Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Vlh5g7gfSrZ4KO_wytkT4s-2KTY.roa
File: Vlh5g7gfSrZ4KO_wytkT4s-2KTY.roa (raw, json)
Hash identifier: 6N5D2lqAKScmiETpzMRi7oN5K8Hz7nnmkUhIaLavY98=
Subject key identifier: 56:58:79:83:B8:1F:4A:B6:78:28:EF:F0:CA:D9:13:E2:CF:B6:29:36
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EDA9E9C93C65468209CF99E79FE3AE5D2
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Vlh5g7gfSrZ4KO_wytkT4s-2KTY.roa
Signing time: Thu 18 Jun 2026 12:04:48 +0000
ROA not before: Thu 18 Jun 2026 12:04:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 191.44.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:9e:9c:93:c6:54:68:20:9c:f9:9e:79:fe:3a:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 18 12:04:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56587983b81f4ab67828eff0cad913e2cfb62936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:89:c0:31:63:00:7d:b6:f9:55:5b:7d:5d:
b0:a4:8c:3c:e3:a8:90:13:e4:0d:a8:ce:f0:f2:e1:
52:c0:f5:50:80:a2:ad:73:93:e6:c2:57:11:ef:53:
f4:9e:87:97:4c:1b:88:a6:da:ff:2f:e1:c6:ff:70:
24:d0:9b:de:41:5e:fb:fa:23:73:d8:1f:11:33:1d:
d5:c5:04:1b:e4:1c:49:19:08:13:1e:73:f0:c6:e7:
f9:38:c2:a3:e7:b1:4c:09:fc:96:83:92:34:20:6d:
57:72:ab:4c:e1:4b:ef:6e:7c:da:bc:41:47:50:14:
4b:6e:e4:c1:5a:42:6f:9f:7f:a2:fa:94:d3:18:d4:
dc:2a:da:6d:50:c0:af:92:e0:f0:e2:4b:2a:7b:23:
5d:6e:7f:d4:a9:81:35:83:da:0b:49:cc:5c:d0:a8:
8c:bc:bf:d6:ac:8f:0c:1f:e7:16:50:a8:16:f9:94:
2e:72:98:28:15:a2:5c:92:60:62:fb:97:2c:b1:fc:
81:2a:68:5c:1f:a4:3e:68:c5:6a:58:ec:ee:1a:3a:
e1:5e:f8:7e:f8:bd:a4:98:81:5d:c7:58:0a:07:80:
3f:df:0c:24:61:69:b1:86:1e:3f:c4:05:ac:45:84:
d8:3e:34:e7:39:9e:30:df:70:31:a8:d5:18:e8:77:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:58:79:83:B8:1F:4A:B6:78:28:EF:F0:CA:D9:13:E2:CF:B6:29:36
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Vlh5g7gfSrZ4KO_wytkT4s-2KTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:12:26:88:9a:38:32:30:51:7c:01:b8:f1:1a:93:b5:9a:f1:
6f:1e:33:d9:a7:48:35:80:52:ba:ec:c6:08:72:81:87:08:14:
8e:5a:b2:bb:81:12:1f:b9:f6:97:43:6f:24:a1:47:45:91:7f:
21:57:23:8b:e2:6a:62:c3:c6:b3:36:0d:0a:af:4e:ed:8e:a3:
09:48:82:90:3c:fe:e5:d2:27:c4:37:ba:ee:9c:a6:5b:09:a6:
de:65:a8:cc:d7:7d:6d:81:93:b7:d0:1d:b6:8e:18:84:8f:43:
b0:78:80:6f:d5:ad:23:76:ee:b3:6a:56:60:54:6d:77:35:52:
bc:5d:df:3a:50:83:2e:a8:ca:2b:4f:cf:9c:d1:5f:3f:2c:00:
72:86:cd:a9:03:c5:38:c8:23:02:81:2b:64:c8:51:35:a8:7b:
58:a7:39:52:18:70:57:48:30:2b:22:bf:11:24:f9:a7:91:ff:
b4:5d:bb:12:4e:c0:5e:9e:37:fb:83:c3:54:40:27:45:db:2d:
55:49:67:e1:2e:3c:98:1a:8a:70:21:41:79:de:5e:17:1d:74:
42:9a:13:bb:11:c5:9e:ea:8c:81:3a:df:09:98:9a:dc:84:5c:
08:6b:0d:cf:3f:fe:40:67:95:e0:0c:50:b3:64:20:fe:31:ee:
ae:c1:ad:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7anpyTxlRoIJz5nnn+OuXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNjE4MTIwNDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjU4Nzk4M2I4MWY0YWI2NzgyOGVmZjBjYWQ5MTNlMmNmYjYyOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmSJwDFjAH22+VVbfV2wpIw846iQ
E+QNqM7w8uFSwPVQgKKtc5PmwlcR71P0noeXTBuIptr/L+HG/3Ak0JveQV77+iNz
2B8RMx3VxQQb5BxJGQgTHnPwxuf5OMKj57FMCfyWg5I0IG1XcqtM4UvvbnzavEFH
UBRLbuTBWkJvn3+i+pTTGNTcKtptUMCvkuDw4ksqeyNdbn/UqYE1g9oLScxc0KiM
vL/WrI8MH+cWUKgW+ZQucpgoFaJckmBi+5cssfyBKmhcH6Q+aMVqWOzuGjrhXvh+
+L2kmIFdx1gKB4A/3wwkYWmxhh4/xAWsRYTYPjTnOZ4w33AxqNUY6Hcf5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZYeYO4H0q2eCjv8MrZE+LPtik2MB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvVmxoNWc3Z2ZTclo0S09fd3l0a1Q0cy0yS1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyx6MA0G
CSqGSIb3DQEBCwUAA4IBAQAvEiaImjgyMFF8AbjxGpO1mvFvHjPZp0g1gFK67MYI
coGHCBSOWrK7gRIfufaXQ28koUdFkX8hVyOL4mpiw8azNg0Kr07tjqMJSIKQPP7l
0ifEN7runKZbCabeZajM131tgZO30B22jhiEj0OweIBv1a0jdu6zalZgVG13NVK8
Xd86UIMuqMorT8+c0V8/LAByhs2pA8U4yCMCgStkyFE1qHtYpzlSGHBXSDArIr8R
JPmnkf+0XbsSTsBenjf7g8NUQCdF2y1VSWfhLjyYGopwIUF53l4XHXRCmhO7EcWe
6oyBOt8JmJrchFwIaw3PP/5AZ5XgDFCzZCD+Me6uwa0O
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:40 2026 by rpki-client