Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ihESXqRqy4mHBGgNig4-SpB5hHs.roa
File: ihESXqRqy4mHBGgNig4-SpB5hHs.roa (raw, json)
Hash identifier: fa7xAHHfaleOaXDqd0+VFYJPAoSVgNrIhDa80FiqVuU=
Subject key identifier: 8A:11:12:5E:A4:6A:CB:89:87:04:68:0D:8A:0E:3E:4A:90:79:84:7B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A16D03C4BA5A4EBAD9224FE57C8FABFA4A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ihESXqRqy4mHBGgNig4-SpB5hHs.roa
Signing time: Sat 24 Oct 2026 08:25:25 +0000
ROA not before: Sat 24 Oct 2026 08:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 191.44.90.0/24 maxlen: 24
201.4.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:03:c4:ba:5a:4e:ba:d9:22:4f:e5:7c:8f:ab:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 24 08:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a11125ea46acb898704680d8a0e3e4a9079847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:a7:0d:cc:58:92:01:e0:72:90:28:b9:ab:
29:66:c2:76:d0:92:5a:42:15:f6:d2:cc:d5:e0:c7:
97:ef:a8:cb:73:58:76:e9:bb:a5:3f:82:b2:2e:75:
e9:74:db:78:de:00:f3:8c:ab:ee:77:6c:30:dc:2b:
5c:a8:31:d7:d0:e6:02:34:91:0f:32:9f:b6:2d:47:
4c:1f:c6:88:ea:fd:69:3a:fe:d7:ae:8b:17:56:05:
13:1b:40:4f:82:0e:93:dc:d0:00:1b:42:4c:a0:44:
f3:50:44:9d:6a:39:25:0d:1a:5e:cd:7d:7a:7d:2f:
31:65:b7:d3:be:c8:9e:9e:16:83:fa:1b:36:04:da:
12:a6:10:28:f5:07:ca:01:66:51:ff:41:90:c4:e9:
18:bd:3f:eb:9f:2c:a9:7b:4c:5c:81:3e:1e:44:25:
a2:d6:16:34:02:8c:19:79:68:58:3d:95:e6:54:c8:
28:78:33:72:d0:e7:06:e6:3f:28:01:74:98:5f:e5:
f1:10:b4:3c:8c:25:7e:57:ec:d9:7a:4e:7a:ae:e3:
ed:17:f7:a1:6c:ad:92:e7:6e:0e:41:a7:75:9c:4e:
66:ad:ed:49:3c:e8:5e:fd:af:e8:d9:2c:2c:93:71:
a7:ae:57:ba:d5:f3:f8:b2:0f:c6:01:eb:e0:0c:82:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:12:5E:A4:6A:CB:89:87:04:68:0D:8A:0E:3E:4A:90:79:84:7B
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ihESXqRqy4mHBGgNig4-SpB5hHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.90.0/24
201.4.72.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c6:a8:e7:8b:c5:cb:9c:e9:d7:86:a5:ea:27:60:c9:57:47:
ac:bf:cd:c6:3f:85:23:6b:b8:20:fe:2b:99:b4:f8:f0:b8:b8:
73:83:df:08:b7:da:74:b2:6f:ad:14:36:ff:a4:d8:41:48:fa:
cd:07:d2:a2:98:e9:1f:63:13:83:7c:68:cf:a5:c6:14:1c:d7:
0f:2f:fe:b5:6a:7a:26:0d:48:f5:24:7d:30:b3:34:9d:6a:53:
65:24:29:f5:ad:01:b0:32:cc:38:55:2d:c7:c6:1b:db:59:30:
ab:37:c3:64:4f:df:15:06:20:27:d5:43:50:65:81:4e:b9:cf:
52:16:db:23:84:f1:2d:b0:4e:1a:8c:13:38:71:2c:1d:f9:74:
33:94:32:b3:13:1c:14:e3:c4:e1:6b:ba:e9:07:89:2b:84:e6:
65:d0:3b:52:b3:d9:c3:72:81:70:11:2d:ee:8a:01:f5:db:83:
d5:8b:48:d6:64:67:90:1f:73:df:07:ea:4a:64:5b:f1:96:c9:
e7:fa:33:37:a0:8d:12:50:0c:8e:98:3a:fa:7a:08:52:5e:30:
56:5d:8c:75:1b:a2:1e:b3:d1:12:1f:f7:9b:be:27:71:d1:e0:
54:c8:4c:22:59:5b:5c:93:fd:d4:d0:ee:f0:dc:52:f5:d3:ed:
5b:4b:27:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:18 2026 by rpki-client