Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OoKOMkInp2ZWnq9To3x8n1ehaG0.roa
File: OoKOMkInp2ZWnq9To3x8n1ehaG0.roa (raw, json)
Hash identifier: GMx+7N+zsI36SsIqXrgc1w7JdCfl3pjikdsGO457plE=
Subject key identifier: 3A:82:8E:32:42:27:A7:66:56:9E:AF:53:A3:7C:7C:9F:57:A1:68:6D
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F489E5554DD3132DDE0F82ACC9508582F
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OoKOMkInp2ZWnq9To3x8n1ehaG0.roa
Signing time: Thu 09 Jul 2026 20:42:43 +0000
ROA not before: Thu 09 Jul 2026 20:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206668
IP address blocks: 191.44.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:9e:55:54:dd:31:32:dd:e0:f8:2a:cc:95:08:58:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 9 20:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a828e324227a766569eaf53a37c7c9f57a1686d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:4d:76:4c:79:23:13:e4:02:9d:d8:bc:5b:
6b:7d:db:a4:28:72:e6:a6:80:a7:f9:3e:d6:41:a1:
de:1e:83:a6:73:4b:49:00:55:1c:ce:80:d6:da:02:
20:25:ef:75:82:3e:2b:cf:67:12:c9:26:6f:d2:c2:
32:df:1f:56:6f:e8:73:aa:df:2c:c1:19:34:88:a2:
6f:08:65:a2:0d:51:b6:17:ad:b6:a0:ac:18:2a:6a:
e4:f6:b2:27:25:9a:44:0c:36:6d:56:5e:f8:f7:a7:
1a:60:15:17:38:47:52:24:08:ae:82:e7:f7:87:fe:
f6:1f:a1:04:c0:59:dd:8e:4c:72:95:0f:b7:cd:e4:
6f:7b:9b:44:75:4f:b8:9f:c3:94:1e:4d:2b:d9:12:
2d:51:65:d2:28:9c:87:e0:5f:56:2a:f3:55:a6:19:
e7:a8:e1:e3:58:23:c0:c0:c9:dd:34:51:9c:8b:e7:
a7:6a:95:15:1c:23:87:c6:9d:75:a0:8d:45:c2:fa:
64:c4:a0:18:de:18:ae:a3:4d:b9:7a:2a:e3:13:3d:
01:82:55:49:e2:0a:77:90:94:8f:93:a4:2e:fb:df:
d6:4e:a6:13:75:9c:c5:c0:c1:fe:47:27:d0:59:bb:
44:9d:cd:1f:cc:63:b5:9a:e2:b3:5f:b7:11:3d:3b:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:82:8E:32:42:27:A7:66:56:9E:AF:53:A3:7C:7C:9F:57:A1:68:6D
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/OoKOMkInp2ZWnq9To3x8n1ehaG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.65.0/24
Signature Algorithm: sha256WithRSAEncryption
09:38:1c:a1:a3:69:c6:b9:26:23:b3:04:a2:c5:0c:22:f3:8f:
f8:eb:a1:e0:c6:9c:76:84:30:25:76:64:13:cc:67:dd:a5:de:
d0:ad:bf:11:bc:66:22:d0:99:72:e9:6b:d0:e8:cd:39:ba:aa:
8d:f2:a5:e5:dd:54:63:3d:d6:6d:8b:9d:8d:63:ef:60:d5:73:
50:65:bf:08:76:bd:d2:c1:7f:07:63:e4:24:3e:24:79:e3:9b:
a9:84:3a:13:8f:ea:7c:40:4e:9f:95:97:d0:96:e9:a9:8d:de:
24:c3:86:c1:cf:d6:c9:1e:45:76:67:6e:35:73:ca:21:62:d0:
bf:9b:84:d5:a6:33:2c:e5:87:5c:5d:32:d8:69:f3:0d:b9:eb:
83:43:6e:cc:d5:2b:41:41:69:2b:31:cf:97:f3:2d:51:a0:52:
49:bf:c3:d5:a3:c7:49:31:7b:60:cd:be:f5:cc:9c:0b:04:fc:
96:bd:c5:24:98:8a:11:f1:5f:99:ad:e5:bc:c0:a4:3a:41:73:
cb:28:64:5f:1a:92:dd:cc:24:97:7e:b7:fd:5d:d7:cd:08:93:
8a:ab:09:f0:cd:ca:f7:b5:28:8f:69:14:18:25:71:84:dc:e4:
0e:f4:02:10:0b:f3:c8:a2:92:ce:96:c1:bf:c3:08:a8:73:6b:
c2:64:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client