Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XndWznIxmLdOhHO_0fr6QO6ALxY.roa
File: XndWznIxmLdOhHO_0fr6QO6ALxY.roa (raw, json)
Hash identifier: yFM3gHIrMPsWtdFtZ7WaW4mRj1FURZXVI33p57GxktM=
Subject key identifier: 5E:77:56:CE:72:31:98:B7:4E:84:73:BF:D1:FA:FA:40:EE:80:2F:16
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A042A11C5CFA02205ABDC54732487EDFDF
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XndWznIxmLdOhHO_0fr6QO6ALxY.roa
Signing time: Thu 27 Aug 2026 09:50:49 +0000
ROA not before: Thu 27 Aug 2026 09:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 191.44.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:a1:1c:5c:fa:02:20:5a:bd:c5:47:32:48:7e:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 27 09:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e7756ce723198b74e8473bfd1fafa40ee802f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:8e:d7:4d:36:b2:95:6e:20:87:9a:0d:45:
1b:b6:49:65:e1:51:01:ad:3e:6c:71:56:25:05:98:
27:ad:a8:11:ba:db:a3:cb:96:1a:70:15:93:4a:a0:
d9:67:27:e3:b5:ba:5d:46:b9:aa:f1:76:f1:5a:ed:
78:e2:c5:b0:27:8a:03:1d:55:0e:b9:83:5b:16:35:
ab:ef:5e:f5:3a:67:8d:7c:09:35:30:c0:d1:a4:f5:
5f:7f:d4:74:70:d2:c9:e0:34:c1:2a:6f:1e:e3:a0:
d6:1a:06:cb:8a:ad:49:4f:64:de:ef:16:b8:cc:43:
e1:75:79:5c:c3:30:d4:d0:b8:77:cc:13:7d:ce:04:
eb:ea:43:c5:e0:5f:93:3e:07:87:69:ca:b7:81:e7:
8e:aa:45:fe:65:a1:fd:13:33:e7:9d:7e:66:a3:ae:
22:1d:91:a1:50:e7:c7:40:11:aa:85:5d:d4:f6:4f:
1e:37:45:c7:13:45:1a:78:3d:c0:aa:97:c5:9c:a7:
0f:a6:4e:c6:19:43:0f:70:91:cf:1b:ff:8a:08:c9:
58:38:72:07:16:b7:74:e9:3a:22:03:cd:9c:9d:de:
2c:20:a7:5c:84:bf:9c:6b:0f:14:c9:d4:72:3d:6f:
0f:72:f0:4b:38:bd:63:d4:b1:50:06:2d:79:81:49:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:56:CE:72:31:98:B7:4E:84:73:BF:D1:FA:FA:40:EE:80:2F:16
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/XndWznIxmLdOhHO_0fr6QO6ALxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.86.0/24
Signature Algorithm: sha256WithRSAEncryption
31:58:e3:8a:dd:8b:db:f8:44:13:c3:11:03:1e:81:63:65:a7:
4f:0d:a2:d8:ba:39:8e:7d:0b:6e:ec:27:63:51:7f:d8:89:a4:
67:55:38:47:99:52:d7:36:8c:6e:5e:53:69:bc:65:5d:f2:64:
c9:b4:07:eb:fa:56:5f:54:4c:60:91:80:5a:94:ba:69:c4:08:
a9:bf:a0:d4:fe:4b:e1:c8:89:94:02:2a:75:46:11:df:d9:c3:
b0:1a:77:da:d2:c5:fd:86:50:96:f0:53:62:d7:d5:5e:97:0e:
94:8e:6f:df:a5:82:91:33:5e:df:32:38:e9:c1:1e:ad:72:4e:
3c:03:62:62:21:f8:38:10:b4:2f:07:33:4f:e2:c4:01:5b:19:
7c:52:51:2d:11:1d:36:fc:73:d1:46:89:b7:d2:9a:37:eb:10:
4e:63:2c:69:f9:f1:0e:7e:74:31:db:57:00:d6:b7:d3:00:24:
70:a2:91:e3:7c:ec:02:90:5e:10:1e:78:8d:59:e2:59:19:c4:
07:a9:a1:ed:bb:3b:94:21:de:92:4e:8d:d1:3c:df:bb:1a:74:
9f:bf:0e:28:4b:47:6c:fc:3e:63:18:a0:94:13:a4:25:16:c7:
57:fe:39:be:53:b0:03:ea:e3:22:6f:07:07:3c:df:db:94:c4:
03:34:5c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:17 2026 by rpki-client