Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/KAxy5Cm-EbmZ6HJIGnilN8pZ-tM.roa
File: KAxy5Cm-EbmZ6HJIGnilN8pZ-tM.roa (raw, json)
Hash identifier: hYbFxfuZABNyIjvH5MMDbxRULHEO9IppGnM96iMzbpU=
Subject key identifier: 28:0C:72:E4:29:BE:11:B9:99:E8:72:48:1A:78:A5:37:CA:59:FA:D3
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FACF41C3D4A8DF0862C2CD79BEA5BB522
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/KAxy5Cm-EbmZ6HJIGnilN8pZ-tM.roa
Signing time: Wed 29 Jul 2026 08:18:26 +0000
ROA not before: Wed 29 Jul 2026 08:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 191.44.99.0/24 maxlen: 24
191.44.124.0/24 maxlen: 24
201.3.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:f4:1c:3d:4a:8d:f0:86:2c:2c:d7:9b:ea:5b:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 29 08:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=280c72e429be11b999e872481a78a537ca59fad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:5a:90:85:a1:d7:ac:1f:60:ad:f0:94:2e:
27:79:b4:ec:16:21:43:31:29:7b:8a:65:fd:b9:32:
ff:61:e3:cd:bf:45:68:c5:da:3d:2d:10:70:3c:65:
69:cf:e6:7e:ee:a2:48:2b:2d:88:9d:7a:fa:5f:71:
6e:99:e5:4f:23:29:1f:09:c7:69:5c:f4:9e:c0:e7:
e9:6d:92:b6:59:08:c3:49:fe:bc:dc:e0:6d:59:97:
58:23:72:84:5e:90:1c:55:b3:d9:2f:34:dd:46:b4:
0e:23:7d:20:de:a8:ea:dc:e1:e2:38:10:da:62:34:
7c:59:72:cc:f5:c3:41:24:17:05:d3:0d:33:b9:cb:
aa:3a:6e:d3:e0:e0:d4:7c:31:09:fb:58:f1:7a:f8:
08:aa:22:b9:c7:d8:cb:2d:08:7e:ab:a2:47:35:83:
83:1d:03:98:5c:9d:e4:01:d0:17:c1:57:2e:cd:56:
ba:44:4e:97:4e:55:2e:d2:43:f0:e2:50:0d:50:3a:
65:30:df:5b:5a:c4:63:cb:c0:7b:f4:5a:d5:5b:e2:
af:e9:54:51:d7:b9:35:76:4f:ee:e2:70:7c:a4:89:
e2:b5:5b:1b:fc:33:0b:6a:1d:d0:b0:c6:6b:85:fd:
ed:81:e6:ee:4e:a7:d0:6d:e5:cb:95:96:ac:9e:a7:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:72:E4:29:BE:11:B9:99:E8:72:48:1A:78:A5:37:CA:59:FA:D3
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/KAxy5Cm-EbmZ6HJIGnilN8pZ-tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.99.0/24
191.44.124.0/24
201.3.230.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7d:20:da:70:b8:de:43:31:b2:49:d7:f7:e2:f1:21:da:21:
71:e1:d1:74:4a:0f:18:ff:25:22:0f:4a:9a:a8:f2:f5:f5:31:
e7:91:3d:b1:94:e0:55:68:f7:f6:c4:75:e5:8b:e0:06:ce:64:
ea:28:95:ef:7e:41:4f:74:d3:94:75:d6:18:01:b7:13:e1:34:
85:c7:1a:5b:b8:b0:37:7e:e5:cf:57:fd:b6:7e:55:79:60:cf:
bb:2d:84:d8:7f:0b:91:6f:b9:d8:da:04:79:51:11:ad:ee:03:
23:ac:e3:d6:5f:17:3e:50:fb:19:f0:d1:0c:a3:62:47:17:f3:
58:cb:5f:73:e5:0b:87:ec:b3:85:8e:02:d2:92:58:3e:2f:cf:
06:76:63:8c:91:f5:b0:ac:27:9d:09:15:a7:b3:2c:8f:1f:b7:
2b:5b:b5:31:a8:fe:07:72:b2:2c:2c:c4:f0:27:41:0d:27:c5:
ed:2a:25:4c:54:ec:3a:fa:85:66:c2:18:cc:1c:fe:47:3b:29:
65:45:51:ba:79:02:8f:e2:e7:57:4c:0c:f8:47:fc:3d:59:a2:
bc:0a:1f:91:ad:79:9c:02:49:c3:3d:f2:8c:9f:85:e3:ed:e4:
54:da:9e:b1:54:39:37:61:f2:14:9c:31:0c:33:0f:04:4a:3a:
e5:5c:c5:18
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+s9Bw9So3whiws15vqW7UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNzI5MDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODBjNzJlNDI5YmUxMWI5OTllODcyNDgxYTc4YTUzN2NhNTlmYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOxakIWh16wfYK3wlC4nebTsFiFD
MSl7imX9uTL/YePNv0Voxdo9LRBwPGVpz+Z+7qJIKy2InXr6X3FumeVPIykfCcdp
XPSewOfpbZK2WQjDSf683OBtWZdYI3KEXpAcVbPZLzTdRrQOI30g3qjq3OHiOBDa
YjR8WXLM9cNBJBcF0w0zucuqOm7T4ODUfDEJ+1jxevgIqiK5x9jLLQh+q6JHNYOD
HQOYXJ3kAdAXwVcuzVa6RE6XTlUu0kPw4lANUDplMN9bWsRjy8B79FrVW+Kv6VRR
17k1dk/u4nB8pInitVsb/DMLah3QsMZrhf3tgebuTqfQbeXLlZasnqcm1wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCgMcuQpvhG5mehySBp4pTfKWfrTMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvS0F4eTVDbS1FYm1aNkhKSUduaWxOOHBaLXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvyxjAwQA
vyx8AwQAyQPmMA0GCSqGSIb3DQEBCwUAA4IBAQBHfSDacLjeQzGySdf34vEh2iFx
4dF0Sg8Y/yUiD0qaqPL19THnkT2xlOBVaPf2xHXli+AGzmTqKJXvfkFPdNOUddYY
AbcT4TSFxxpbuLA3fuXPV/22flV5YM+7LYTYfwuRb7nY2gR5URGt7gMjrOPWXxc+
UPsZ8NEMo2JHF/NYy19z5QuH7LOFjgLSklg+L88GdmOMkfWwrCedCRWnsyyPH7cr
W7UxqP4HcrIsLMTwJ0ENJ8XtKiVMVOw6+oVmwhjMHP5HOyllRVG6eQKP4udXTAz4
R/w9WaK8Ch+RrXmcAknDPfKMn4Xj7eRU2p6xVDk3YfIUnDEMMw8ESjrlXMUY
-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:28 2026 by rpki-client