Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bUW0ZLK0rPwqVF2LrIlLtcupvDc.roa
File: bUW0ZLK0rPwqVF2LrIlLtcupvDc.roa (raw, json)
Hash identifier: SOSB2q2vT8I+cWOmRxhwbO/bqaS+xZo/z++72nmq6fU=
Subject key identifier: 6D:45:B4:64:B2:B4:AC:FC:2A:54:5D:8B:AC:89:4B:B5:CB:A9:BC:37
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EF9BD521CC58C7E6DF1322C3825666943
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bUW0ZLK0rPwqVF2LrIlLtcupvDc.roa
Signing time: Wed 24 Jun 2026 13:06:34 +0000
ROA not before: Wed 24 Jun 2026 13:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402655
IP address blocks: 191.44.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:bd:52:1c:c5:8c:7e:6d:f1:32:2c:38:25:66:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 24 13:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d45b464b2b4acfc2a545d8bac894bb5cba9bc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:59:82:af:01:24:2c:c1:fe:3c:18:b5:e8:
9c:51:98:76:2a:a9:a1:9e:05:8c:1f:f7:b8:e5:78:
db:01:5d:53:7c:06:a8:1b:92:1d:7a:cd:ec:fa:0a:
c8:ee:ad:21:9a:a3:08:1f:5c:d7:76:1e:62:e9:8b:
e4:04:ed:a7:d9:a1:ee:98:88:03:22:5f:39:28:1a:
5f:3a:2e:54:25:70:51:76:1d:f5:49:cf:dd:ef:73:
3b:ea:9b:e6:63:64:0f:1f:08:98:9f:03:4f:1b:55:
1f:3f:46:0c:8e:64:ff:a0:e5:ab:74:7c:d8:ec:f0:
05:4c:6e:3d:b7:09:2b:24:e5:02:01:aa:49:e7:91:
3d:d5:ec:7d:00:47:f8:d1:ca:74:86:be:87:f3:94:
e6:70:63:55:12:87:33:82:99:f6:e1:17:b9:4a:70:
b3:e4:12:57:2e:0e:9f:f9:bc:16:a6:89:db:f1:a8:
30:21:57:1b:62:cb:5d:ad:5d:44:f1:19:49:98:dd:
9b:a1:6b:07:49:a9:cc:56:27:b9:e4:cc:b8:20:05:
9b:4b:dc:0a:25:0b:93:4b:0a:a0:b5:5f:b6:d6:55:
90:04:dd:57:3c:4f:94:7e:98:cb:d7:6f:59:7a:61:
35:3b:91:38:18:26:ac:6d:98:ae:8b:f6:0f:3b:3a:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:B4:64:B2:B4:AC:FC:2A:54:5D:8B:AC:89:4B:B5:CB:A9:BC:37
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bUW0ZLK0rPwqVF2LrIlLtcupvDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.80.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8b:22:6e:e2:06:35:b3:92:53:57:1f:61:eb:96:ca:a3:a9:
fd:e1:e2:df:07:8c:f0:cf:27:ff:ea:3f:49:d4:bc:9b:75:20:
e0:ad:ce:38:b5:d4:ff:69:a9:2e:98:77:b5:62:1d:32:0f:73:
29:31:54:ca:5d:07:78:ed:23:d6:03:98:d8:b4:8d:cb:69:c5:
9b:d7:94:7a:71:e3:49:07:94:72:84:9f:77:d8:ae:30:94:85:
6e:a1:24:bf:22:b1:d2:af:50:62:31:90:9c:8f:4c:8f:db:e6:
b7:c6:92:7d:b8:1b:d9:a8:28:6a:d5:40:7d:0d:48:21:cd:4b:
41:16:02:06:f4:b7:eb:74:9d:e7:4e:b6:17:bb:f8:fe:f1:32:
60:bd:11:1c:fa:85:d0:be:bf:a7:0c:e8:d4:ce:4f:0b:3b:3d:
45:77:48:8e:c3:04:53:89:5b:c9:23:7e:43:eb:cd:ac:fe:0c:
a0:04:ed:b0:4c:41:78:5f:27:8b:9d:32:a8:cb:53:ec:12:96:
41:76:5b:ca:d3:b4:2b:78:73:91:1f:62:ee:fb:e8:39:74:aa:
16:83:f9:96:52:70:91:f7:fe:fa:59:5e:7f:50:77:1b:9d:ca:
8b:7e:52:59:53:6e:09:db:75:09:0f:26:b9:95:93:58:f5:81:
7e:16:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:44:01 2026 by rpki-client