Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Hv43PRsvoXwnO2zLmNyladrE7zQ.roa
File: Hv43PRsvoXwnO2zLmNyladrE7zQ.roa (raw, json)
Hash identifier: /2RYsFYhYacm+lcuU8kUH2dni2M3slridMLyxpn375Y=
Subject key identifier: 1E:FE:37:3D:1B:2F:A1:7C:27:3B:6C:CB:98:DC:A5:69:DA:C4:EF:34
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A06B7DC8981397591375C1584A8E5FF086
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Hv43PRsvoXwnO2zLmNyladrE7zQ.roa
Signing time: Fri 04 Sep 2026 08:16:40 +0000
ROA not before: Fri 04 Sep 2026 08:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 191.44.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:7d:c8:98:13:97:59:13:75:c1:58:4a:8e:5f:f0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 4 08:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1efe373d1b2fa17c273b6ccb98dca569dac4ef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:dc:4d:65:0f:c7:17:e6:43:1b:d3:99:8b:
8d:53:02:75:56:1d:7f:d2:44:4a:0f:3e:f8:ed:03:
0c:60:ab:7f:d1:a6:fa:4e:60:8e:67:60:da:c7:8d:
16:cf:a2:1b:39:77:df:66:84:57:dd:fe:49:1b:46:
5f:24:42:63:cc:26:2f:2e:11:ac:df:b2:a9:30:4e:
ea:88:70:59:b9:bf:37:60:18:b4:ba:20:c3:04:08:
ab:3a:db:2a:b2:cf:f2:fc:81:b3:e3:8c:7f:a2:c8:
cb:f8:33:87:15:2e:4b:51:47:83:f5:b9:9a:7b:09:
57:1d:fa:c2:39:7c:7d:b7:8a:7f:51:88:0a:4a:88:
d1:0e:88:de:e6:59:18:f3:8e:0f:3c:a5:6d:0c:3c:
05:8d:9f:6f:78:36:1d:1d:b3:ef:35:60:e8:36:bb:
7f:12:30:99:57:45:94:84:05:13:6b:81:b0:51:cc:
93:32:39:92:86:b3:cf:d9:a1:a7:05:03:84:9f:26:
94:0f:42:06:15:14:45:79:dd:67:3e:8a:2c:fa:ea:
69:4d:9b:0d:c0:e3:ab:73:03:d2:a1:e9:15:a6:30:
6d:a0:f8:b6:fd:ee:4b:f5:ee:28:2f:19:ab:b4:21:
09:86:08:0e:42:9f:ee:e2:5a:70:ed:47:1e:15:e0:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:37:3D:1B:2F:A1:7C:27:3B:6C:CB:98:DC:A5:69:DA:C4:EF:34
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Hv43PRsvoXwnO2zLmNyladrE7zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:30:22:10:e3:92:36:1f:88:cc:9d:fc:ba:1c:5a:9f:48:b6:
a4:64:5e:2b:1d:3d:84:e9:35:6b:9b:81:7f:16:3a:90:43:0f:
e0:ee:35:d7:87:cc:e3:80:f0:32:db:35:b6:e0:c5:b4:b1:34:
be:63:4e:a3:db:76:fe:f0:46:24:da:9b:3b:aa:dd:ba:d8:fe:
04:89:21:cf:6c:cd:2c:5a:42:ef:7c:b1:39:c3:10:ca:dd:e5:
db:8d:df:cf:73:db:f6:94:cd:49:0e:ee:6b:b1:d6:b5:c3:46:
48:ae:12:2b:60:55:51:08:5a:ee:7e:7f:54:1d:26:6b:05:57:
aa:f6:ae:1b:20:58:22:04:2b:92:47:15:cb:66:bd:e5:56:37:
65:5f:31:ea:b2:9a:b0:ce:25:ae:1c:ea:8d:c5:91:2c:50:a2:
27:25:66:ac:b5:a5:d4:3f:89:88:d7:4a:1e:e6:e6:9f:d9:ae:
cb:41:71:2c:2a:66:24:16:00:e2:82:6b:51:18:45:08:ee:1d:
00:8f:a4:7f:ca:d5:4b:3d:4d:91:2a:e8:10:40:82:bb:2b:dd:
e4:7c:8e:38:9f:87:6e:74:a5:f8:1e:34:bd:a0:e9:ae:c8:0e:
a7:65:81:1f:f1:02:e5:27:87:4b:20:1e:0a:44:0c:9d:6b:c4:
76:6e:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:04 2026 by rpki-client