Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/a9ZQLdqgR9sb2QJEs9QjmHLgYwE.roa
File: a9ZQLdqgR9sb2QJEs9QjmHLgYwE.roa (raw, json)
Hash identifier: uZRtUaAPN/0dXwn/vI9Mfmwtm7y5LlOWq9NU99JsUUI=
Subject key identifier: 6B:D6:50:2D:DA:A0:47:DB:1B:D9:02:44:B3:D4:23:98:72:E0:63:01
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F4382F57A6A232FFFC8124B3E8182EBEF
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/a9ZQLdqgR9sb2QJEs9QjmHLgYwE.roa
Signing time: Wed 08 Jul 2026 20:54:43 +0000
ROA not before: Wed 08 Jul 2026 20:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204240
IP address blocks: 191.44.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:82:f5:7a:6a:23:2f:ff:c8:12:4b:3e:81:82:eb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 8 20:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bd6502ddaa047db1bd90244b3d4239872e06301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:72:b4:67:28:d3:6c:c8:c2:b0:68:03:37:
28:93:9a:3a:77:80:46:e7:c8:a0:9c:78:85:c4:78:
f8:99:8e:54:1e:21:7f:78:b9:5b:7d:09:fe:5b:02:
c5:f2:42:9c:26:ce:fd:23:31:25:e9:73:8c:a0:e0:
81:50:44:4f:cb:ef:2e:1d:d1:4a:d7:a0:1d:cf:2f:
70:0e:8a:1d:02:a5:d9:6e:ca:4d:68:7a:2d:32:29:
e5:00:37:f8:03:e7:0c:64:4a:65:fa:c4:78:de:e0:
d2:4b:0a:e4:96:28:a4:2c:bd:9e:68:b9:0d:86:fc:
e0:7f:ca:00:4e:3e:dc:c9:b3:38:b6:d6:47:30:17:
a1:04:7c:bc:5c:8f:c4:4e:f7:0a:5a:2d:d8:63:d4:
5c:d4:9e:5e:52:c7:46:0b:c0:e1:41:38:39:f8:06:
eb:41:de:fd:93:f2:ed:29:08:60:66:f1:81:d8:49:
f5:5c:da:36:9e:2f:c8:4e:4f:5b:c1:79:bd:a0:5b:
aa:bf:75:c9:40:ea:cb:7b:12:56:4e:16:0d:b9:f6:
d4:00:0f:75:1d:7d:ad:2e:1d:62:c9:3a:2b:2f:7e:
c4:c2:97:aa:2f:2d:90:76:3b:90:83:9c:7d:c8:77:
62:89:8e:33:75:05:8e:72:f5:4c:3b:51:49:82:9d:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:50:2D:DA:A0:47:DB:1B:D9:02:44:B3:D4:23:98:72:E0:63:01
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/a9ZQLdqgR9sb2QJEs9QjmHLgYwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.70.0/24
Signature Algorithm: sha256WithRSAEncryption
99:85:be:d2:66:46:f1:95:26:71:18:2a:e5:ad:85:f5:bd:ed:
31:8e:7c:4b:4c:07:ad:92:90:82:7c:d2:f9:d7:59:42:a5:44:
f2:fe:08:e4:c5:99:2e:34:e8:41:db:06:91:51:0f:58:3d:ea:
ca:c3:13:b6:62:a8:f1:2f:51:01:24:7d:2f:7b:03:5c:be:b8:
0d:0e:7c:01:fb:ac:90:5f:5d:21:15:2e:b2:eb:a2:9b:6a:52:
05:37:31:d3:95:bf:a9:4f:6e:07:9f:d5:b7:96:fd:0f:7a:a4:
a0:6e:17:4e:48:98:24:c9:5d:eb:ab:e6:89:26:22:7e:3d:90:
fc:26:72:ad:7f:07:32:f8:ba:b2:f0:ae:6b:54:42:1d:4b:9b:
a2:3e:61:40:e8:76:76:92:4c:33:22:7a:3b:99:ba:5d:a6:bf:
4f:9f:58:1e:be:5e:ee:1a:05:4f:24:63:08:b6:c9:4a:29:0a:
d0:68:a8:10:92:01:1b:b9:54:90:22:db:98:77:36:96:c4:72:
3e:e7:e2:06:49:49:95:01:58:4c:77:9e:86:e0:01:4b:01:24:
16:ae:5b:be:2e:eb:f7:20:58:3b:93:f4:7d:7d:8d:b8:7a:86:
89:bd:fc:6b:97:c9:f2:76:f5:69:d2:94:b0:4a:cf:b7:f1:fa:
0f:99:4c:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9DgvV6aiMv/8gSSz6BguvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNzA4MjA1NDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmQ2NTAyZGRhYTA0N2RiMWJkOTAyNDRiM2Q0MjM5ODcyZTA2MzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnehytGco02zIwrBoAzcok5o6d4BG
58ignHiFxHj4mY5UHiF/eLlbfQn+WwLF8kKcJs79IzEl6XOMoOCBUERPy+8uHdFK
16Adzy9wDoodAqXZbspNaHotMinlADf4A+cMZEpl+sR43uDSSwrkliikLL2eaLkN
hvzgf8oATj7cybM4ttZHMBehBHy8XI/ETvcKWi3YY9Rc1J5eUsdGC8DhQTg5+Abr
Qd79k/LtKQhgZvGB2En1XNo2ni/ITk9bwXm9oFuqv3XJQOrLexJWThYNufbUAA91
HX2tLh1iyTorL37EwpeqLy2QdjuQg5x9yHdiiY4zdQWOcvVMO1FJgp0coQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvWUC3aoEfbG9kCRLPUI5hy4GMBMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvYTlaUUxkcWdSOXNiMlFKRXM5UWptSExnWXdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxGMA0G
CSqGSIb3DQEBCwUAA4IBAQCZhb7SZkbxlSZxGCrlrYX1ve0xjnxLTAetkpCCfNL5
11lCpUTy/gjkxZkuNOhB2waRUQ9YPerKwxO2YqjxL1EBJH0vewNcvrgNDnwB+6yQ
X10hFS6y66KbalIFNzHTlb+pT24Hn9W3lv0PeqSgbhdOSJgkyV3rq+aJJiJ+PZD8
JnKtfwcy+Lqy8K5rVEIdS5uiPmFA6HZ2kkwzIno7mbpdpr9Pn1gevl7uGgVPJGMI
tslKKQrQaKgQkgEbuVSQItuYdzaWxHI+5+IGSUmVAVhMd56G4AFLASQWrlu+Luv3
IFg7k/R9fY24eoaJvfxrl8nydvVp0pSwSs+38foPmUy2
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client