Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/UnYBnAGJn-BOWzAOLedbn4jLnbo.roa
File: UnYBnAGJn-BOWzAOLedbn4jLnbo.roa (raw, json)
Hash identifier: Z1F4S8YJDYiz5itdMAKe0s6d1Vj99117BBgSvlHtSYg=
Subject key identifier: 52:76:01:9C:01:89:9F:E0:4E:5B:30:0E:2D:E7:5B:9F:88:CB:9D:BA
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0355302E5BE8075620838314F45159BD5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/UnYBnAGJn-BOWzAOLedbn4jLnbo.roa
Signing time: Mon 24 Aug 2026 19:50:27 +0000
ROA not before: Mon 24 Aug 2026 19:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 191.44.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:53:02:e5:be:80:75:62:08:38:31:4f:45:15:9b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 24 19:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5276019c01899fe04e5b300e2de75b9f88cb9dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:43:95:21:8a:9e:90:74:5b:13:63:74:88:
b2:b4:d6:89:24:b7:f9:5e:30:e8:66:4a:c6:52:62:
e0:6e:35:a0:40:6f:cd:65:51:8e:de:26:1d:9c:b8:
9a:94:eb:55:e9:6f:0f:ff:b6:d0:50:6f:32:f9:37:
67:60:01:37:90:4a:f7:59:93:cb:ed:75:6b:26:d5:
74:84:23:80:68:b8:5b:09:19:ec:10:ba:df:8a:69:
c5:75:32:18:6c:29:7f:e0:91:1b:1f:79:5c:1f:9e:
67:24:68:6c:0c:c2:f8:4a:8e:bb:8b:b5:97:45:b5:
1e:17:f4:90:ef:b0:27:3f:9b:5f:41:b6:9c:5e:a6:
f8:40:69:76:4a:56:f5:d0:df:18:40:cb:5a:b8:f1:
ce:47:bf:e1:60:6e:6b:15:63:65:88:05:ae:95:9f:
0b:f6:de:f3:37:80:c2:0f:c2:82:43:8b:bf:45:87:
f4:c0:e6:a8:1d:34:7f:59:84:74:a5:0a:ac:d1:78:
80:a3:3f:70:0e:34:3c:2d:e1:bf:44:52:0a:66:3f:
24:84:10:af:69:77:ad:da:ce:37:b5:56:bf:9f:3a:
f9:d8:01:4f:e7:17:d9:cf:82:9b:9c:b4:07:23:ee:
de:c4:29:a3:ff:52:89:14:96:52:de:f1:93:29:f0:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:01:9C:01:89:9F:E0:4E:5B:30:0E:2D:E7:5B:9F:88:CB:9D:BA
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/UnYBnAGJn-BOWzAOLedbn4jLnbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.82.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8b:bf:98:22:0f:1f:e3:7e:73:69:c0:de:31:57:f8:12:85:
80:e8:08:7b:6b:1b:15:fe:80:bd:48:de:60:1b:da:a1:c4:15:
d8:c6:4b:3f:12:50:d7:7a:dd:5d:36:80:bd:be:0b:47:3d:f1:
6d:c9:7c:98:78:fe:e5:2c:72:3b:29:b2:e6:f3:02:43:a3:a3:
7a:56:0f:fb:a7:82:bf:ef:c3:d1:8e:e7:fa:84:10:04:10:e6:
89:5d:a1:bb:a7:cb:67:93:bb:20:0b:9c:b5:f6:7c:98:7c:07:
20:e5:5b:e7:47:37:eb:bc:9c:4e:15:4d:76:32:b5:17:49:17:
14:6c:4b:8e:a5:48:53:25:a7:31:08:a5:ca:f2:c2:b5:0a:66:
2b:e6:83:4c:2b:fa:28:87:3a:1f:24:b1:55:dc:0d:f0:74:ec:
da:d0:0d:4e:48:53:36:92:59:94:a9:c7:e3:2c:11:df:5d:fe:
7b:be:03:65:70:a0:6f:71:fd:e0:92:74:9b:90:3c:25:a3:40:
94:f4:e0:85:9f:71:52:f2:2f:aa:d3:13:54:c1:73:3d:ac:66:
2c:e4:86:7d:10:0f:33:96:51:7e:e6:06:0a:95:54:93:1b:d7:
ae:5e:d2:03:d1:d4:7b:40:f8:1a:0d:83:c1:d7:ba:5f:c0:c5:
fb:a3:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:59 2026 by rpki-client