Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Eg95GWvbL0O2S6zlowrp_XJHc_8.roa
File: Eg95GWvbL0O2S6zlowrp_XJHc_8.roa (raw, json)
Hash identifier: MucaLnKlWAbPwb3JPaNgBM1qh35bfs5eUrpZwZVUSYQ=
Subject key identifier: 12:0F:79:19:6B:DB:2F:43:B6:4B:AC:E5:A3:0A:E9:FD:72:47:73:FF
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E4B673AA2FEEE2A0812BCA6E5C65A7A1A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Eg95GWvbL0O2S6zlowrp_XJHc_8.roa
Signing time: Thu 21 May 2026 16:38:36 +0000
ROA not before: Thu 21 May 2026 16:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 191.44.107.0/24 maxlen: 24
191.44.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:67:3a:a2:fe:ee:2a:08:12:bc:a6:e5:c6:5a:7a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 21 16:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=120f79196bdb2f43b64bace5a30ae9fd724773ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:72:ed:de:50:b2:ca:8a:41:f3:2d:75:5b:
6b:2f:c8:81:d9:62:8a:48:2c:c2:0b:2a:ed:49:8d:
33:fe:01:ba:64:ca:59:39:2e:36:1c:29:19:2f:08:
b5:ba:5c:db:ae:12:48:04:5b:cf:45:53:c7:5b:63:
7a:bc:07:83:fa:59:71:e7:b4:f5:6e:d0:63:b2:9b:
80:6f:42:e4:91:f3:f0:ea:76:b2:cb:e2:bd:be:5b:
db:29:98:16:fb:7b:d3:1f:10:e4:10:ee:84:33:e6:
ff:f0:32:7d:b6:5a:74:25:14:3e:fe:52:83:41:45:
f9:ee:b1:28:3f:31:dc:ea:9e:5f:20:cb:2e:cd:62:
e7:4b:25:12:ba:05:be:ac:c0:dc:53:e5:1e:a5:4b:
35:75:55:a5:93:06:59:3f:7a:e1:45:e9:f6:ea:a1:
91:05:1b:a4:a8:99:2e:31:6a:24:21:0d:29:04:47:
18:ee:68:13:ad:59:a3:93:e1:63:63:33:d2:58:ea:
7f:24:02:57:85:11:a2:9d:bd:05:9a:da:68:23:62:
21:a3:d8:37:c7:d1:0d:fc:0d:a0:82:11:3d:48:9a:
71:5b:6b:33:f4:1f:bc:ab:aa:9d:16:5e:d8:fe:aa:
f9:69:05:4a:c4:b2:40:9a:e5:ee:a7:b4:9b:82:5b:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0F:79:19:6B:DB:2F:43:B6:4B:AC:E5:A3:0A:E9:FD:72:47:73:FF
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Eg95GWvbL0O2S6zlowrp_XJHc_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.107.0/24
191.44.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:39:2f:71:a4:3b:62:50:9b:8d:a5:e2:a7:8a:2f:e1:8a:2d:
6e:ff:52:3a:ab:f1:8d:34:05:84:37:4f:6f:0d:28:5e:f2:c7:
4c:2b:53:2d:7d:29:9e:35:8f:31:83:f4:63:37:c7:d3:4e:54:
f3:15:87:83:11:cb:a9:26:a4:67:39:04:be:73:5b:fe:ab:f6:
11:39:c3:2e:d8:44:fa:24:bb:6b:18:d5:7b:00:7b:36:c5:05:
6e:18:4a:9f:9d:69:fb:fe:8e:1b:db:65:18:46:80:d9:a9:ae:
97:5c:1e:ba:da:51:8d:7a:b7:5b:07:30:2f:03:8c:b5:e3:08:
6f:10:eb:03:fe:b3:80:c9:19:46:5a:16:28:2d:64:18:8d:33:
ba:b0:41:31:bb:64:e3:b0:46:d9:5a:0d:2e:da:ef:2c:ef:71:
a2:08:ca:96:1d:07:74:92:0b:ab:91:23:aa:02:e4:66:1f:e0:
73:53:d5:91:38:ec:87:84:66:4b:31:01:da:71:8a:55:05:31:
80:6e:b0:76:4e:e1:f2:11:99:55:7e:e5:0d:a7:4d:1f:bf:b2:
cc:9d:38:fa:64:2d:b9:1f:e1:2b:f8:14:0a:4c:0e:04:d4:1e:
96:5f:01:fb:34:a6:a6:c9:48:2b:a2:dd:6a:61:43:3e:79:1d:
df:0f:b8:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5LZzqi/u4qCBK8puXGWnoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNTIxMTYzODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjBmNzkxOTZiZGIyZjQzYjY0YmFjZTVhMzBhZTlmZDcyNDc3M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA171y7d5QssqKQfMtdVtrL8iB2WKK
SCzCCyrtSY0z/gG6ZMpZOS42HCkZLwi1ulzbrhJIBFvPRVPHW2N6vAeD+llx57T1
btBjspuAb0LkkfPw6nayy+K9vlvbKZgW+3vTHxDkEO6EM+b/8DJ9tlp0JRQ+/lKD
QUX57rEoPzHc6p5fIMsuzWLnSyUSugW+rMDcU+UepUs1dVWlkwZZP3rhRen26qGR
BRukqJkuMWokIQ0pBEcY7mgTrVmjk+FjYzPSWOp/JAJXhRGinb0FmtpoI2Iho9g3
x9EN/A2gghE9SJpxW2sz9B+8q6qdFl7Y/qr5aQVKxLJAmuXup7SbglvVmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBIPeRlr2y9Dtkus5aMK6f1yR3P/MB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvRWc5NUdXdmJMME8yUzZ6bG93cnBfWEpIY184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvyxrAwQA
vyx6MA0GCSqGSIb3DQEBCwUAA4IBAQA+OS9xpDtiUJuNpeKnii/hii1u/1I6q/GN
NAWEN09vDShe8sdMK1MtfSmeNY8xg/RjN8fTTlTzFYeDEcupJqRnOQS+c1v+q/YR
OcMu2ET6JLtrGNV7AHs2xQVuGEqfnWn7/o4b22UYRoDZqa6XXB662lGNerdbBzAv
A4y14whvEOsD/rOAyRlGWhYoLWQYjTO6sEExu2TjsEbZWg0u2u8s73GiCMqWHQd0
kgurkSOqAuRmH+BzU9WROOyHhGZLMQHacYpVBTGAbrB2TuHyEZlVfuUNp00fv7LM
nTj6ZC25H+Er+BQKTA4E1B6WXwH7NKamyUgrot1qYUM+eR3fD7ik
-----END CERTIFICATE-----
Generated at Mon May 25 16:38:41 2026 by rpki-client