Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/kXvHw9cD2-xv7OTTWKPtRAKl1cw.roa
File: kXvHw9cD2-xv7OTTWKPtRAKl1cw.roa (raw, json)
Hash identifier: cAbJNa6gxxdVFZvwfyWUCAksaTgKIKpGWqzcssT+j/Y=
Subject key identifier: 91:7B:C7:C3:D7:03:DB:EC:6F:EC:E4:D3:58:A3:ED:44:02:A5:D5:CC
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F3124CF209DB0A839408410D1154D4F4B
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/kXvHw9cD2-xv7OTTWKPtRAKl1cw.roa
Signing time: Sun 05 Jul 2026 07:18:43 +0000
ROA not before: Sun 05 Jul 2026 07:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 191.44.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:24:cf:20:9d:b0:a8:39:40:84:10:d1:15:4d:4f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 5 07:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=917bc7c3d703dbec6fece4d358a3ed4402a5d5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:44:51:5c:cc:e1:47:fb:6a:00:83:18:60:
6a:e9:4e:23:dc:35:f1:b4:81:e6:be:31:fc:05:bf:
d8:93:d6:5c:81:b6:36:7e:7d:7b:df:4d:43:b4:48:
20:7d:93:29:f9:06:50:71:c1:90:30:ed:42:1b:d9:
94:2e:f2:e2:3b:44:68:5c:4f:a0:d3:95:00:68:51:
b1:96:19:d6:29:91:4d:02:d7:0d:2d:3c:87:28:5f:
6c:7b:b6:9d:6e:ef:0b:ae:7f:f6:72:02:ca:40:49:
77:12:df:09:dd:c1:7a:85:60:ae:51:cf:5d:2f:26:
39:17:be:07:81:d1:1e:04:ad:55:e8:64:d4:69:28:
39:12:c9:92:aa:a5:09:06:37:39:fb:65:64:66:cb:
60:2f:b7:e8:9a:8d:c4:10:91:5a:72:6c:3b:66:87:
39:39:5b:47:98:42:10:63:64:f8:4c:35:ee:23:fa:
96:3d:25:a6:df:3e:96:3e:0c:41:70:12:ec:be:7c:
10:2c:dd:a6:e4:d2:9a:21:8e:4b:23:6c:48:00:e4:
5e:05:a9:f0:9b:fe:a6:4d:50:42:d8:88:b5:08:0d:
e1:23:67:a7:79:25:ba:1a:05:4c:e4:88:eb:b3:6e:
1d:71:f3:9f:be:ee:d6:45:24:bd:4f:83:48:c3:dc:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:C7:C3:D7:03:DB:EC:6F:EC:E4:D3:58:A3:ED:44:02:A5:D5:CC
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/kXvHw9cD2-xv7OTTWKPtRAKl1cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f1:d5:e8:f5:aa:77:dc:95:50:5b:f4:8e:b5:d5:a4:a5:30:
50:4c:bd:e0:2f:ee:6f:b3:67:aa:6b:b2:0e:44:d1:23:38:8b:
b1:c6:2c:b6:7f:32:15:98:05:22:8f:23:e6:dd:83:42:34:5a:
0f:fc:81:8c:23:68:86:71:54:93:b9:3c:5c:08:e5:02:35:ab:
01:e3:d5:91:1c:fb:ed:6c:8e:22:60:99:86:eb:9d:c0:b8:20:
bb:a5:93:56:d1:1d:cc:c6:5b:57:ec:0b:e9:07:8a:6a:df:3a:
1e:fd:c4:1f:ed:87:e3:22:f6:38:0a:48:4d:b0:32:26:6c:ec:
ef:d6:87:c0:52:0a:c0:73:a0:28:da:ce:d8:38:f7:32:11:71:
4b:d0:4a:5b:ca:b9:04:c2:fe:3f:e2:1f:80:96:ff:5c:a8:ab:
37:f2:7b:29:27:75:2b:9c:be:61:7e:c2:a5:f2:68:25:4c:67:
a9:9a:6b:34:91:06:0e:be:19:a0:71:b8:93:1c:11:5f:9c:9c:
b6:a9:6c:26:35:aa:07:f1:a7:ae:c1:54:03:e7:5f:80:fb:93:
52:5b:bc:03:86:7f:7f:ef:da:4f:3c:04:26:cc:42:54:a0:f7:
7a:31:d3:e2:20:51:8c:81:a1:f7:a1:5e:91:eb:39:fb:49:d5:
8d:61:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client