Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/g0nJjbdnPwD-8jPinUoSqSj0lgc.roa
File: g0nJjbdnPwD-8jPinUoSqSj0lgc.roa (raw, json)
Hash identifier: xspj0DBKJDOCU49wCJKnuJ58HmNGsG5tjAkw8mYl17U=
Subject key identifier: 83:49:C9:8D:B7:67:3F:00:FE:F2:33:E2:9D:4A:12:A9:28:F4:96:07
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F0A8F12E3B86403181C67AD7E80E2085A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/g0nJjbdnPwD-8jPinUoSqSj0lgc.roa
Signing time: Sat 27 Jun 2026 19:29:36 +0000
ROA not before: Sat 27 Jun 2026 19:29:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 191.44.104.0/23 maxlen: 23
191.44.106.0/24 maxlen: 24
191.44.107.0/24 maxlen: 24
191.44.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:8f:12:e3:b8:64:03:18:1c:67:ad:7e:80:e2:08:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 27 19:29:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8349c98db7673f00fef233e29d4a12a928f49607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:94:69:d2:b7:74:68:cd:77:cd:08:c7:56:
6a:d3:09:ad:d4:57:c9:ea:bc:44:7a:29:28:13:a2:
ef:19:8d:99:c7:65:66:29:c4:8e:c8:69:c4:72:22:
e9:0c:35:93:66:cd:8b:12:03:4b:b5:55:93:09:2a:
94:17:55:02:95:39:85:c1:5a:9a:cf:51:bf:f9:ef:
b1:3f:88:1e:82:cc:15:20:11:4f:b5:b0:f0:82:21:
9d:40:ba:1a:ca:b8:c9:36:75:c3:84:b3:51:03:60:
35:e7:71:5f:e6:ec:cc:c7:95:bd:2c:7d:81:5a:4f:
dc:44:b3:d4:fb:64:48:e1:b9:7a:ae:e6:ec:0c:54:
92:4a:0b:86:9b:8b:f5:30:be:55:e9:29:e0:9e:b0:
e0:de:2d:2a:ed:ea:fc:c7:d5:19:62:a9:00:40:b0:
e4:24:5d:bf:06:39:57:f4:29:d0:70:fa:fc:82:f4:
42:26:e2:09:c5:6f:6c:06:28:54:79:f8:30:30:18:
c2:55:6d:c5:8b:75:00:06:d4:ae:86:1d:1d:80:c1:
62:25:64:a2:ab:6d:56:24:63:af:61:29:45:e2:79:
f8:8d:94:f9:a1:3d:cd:e8:5d:71:c5:68:47:78:da:
ae:d4:08:51:93:ac:b6:9b:31:23:a2:ef:06:22:cc:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:C9:8D:B7:67:3F:00:FE:F2:33:E2:9D:4A:12:A9:28:F4:96:07
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/g0nJjbdnPwD-8jPinUoSqSj0lgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.104.0/22
191.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:59:b9:d0:b1:c0:c9:91:08:ba:08:b5:b9:d4:ef:d5:d1:c3:
c0:29:c4:35:24:55:74:bb:a0:ea:38:3a:12:bb:18:c2:df:3b:
69:4d:7c:6a:43:c8:b4:93:d8:20:a0:90:03:f7:40:a5:90:b9:
9d:8f:96:c4:52:98:1f:d5:f4:bb:bb:7e:d3:b1:25:e9:5e:56:
dd:79:3f:44:37:53:f9:50:d4:4c:4a:d9:31:de:01:61:3c:e0:
84:3c:30:a7:52:d1:dc:ed:07:3f:8a:8c:83:dc:fa:7f:da:75:
9a:7e:b2:aa:51:67:3d:a7:42:5c:d5:c8:58:6e:e6:c4:85:d6:
fd:2f:75:33:7f:98:48:d9:cf:c7:89:41:36:dc:22:cb:8a:aa:
84:32:0e:b5:2a:ee:62:59:cc:34:cf:a9:81:ef:d9:50:d4:74:
e4:2b:da:72:bf:27:5a:5d:6c:ab:ad:a3:e0:b2:6f:d4:e8:95:
ca:66:5d:db:14:ad:15:87:62:6d:cf:0b:53:15:ff:c5:51:18:
d0:75:1f:bc:8f:eb:08:3a:4b:13:ed:cc:a0:db:20:50:3d:fa:
f6:ca:da:92:24:71:41:18:fa:1c:1b:7f:a3:18:29:87:0f:04:
83:12:c8:b1:a9:13:e9:15:dc:3e:b5:f2:f6:cf:22:d5:09:1f:
39:52:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:40 2026 by rpki-client