Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/IfhE8S5G_YWuz-WUX0iFTE_6Lac.roa
File: IfhE8S5G_YWuz-WUX0iFTE_6Lac.roa (raw, json)
Hash identifier: 8T/5pVSgx6eK00RZ3y1+Kj5br6QCnING8+49FCt+r2Y=
Subject key identifier: 21:F8:44:F1:2E:46:FD:85:AE:CF:E5:94:5F:48:85:4C:4F:FA:2D:A7
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DDEF5E2C141E7A5F32058ED16F5142AD9
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/IfhE8S5G_YWuz-WUX0iFTE_6Lac.roa
Signing time: Thu 30 Apr 2026 15:15:49 +0000
ROA not before: Thu 30 Apr 2026 15:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214083
IP address blocks: 191.44.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:f5:e2:c1:41:e7:a5:f3:20:58:ed:16:f5:14:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 30 15:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21f844f12e46fd85aecfe5945f48854c4ffa2da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:92:40:74:e5:b0:97:cd:ff:1c:db:1c:ec:
4b:23:0b:3a:4f:50:ee:72:e2:00:18:40:85:df:ee:
f8:1d:bf:ea:4a:96:33:ec:ca:37:eb:4a:9d:21:21:
7f:ef:c7:b1:b4:76:35:fd:32:77:c4:f1:75:e8:f4:
ec:d1:32:ab:67:bf:1a:f5:26:49:b5:86:c3:db:f0:
18:88:6c:ec:0f:ec:00:74:46:76:5e:10:d0:3f:0a:
11:35:e9:f0:ea:a6:bd:a2:30:7c:f3:34:8f:a9:2b:
58:ae:d2:3b:ff:c7:6a:21:74:c5:71:a7:1a:41:25:
66:2c:ed:8c:32:ab:d3:55:36:99:8b:e6:38:a1:10:
ba:d5:d6:fb:0f:91:e1:8e:ff:1a:da:d0:6f:22:d9:
bd:ab:90:52:46:75:ac:f1:29:69:51:e0:96:3a:17:
d1:54:4e:30:22:ac:2c:c2:d3:3b:f8:cc:ea:5d:17:
11:fb:81:54:87:91:bd:02:ff:f2:19:0b:89:78:6b:
b6:95:45:9e:db:41:14:5e:c2:b3:3a:ad:c3:d3:5d:
ba:42:58:1c:31:e7:08:b3:8c:91:2e:25:1c:69:a1:
3b:66:ba:a4:d0:52:05:49:7a:fa:db:31:b3:10:ab:
4e:0d:04:7a:34:87:7b:2e:a8:9a:8a:59:47:69:4f:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F8:44:F1:2E:46:FD:85:AE:CF:E5:94:5F:48:85:4C:4F:FA:2D:A7
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/IfhE8S5G_YWuz-WUX0iFTE_6Lac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.102.0/24
Signature Algorithm: sha256WithRSAEncryption
89:63:89:a7:1c:32:c9:87:62:19:92:cb:7e:db:5c:05:d1:7a:
b4:1e:70:ef:69:1b:67:b2:72:f2:cb:71:b6:5f:d8:b0:e0:db:
a2:8c:bd:ed:3f:f3:74:10:29:b9:30:13:b3:e8:a6:f2:bf:de:
e9:07:b0:32:9d:66:b7:be:ee:4f:19:5d:02:bb:e7:6b:79:55:
f8:34:89:0d:f9:05:16:59:02:88:ab:5b:4d:d3:4a:4f:26:c3:
c0:85:51:ef:d5:33:dd:08:1f:88:a4:29:0c:a0:a9:48:a5:d0:
51:d4:d9:56:2e:3a:ea:73:5a:10:1e:fc:32:6d:d9:1f:55:4f:
bc:41:67:09:09:70:bf:e2:d9:8b:c0:62:b0:fe:84:8f:5f:57:
6e:53:7d:fa:c0:48:d1:7f:6f:85:82:50:6a:ba:a4:67:c4:05:
c7:29:8a:6a:04:98:7e:1a:2c:ae:fe:0d:b4:2c:59:7b:68:39:
15:1b:aa:6c:9c:28:b9:89:61:a3:bc:5a:ff:c7:0c:c3:48:25:
90:b6:29:22:3b:4c:7b:f8:4d:38:96:5b:cb:c7:6a:3f:a6:aa:
63:2f:82:d7:94:13:f2:4e:41:6d:05:c8:6d:1e:72:60:68:e4:
96:96:32:83:2f:0b:eb:14:e0:ed:b9:35:6f:53:a1:e3:40:9d:
50:1c:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 20:02:01 2026 by rpki-client