Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YVm5y72DTJs0DwaAuSfhTY3Uph4.roa
File: YVm5y72DTJs0DwaAuSfhTY3Uph4.roa (raw, json)
Hash identifier: cfQzny6bsKHZPLf41ZCugPQCHPYyodk6GiVApzKZ/V4=
Subject key identifier: 61:59:B9:CB:BD:83:4C:9B:34:0F:06:80:B9:27:E1:4D:8D:D4:A6:1E
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019ED01BA78E2BDDACB0BCBB328A2FE39097
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YVm5y72DTJs0DwaAuSfhTY3Uph4.roa
Signing time: Tue 16 Jun 2026 11:05:33 +0000
ROA not before: Tue 16 Jun 2026 11:05:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198894
IP address blocks: 191.44.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:1b:a7:8e:2b:dd:ac:b0:bc:bb:32:8a:2f:e3:90:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 16 11:05:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6159b9cbbd834c9b340f0680b927e14d8dd4a61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:99:01:36:86:dc:58:89:01:55:7b:ed:33:
0e:f7:45:a2:ed:f7:c9:ec:0c:30:54:26:49:13:e0:
0d:d3:e5:1d:29:85:10:03:1c:9f:99:6f:4e:fb:ab:
a1:b8:0d:91:8e:08:78:e0:07:2c:da:fd:64:6b:54:
f2:b5:51:cf:b6:9d:51:91:55:9d:b7:7d:ab:b9:c1:
59:17:a6:39:86:ef:3c:59:ad:26:dc:04:e8:1d:8e:
08:5b:e3:d9:f6:31:73:d0:63:c0:54:d7:cd:10:db:
95:49:16:d3:73:e8:01:3e:21:93:88:43:6b:f9:ac:
73:e6:0e:9a:a3:5f:19:72:ad:9f:7c:3d:a2:f2:16:
b0:54:80:eb:a5:62:e1:b5:db:3a:da:80:49:65:f8:
d0:13:ff:7a:8f:b1:8b:9a:df:c3:bb:ee:ef:2e:16:
c9:82:89:1e:d1:4d:47:eb:77:a6:37:ca:80:54:a9:
ce:40:99:23:b3:09:f8:b5:2e:77:a9:66:6c:0a:c4:
ea:4e:b9:75:be:20:55:ae:e7:de:e3:56:b5:70:03:
14:2d:7f:a5:ea:1e:db:66:d3:49:b2:de:e9:af:64:
f5:00:dc:9b:43:ae:10:7c:2a:0f:28:03:34:e8:58:
d6:f8:4f:e8:72:c2:b2:ba:10:12:8f:4c:7a:26:a1:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:B9:CB:BD:83:4C:9B:34:0F:06:80:B9:27:E1:4D:8D:D4:A6:1E
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/YVm5y72DTJs0DwaAuSfhTY3Uph4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:60:f0:28:82:56:8d:dc:ba:ae:ec:0f:2f:52:17:f4:82:50:
20:51:e9:72:6b:af:07:89:76:ce:67:9a:0f:2e:12:33:c3:42:
ed:25:8e:d4:03:a5:36:13:36:4a:5b:56:cd:54:e9:16:fa:73:
97:ee:5e:e2:f3:c9:92:eb:0a:e8:9f:17:22:b6:37:94:b6:e7:
13:cc:1a:b8:fe:36:d0:03:72:f1:90:45:76:53:a9:a5:c2:9e:
a7:84:f0:39:36:73:e0:77:b4:d9:ef:09:73:4c:4b:f0:f9:1f:
c1:c4:26:87:04:48:00:21:c0:6f:7d:2f:d2:f7:df:48:47:94:
89:76:79:3c:2e:04:30:94:de:b8:e2:02:0a:65:15:3d:dd:b5:
33:42:bc:9b:54:20:74:11:c3:8e:fd:19:73:dc:c7:b4:2a:fb:
30:9c:c1:ce:45:e0:55:b5:94:45:7b:a7:29:49:8e:82:fe:ea:
29:e9:02:cb:aa:3f:5e:6a:bd:2d:d8:a0:69:69:77:3a:3f:78:
a2:ff:8c:e6:94:01:ed:45:c3:94:3c:65:1a:1f:88:08:79:10:
75:16:87:44:e7:52:47:1b:9c:88:cf:6c:23:a8:16:f8:be:9c:
51:4a:04:9e:cc:c2:72:88:5a:95:ba:24:a5:0e:05:54:2d:86:
85:e0:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client