Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/K_H4EXlkPtozoI-jGkurBXKG_QQ.roa
File: K_H4EXlkPtozoI-jGkurBXKG_QQ.roa (raw, json)
Hash identifier: L2v5uARepiJycDGedpAe/oaKbrth4ngDZpC9dGc5x+o=
Subject key identifier: 2B:F1:F8:11:79:64:3E:DA:33:A0:8F:A3:1A:4B:AB:05:72:86:FD:04
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EFF7F592630ACB8547AB1D19367188A62
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/K_H4EXlkPtozoI-jGkurBXKG_QQ.roa
Signing time: Thu 25 Jun 2026 15:56:36 +0000
ROA not before: Thu 25 Jun 2026 15:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 191.44.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:7f:59:26:30:ac:b8:54:7a:b1:d1:93:67:18:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 25 15:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bf1f81179643eda33a08fa31a4bab057286fd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:b3:48:a2:5c:a2:4a:7d:cd:47:03:f7:c9:
ad:29:b3:80:da:3d:9c:72:91:30:d3:49:4a:41:6e:
d3:88:62:8b:8b:2d:9a:8b:14:0b:f8:1e:a2:49:45:
a1:28:df:f4:d6:07:8f:f8:0d:cf:29:65:fe:0d:5b:
db:cc:01:0d:f5:5a:dd:3c:dc:89:91:74:46:63:8a:
bd:67:d0:17:66:18:a0:fd:e4:62:f8:73:48:ba:ef:
b6:f4:f7:56:b4:6d:cf:4b:b9:4a:29:c7:1e:51:4d:
94:11:24:f1:7e:5d:88:0c:6b:03:24:5d:b6:fc:f9:
76:6f:d1:66:8d:bc:60:68:22:cf:ca:d8:28:07:3a:
f5:db:1b:93:e0:e8:c8:78:0a:6c:b9:72:e9:11:9d:
e0:db:ba:3a:aa:a4:ca:58:81:f6:0c:da:ca:7c:ad:
fd:23:64:ae:e5:cd:45:e5:55:9d:44:f4:c1:67:9f:
1d:d5:f9:93:69:a8:e8:9c:63:4b:73:65:30:33:2d:
91:81:9e:10:97:4f:d9:21:02:b5:2c:99:c8:37:59:
68:c7:3b:8b:b0:8c:d7:47:90:42:48:0b:66:a5:a8:
2c:3a:21:60:6f:2e:4c:5b:4a:86:b8:a0:18:75:de:
2b:e5:4f:f9:9f:d6:a2:81:bf:86:b0:b5:6e:28:67:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:F8:11:79:64:3E:DA:33:A0:8F:A3:1A:4B:AB:05:72:86:FD:04
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/K_H4EXlkPtozoI-jGkurBXKG_QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.83.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f9:8c:d4:e4:d0:7b:10:54:fb:60:a8:39:f9:2e:51:c6:7a:
9e:7d:a7:49:85:49:52:93:ab:c4:21:7a:09:8b:2c:d6:65:be:
d7:8b:3e:ff:79:c7:91:47:bd:96:b5:94:d4:64:f5:2d:dc:5b:
ab:e3:93:0e:25:2c:66:15:af:6f:c0:79:0a:a1:d3:7e:bc:8a:
fd:4d:90:19:c4:c2:a3:db:37:ef:2f:be:ae:6b:50:6c:05:0d:
ee:a9:a3:08:56:69:95:bd:df:8e:ea:0e:d0:16:a5:59:d4:0b:
33:7a:f6:11:fa:7b:b8:f2:4a:0a:7e:8e:c0:5c:aa:64:73:1e:
88:fb:d7:3d:e8:e6:0a:23:6a:5c:31:e0:5f:ab:dd:90:65:cc:
81:ee:3d:3c:18:db:e8:08:09:01:e8:7e:07:e0:61:fc:89:36:
93:c8:18:74:97:8b:91:9c:c1:d6:f9:26:9d:93:30:ef:ad:d3:
b6:ea:92:17:54:67:76:51:3f:12:6d:0f:15:d8:e1:41:aa:2c:
98:cc:2f:0d:51:7a:61:68:e6:00:cb:3a:99:d3:99:38:80:57:
83:a4:ad:38:1b:65:ba:5f:d0:fa:e5:9b:ce:40:ff:41:98:1e:
d7:09:b6:59:78:ec:9a:23:7f:4a:d5:d5:e8:ff:b0:d1:df:be:
17:d9:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:27:54 2026 by rpki-client