Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XcKy4s8UFGSNF7DRm9vpAl0ye-Q.roa
File: XcKy4s8UFGSNF7DRm9vpAl0ye-Q.roa (raw, json)
Hash identifier: 7ZbSH6PxGk7W7ioegzQvW8ShP/oQFQFsY7hElJCS8E4=
Subject key identifier: 5D:C2:B2:E2:CF:14:14:64:8D:17:B0:D1:9B:DB:E9:02:5D:32:7B:E4
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A06B7F9D31A7B6A4D3F2E65239A92EED5A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XcKy4s8UFGSNF7DRm9vpAl0ye-Q.roa
Signing time: Fri 04 Sep 2026 08:18:40 +0000
ROA not before: Fri 04 Sep 2026 08:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 191.44.98.0/24 maxlen: 24
191.44.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:7f:9d:31:a7:b6:a4:d3:f2:e6:52:39:a9:2e:ed:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 4 08:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dc2b2e2cf1414648d17b0d19bdbe9025d327be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:b9:59:9a:92:33:5f:b4:89:e8:49:96:ec:
10:16:9f:a6:de:5b:82:03:d0:8e:51:a2:f8:ad:03:
30:df:8e:1b:21:d3:b8:f3:50:da:0f:2d:5f:55:25:
c7:15:1d:de:4c:c6:bf:80:3c:aa:f4:80:25:87:30:
19:e6:0f:3c:83:46:1d:ed:f6:98:25:ab:84:95:76:
37:62:0a:67:5f:04:10:d4:f9:4f:5d:07:13:26:b3:
ce:bb:35:9b:8e:e6:94:e3:13:96:72:64:54:fe:b1:
81:fe:1e:02:8b:b8:18:a8:c6:d7:f0:04:b0:cf:82:
b6:f1:40:83:90:58:c6:33:69:f8:6f:18:39:27:39:
96:ab:6b:17:7a:4f:86:72:df:18:df:c3:4c:a4:b6:
c8:b4:9c:6f:2c:09:07:77:85:b3:1e:b4:b6:21:f0:
42:20:4d:53:64:e5:a6:12:b9:58:69:7b:e4:f0:91:
97:e9:fc:5e:81:b9:9e:03:4f:fd:d4:87:70:af:55:
0c:fb:04:62:47:22:dd:29:2e:c8:2f:bc:08:28:c5:
79:ac:3d:ee:de:a7:9a:06:bf:e5:55:53:4a:ac:04:
d8:a9:09:77:c9:45:65:22:91:e9:29:63:5e:94:7d:
f2:c3:05:27:92:39:20:29:60:91:c9:c9:0b:fb:0e:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C2:B2:E2:CF:14:14:64:8D:17:B0:D1:9B:DB:E9:02:5D:32:7B:E4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XcKy4s8UFGSNF7DRm9vpAl0ye-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.98.0/24
191.44.103.0/24
Signature Algorithm: sha256WithRSAEncryption
49:50:67:52:03:d0:cf:4d:56:1e:1b:a4:5a:81:23:93:94:75:
26:33:d4:12:e8:2a:35:81:5d:10:96:fd:da:75:38:93:c2:8a:
0d:2b:fe:70:3d:23:d8:22:b9:7f:8d:93:45:da:31:c3:27:99:
d9:82:c9:73:d5:a5:3b:57:3e:5a:a6:ac:9d:32:0c:07:85:54:
03:86:54:6e:87:39:9b:a2:1a:6e:a7:46:65:da:a5:49:b3:45:
f2:b5:fe:b4:9d:23:3d:c9:09:f0:ce:2e:40:92:37:3c:a9:33:
58:a2:47:c7:0e:c2:e4:21:b6:2b:c7:b9:0c:ee:52:f5:57:f7:
0a:aa:e4:52:c7:0a:9f:76:5d:af:df:94:73:57:f1:ef:4a:ab:
7c:ad:78:e2:4c:0c:90:87:16:b1:1b:bd:37:8e:2d:80:b2:69:
26:ef:05:db:d1:f0:a7:64:de:d3:ef:3f:7f:bf:ad:80:b1:e0:
7d:62:f8:41:e9:c2:a4:e1:66:8f:b9:94:3e:44:5c:8f:7b:cf:
fd:ed:2f:5e:02:8e:8b:48:f4:73:de:36:4b:44:52:5f:52:6b:
d0:9d:bc:bc:59:c9:bb:40:03:86:76:2c:11:89:ad:56:74:0a:
8f:3f:87:29:9e:3a:69:f2:0d:43:2c:14:77:61:33:ea:6a:2b:
23:c8:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:17 2026 by rpki-client