Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/gEIJnjmZrUFuvcRqQsLB8myQsxQ.roa
File: gEIJnjmZrUFuvcRqQsLB8myQsxQ.roa (raw, json)
Hash identifier: VvzEtjAhpELMLGKiZxN5X9lCOHM/LAp+cq05eOLKUWk=
Subject key identifier: 80:42:09:9E:39:99:AD:41:6E:BD:C4:6A:42:C2:C1:F2:6C:90:B3:14
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A029EF0EFC321A856ED662BD6E9BAE6E68
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/gEIJnjmZrUFuvcRqQsLB8myQsxQ.roa
Signing time: Sat 22 Aug 2026 14:45:27 +0000
ROA not before: Sat 22 Aug 2026 14:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206007
IP address blocks: 191.44.116.0/24 maxlen: 24
201.7.25.0/24 maxlen: 24
201.7.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:ef:0e:fc:32:1a:85:6e:d6:62:bd:6e:9b:ae:6e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 22 14:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8042099e3999ad416ebdc46a42c2c1f26c90b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:7d:ad:88:af:52:f9:75:df:f4:ff:bc:78:
d9:f5:57:c6:52:f0:6b:e2:3f:56:98:a3:d6:e4:22:
9d:e5:c8:be:56:37:19:ac:e1:49:a8:c7:06:f1:57:
e6:59:f3:c5:73:59:a6:f9:54:51:49:bb:2e:ab:dc:
a7:45:c0:c2:d6:46:96:57:dc:a3:8f:59:5b:d2:90:
f7:ff:72:ad:c1:e0:0d:db:81:eb:28:af:01:38:76:
74:a4:96:eb:34:32:ad:34:94:ff:de:da:02:74:a0:
31:93:09:7c:ac:0a:af:d9:e7:9e:b0:db:48:25:5e:
a9:fb:13:0f:e2:67:5e:ca:ba:5b:82:72:66:69:0f:
00:5d:e4:e3:40:9a:92:e8:a3:91:c4:73:eb:58:f0:
fc:d7:f7:c5:b7:22:51:be:84:54:fd:32:64:c3:d6:
91:82:bc:08:73:dd:03:7e:c3:82:b3:76:3a:16:41:
c6:40:1c:34:f5:bd:c1:96:c9:e2:47:dc:e1:03:9b:
64:94:93:63:0f:41:b4:84:7f:c3:ca:3d:f3:92:22:
4a:f1:7b:61:e2:98:5f:bf:97:75:f8:08:2c:55:d9:
52:67:89:f8:dc:99:6f:97:2a:b5:7d:2a:9b:be:20:
94:ab:37:be:eb:1a:8b:1a:eb:8f:ec:46:34:da:df:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:09:9E:39:99:AD:41:6E:BD:C4:6A:42:C2:C1:F2:6C:90:B3:14
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/gEIJnjmZrUFuvcRqQsLB8myQsxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.116.0/24
201.7.25.0-201.7.26.255
Signature Algorithm: sha256WithRSAEncryption
9f:18:a6:23:32:fb:b1:4d:0b:c2:fa:a5:68:36:4d:72:d4:4c:
5e:4d:10:92:c8:27:88:d7:f4:66:47:6e:0e:ae:f0:ad:91:14:
30:a6:f4:c9:e8:88:1f:5b:21:db:42:3a:4e:53:b5:b4:fa:6b:
c2:f7:1e:f4:27:2f:31:36:73:24:27:9a:8c:e6:29:92:2f:96:
89:87:1b:3e:fc:b4:62:88:4b:bc:6c:3f:98:e7:ec:71:35:00:
e1:f4:60:b4:68:06:e2:c3:6d:ab:62:d8:9d:94:d7:cf:10:09:
cd:ff:8b:87:6e:e6:14:9a:d3:62:ed:f5:93:36:a4:d9:bb:05:
48:a8:6a:6c:19:f1:56:69:cf:06:47:ba:19:34:ab:01:55:85:
aa:5c:6d:1f:5f:1a:8b:a5:d8:62:4f:c4:d9:02:ed:b4:11:30:
b4:3d:ba:41:05:16:1b:fc:9e:64:f8:28:09:06:06:c6:70:dd:
a1:ff:6c:8f:0a:ee:9f:7e:83:9b:8b:91:2d:fa:d0:55:e5:13:
1d:2c:5e:01:0d:c2:0b:4b:1b:70:9e:6e:39:d7:4f:08:5f:32:
62:51:c8:a5:f5:2e:6c:dc:8c:2a:d6:51:f1:a0:b3:d6:77:ea:
bf:8d:92:8c:2a:49:d3:92:cc:c5:bd:5f:96:91:1c:23:39:2f:
f9:1e:77:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:18 2026 by rpki-client