Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ErP0F5fkJKiX_AuAdFlXGZV3RbQ.roa
File: ErP0F5fkJKiX_AuAdFlXGZV3RbQ.roa (raw, json)
Hash identifier: sxTbitBBafHgfP7tK9divXjaBvSGpciAdkX9QhgOXxc=
Subject key identifier: 12:B3:F4:17:97:E4:24:A8:97:FC:0B:80:74:59:57:19:95:77:45:B4
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F81937CD57392B0C1B9EDF384836B3217
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ErP0F5fkJKiX_AuAdFlXGZV3RbQ.roa
Signing time: Mon 20 Jul 2026 22:09:14 +0000
ROA not before: Mon 20 Jul 2026 22:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 191.44.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:93:7c:d5:73:92:b0:c1:b9:ed:f3:84:83:6b:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 20 22:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12b3f41797e424a897fc0b8074595719957745b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4f:9b:bc:e7:6b:70:4d:bf:76:a3:f2:ce:87:
39:38:40:8d:cc:73:b9:75:9c:27:2d:de:75:cd:96:
83:46:97:e8:44:e5:db:2b:c0:e2:a0:8b:a4:c5:f2:
b7:ac:a5:34:98:f4:f4:1e:1c:f4:69:d0:a2:fe:54:
2c:b6:fc:11:eb:08:bd:72:69:bf:66:5b:c1:3e:4a:
42:35:64:78:1c:ac:cc:73:79:d0:a8:6c:1d:bf:08:
eb:ea:0b:16:8b:b0:33:90:ef:03:a6:77:0e:81:74:
d2:87:cc:ff:43:58:9b:6b:5a:22:cd:ac:35:20:2d:
df:f9:e8:13:1f:4e:82:e6:4f:06:5f:84:1d:de:58:
1c:58:ed:32:b6:bb:ec:6f:42:2e:8e:b1:9f:7b:68:
b5:f3:fe:23:6e:b3:6a:c2:94:79:5e:a8:d1:1e:12:
f8:46:23:d5:10:57:4d:9b:e0:cb:41:2c:c2:a1:fd:
50:17:45:a6:fe:95:0e:0a:2e:74:f4:1c:3a:1a:5c:
eb:18:50:31:bb:61:c2:f8:c6:9a:53:f1:8f:35:1b:
6d:d3:e8:da:5d:c0:76:34:54:c1:fb:4b:39:52:a1:
8b:5a:1b:ae:36:19:e3:cb:67:76:0a:7e:26:4e:3e:
2a:cd:06:ba:b3:7b:51:36:9c:1d:47:e1:25:d5:7e:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:F4:17:97:E4:24:A8:97:FC:0B:80:74:59:57:19:95:77:45:B4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ErP0F5fkJKiX_AuAdFlXGZV3RbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0b:9d:89:0f:09:38:30:78:de:e3:16:9c:52:3e:65:2b:f7:
79:82:65:f2:ee:cd:8e:6c:67:0a:f7:14:65:e4:0c:b4:ac:9f:
6b:ce:f4:09:47:0c:64:f1:70:90:28:7c:00:27:79:ed:4f:67:
62:1b:66:06:c0:b9:5a:a4:c7:93:83:a5:cb:f6:7b:21:17:e7:
2f:6d:60:35:f4:f2:f3:5a:21:23:1a:42:53:94:97:6c:2a:2e:
8d:ff:86:0e:38:1d:cb:d5:c0:76:35:ae:b7:86:2f:94:28:c2:
ed:45:de:11:01:f5:a5:5d:e5:81:36:72:60:86:bb:bb:fb:6f:
4d:82:86:d3:d0:68:be:f6:f3:0d:be:c1:65:8b:22:fb:91:50:
aa:d7:90:dd:c6:2d:9b:62:b8:70:06:f7:27:77:dc:99:9a:fe:
be:bd:f7:39:f1:0e:44:e8:a9:73:b9:a7:6c:ef:d2:01:53:98:
53:2c:a5:b7:e8:f0:b6:76:58:06:b5:5d:f4:e3:08:59:87:18:
c7:c5:dd:c7:7c:19:a4:62:68:e8:db:79:66:ed:91:d7:8e:74:
57:24:f0:3a:b6:7c:eb:47:1b:f0:ec:6b:4b:f7:c8:9b:b8:67:
ef:3b:b8:88:9d:f2:28:34:ca:c8:24:70:72:02:b6:11:10:ac:
53:e7:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client