Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bwZqq1HuLa-nYtA-4T3tsmupJcg.roa
File: bwZqq1HuLa-nYtA-4T3tsmupJcg.roa (raw, json)
Hash identifier: 6faiACTNoXHXHFvj7qyz3P7kfmfFcRMqx2R6i3dw0NI=
Subject key identifier: 6F:06:6A:AB:51:EE:2D:AF:A7:62:D0:3E:E1:3D:ED:B2:6B:A9:25:C8
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A136BCE3E5561F7A0032C5EAD02F1F22C9
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bwZqq1HuLa-nYtA-4T3tsmupJcg.roa
Signing time: Tue 13 Oct 2026 19:28:31 +0000
ROA not before: Tue 13 Oct 2026 19:28:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11990
IP address blocks: 201.3.238.0/24 maxlen: 24
201.7.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:bc:e3:e5:56:1f:7a:00:32:c5:ea:d0:2f:1f:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 13 19:28:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f066aab51ee2dafa762d03ee13dedb26ba925c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:f3:4d:f7:8d:ae:16:e0:71:0f:80:42:dd:
c9:fa:34:db:54:b3:90:c0:67:06:bc:ae:52:4e:34:
c9:c2:78:38:f1:10:fa:cb:65:78:65:c9:99:7e:b8:
a8:e1:90:0e:2d:30:15:fe:98:60:3e:07:21:8e:9d:
6b:d2:ca:d9:dc:31:8d:e7:ad:d7:79:b8:9d:72:19:
11:fd:d5:9c:93:87:79:cd:cc:f7:80:0a:71:73:4e:
81:f2:d9:61:10:42:60:a2:d7:2e:ad:e3:f7:33:81:
a9:f5:ad:04:6f:86:16:86:be:7c:fc:65:89:dd:5d:
37:ea:c6:d9:0b:b5:fb:9b:dd:39:d1:ea:d1:04:1f:
d2:cc:9c:5f:0d:e3:11:4a:34:19:aa:31:2c:8a:d7:
f2:c5:62:af:e4:2f:a6:63:06:f0:4e:7c:0f:cc:f7:
f4:9d:fd:ec:a4:b6:f1:5a:c0:fd:4a:3c:a9:0e:ee:
e6:39:43:fd:4f:f3:a5:d3:38:3e:38:2d:44:d7:dc:
61:54:9d:2b:92:c4:66:05:67:1a:17:ff:23:3f:44:
5b:0d:a2:6f:ce:35:46:b6:c0:42:41:59:7f:3b:e0:
9c:32:81:bf:eb:f3:69:f7:54:63:6f:1b:87:be:05:
33:38:c3:b7:3f:43:fe:cf:fb:56:e8:1a:4e:1f:1c:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:06:6A:AB:51:EE:2D:AF:A7:62:D0:3E:E1:3D:ED:B2:6B:A9:25:C8
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bwZqq1HuLa-nYtA-4T3tsmupJcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.238.0/24
201.7.22.0/24
Signature Algorithm: sha256WithRSAEncryption
75:52:a9:50:d8:e4:f2:fa:dd:07:de:93:bc:d5:bc:3e:89:1c:
b7:08:54:70:02:37:bb:30:08:8b:6e:5e:a0:f4:d0:b0:56:10:
78:fe:16:b3:24:d7:f4:ce:a0:ff:cb:5e:cf:75:0b:f0:d8:a8:
d0:0a:a2:a6:4d:11:ff:48:26:0a:8a:c9:8c:b5:a2:99:c8:7a:
36:dc:9c:25:06:9b:00:ab:9e:b2:80:ca:c2:23:c4:5a:5f:6f:
3d:4d:5f:33:9d:90:b2:0f:a7:9b:bf:bf:13:09:1b:45:cb:f6:
c1:5b:1f:56:9d:df:64:07:3e:f3:b0:56:0c:1a:34:ab:25:f6:
f9:05:c6:86:9c:07:b1:92:0a:7f:9d:29:8c:3f:fb:89:57:44:
c5:df:fa:0a:80:d0:66:0b:3f:c2:8f:78:f0:70:7b:87:98:eb:
0b:d3:07:c1:8e:19:43:ad:44:ad:43:b1:1e:b5:cb:2f:69:19:
f6:4d:09:4f:f3:36:26:b4:57:00:53:0f:ce:a8:ce:95:fe:56:
09:29:bb:fd:fb:f6:0c:b2:06:50:57:e7:24:41:76:9c:b4:12:
48:45:c6:82:dc:3b:28:4f:04:bb:3c:19:92:fb:e3:ce:22:72:
08:02:4a:0e:d0:5d:7b:f3:ef:ad:48:60:da:1f:2a:32:b9:c5:
b3:2d:71:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:06:53 2026 by rpki-client