Hh8LXRmqvFE5DZ7imrk.roa (raw, json)
Hash identifier: LZhdkLCdfM6QkZUVpCZVr+W9Q29pzIPp58cLEvHCh/c=
Subject key identifier: 11:F9:FB:F2:C8:BC:1E:1F:0B:5D:19:AA:BC:51:39:0D:9E:E2:9A:B9
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F838848ADB4AABFD3778510AFC7EC397C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Efn78si8Hh8LXRmqvFE5DZ7imrk.roa
Signing time: Tue 21 Jul 2026 07:16:14 +0000
ROA not before: Tue 21 Jul 2026 07:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.93.0/24 maxlen: 24
191.44.116.0/24 maxlen: 24
191.44.122.0/24 maxlen: 24
191.44.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:88:48:ad:b4:aa:bf:d3:77:85:10:af:c7:ec:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 21 07:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11f9fbf2c8bc1e1f0b5d19aabc51390d9ee29ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:a4:41:9f:73:70:27:2a:a6:71:fe:a8:0a:
30:d7:87:c0:d6:65:15:c7:e4:05:5c:8c:bc:70:42:
11:9e:26:b9:0a:a4:52:61:09:d6:18:b5:35:36:07:
13:aa:9b:95:c0:fe:b7:ff:28:f4:b1:f4:cc:02:de:
8e:63:36:95:4f:db:3f:c2:6c:2a:02:20:2c:58:56:
7d:d0:ae:85:84:df:bd:f2:fb:ab:f0:6d:71:7c:38:
ca:b1:33:77:fd:56:13:15:46:6d:0d:35:61:86:d8:
18:3c:7a:7e:2b:7a:e2:a6:d2:b5:a6:c5:8e:a4:68:
6b:d9:87:80:42:54:f7:3e:e8:cb:bc:3f:6a:26:d9:
94:4e:db:0b:9e:d7:b2:c3:4c:38:00:6b:10:e9:d4:
c6:61:f5:b4:12:b7:32:b8:b0:6a:b5:bb:51:2b:e1:
30:92:a5:62:53:1c:76:b9:88:72:6c:08:01:58:b0:
f5:86:aa:25:98:3f:68:7e:5c:29:5c:f9:41:31:7e:
9e:a7:22:64:d4:39:2c:44:5e:94:85:dd:0f:be:dc:
64:e0:ce:62:2f:5d:64:6d:6b:81:04:28:08:d6:d9:
9f:7a:d2:92:d2:59:02:65:9d:08:8e:87:b0:9a:09:
ff:43:7d:e8:41:81:92:27:31:6c:8b:9e:fe:b4:e8:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F9:FB:F2:C8:BC:1E:1F:0B:5D:19:AA:BC:51:39:0D:9E:E2:9A:B9
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Efn78si8Hh8LXRmqvFE5DZ7imrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.93.0/24
191.44.116.0/24
191.44.122.0/24
191.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d2:b5:5c:51:c8:b4:b4:5e:60:c0:55:86:b8:5f:91:48:14:
e6:99:69:4a:2e:8c:b5:94:5f:8a:f1:50:e9:90:46:93:9e:d6:
0f:65:57:89:c9:07:d6:68:23:a0:9f:4c:ba:e3:34:71:81:b7:
d5:23:a4:61:42:2e:6a:87:0c:80:3f:9c:c6:9e:72:51:b6:1a:
83:33:33:4d:ec:ee:5e:c1:df:c9:60:18:fc:7e:4e:bf:96:60:
7f:c2:21:3b:20:e2:7c:f2:fc:4b:ad:c6:f9:64:61:7d:f4:a8:
d6:6b:89:8b:ef:60:ee:12:73:a6:67:11:0a:10:fe:3f:fb:7d:
42:d1:b6:42:a1:12:cb:d4:5d:09:dc:2a:d4:58:7c:a5:32:77:
e0:09:16:d6:49:db:3f:f9:be:be:e0:83:83:d5:55:98:66:f1:
74:33:a5:26:e9:0f:31:b4:f0:e6:25:81:8d:40:ef:7b:c5:4b:
fd:62:cf:37:50:8d:ab:e2:be:0a:6a:15:cb:80:c5:4a:94:29:
07:01:2e:e1:fa:cc:4d:ab:ce:de:9c:d6:e0:63:0d:49:03:01:
86:3e:60:84:de:ec:49:31:c3:bb:4b:ff:2f:ee:45:72:5d:a6:
5b:99:b7:ff:35:b3:2d:e9:ba:df:43:ef:24:42:3c:3b:69:a7:
21:fb:99:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:28:55 2026 by rpki-client