Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lmN7pZp7G9YqWk7ywjAdRDWiG1s.roa
File: lmN7pZp7G9YqWk7ywjAdRDWiG1s.roa (raw, json)
Hash identifier: +c6Op+EMZHgUXobLlGNLIfPXfj6DX3IrcqpjTO/NzNQ=
Subject key identifier: 96:63:7B:A5:9A:7B:1B:D6:2A:5A:4E:F2:C2:30:1D:44:35:A2:1B:5B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F3B685F814BBB8CB71F97F87445BF7184
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lmN7pZp7G9YqWk7ywjAdRDWiG1s.roa
Signing time: Tue 07 Jul 2026 07:08:43 +0000
ROA not before: Tue 07 Jul 2026 07:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 191.44.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:68:5f:81:4b:bb:8c:b7:1f:97:f8:74:45:bf:71:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 7 07:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96637ba59a7b1bd62a5a4ef2c2301d4435a21b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:d4:cb:b8:27:f2:7e:fe:a9:2f:6d:16:e8:
e8:9c:f8:f4:db:52:f4:59:44:c8:5c:10:1d:cc:6e:
8d:f3:60:f0:55:b7:68:19:1e:5e:a1:43:d9:50:b3:
a8:8f:9d:cd:71:1c:be:cd:e4:85:af:50:de:39:3b:
50:ca:9c:eb:42:94:f0:59:03:e9:22:ab:fa:84:36:
5c:60:10:de:4a:64:eb:de:46:01:e7:ce:a7:fd:e9:
d9:61:42:f3:0b:aa:6b:8e:9b:ce:3c:24:01:8a:90:
e3:d5:8b:64:41:91:80:62:e1:37:e6:b0:fd:c0:1b:
7f:f3:95:f1:6a:97:9c:94:49:e8:cc:e9:ba:7e:a6:
e5:fc:94:35:eb:ad:59:c8:7d:8e:3b:f5:9d:0b:5f:
4b:11:af:6b:64:94:22:eb:e5:39:2f:46:a3:55:69:
a0:a2:09:65:a5:7a:06:e4:d7:96:71:58:d8:4e:4d:
7f:99:a4:9a:5f:34:bb:6f:ea:98:20:f4:fc:52:d7:
de:6e:44:f0:0c:32:eb:f0:f4:2c:bc:ea:ab:b0:ce:
24:22:2d:6c:45:2a:7e:7d:69:3d:e9:6a:c2:79:ef:
7d:25:96:5e:58:44:6e:54:72:9e:2f:c4:cc:f3:35:
9d:c6:2d:20:96:16:cc:6b:3d:73:f5:2a:2d:d5:47:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:63:7B:A5:9A:7B:1B:D6:2A:5A:4E:F2:C2:30:1D:44:35:A2:1B:5B
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lmN7pZp7G9YqWk7ywjAdRDWiG1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.96.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cf:d1:dc:47:33:b2:64:e4:c0:f7:08:7f:75:e8:4e:c4:4c:
13:b3:9f:d0:4b:ee:aa:0c:92:c7:29:6e:91:5f:b2:4c:21:61:
24:46:30:82:c6:fa:cb:23:14:5c:ed:f6:90:4c:28:9d:3b:e6:
33:ad:a6:0b:0c:3f:7c:95:c4:d0:da:39:d6:4f:bb:8a:ad:5b:
d6:ef:29:9d:eb:46:8b:36:a0:41:cb:a1:58:3d:e9:8f:ab:2a:
e4:66:7a:ad:9e:b5:f3:d5:fb:ea:7a:c5:74:42:d2:76:dd:59:
9d:a0:43:11:bd:d7:db:93:ac:e6:6a:fd:7f:ee:d1:37:52:17:
64:ad:45:59:dc:c4:ac:fd:27:ca:02:1c:76:e3:10:5e:b3:53:
fa:42:21:3e:ef:5d:86:e5:a6:81:61:5b:b1:4d:ef:38:9b:9a:
28:58:39:ca:ef:1e:bf:07:31:cb:53:31:79:03:f8:69:12:1a:
ba:25:2c:1e:7c:35:1b:d5:ae:27:bb:9f:1b:4b:10:2d:5b:e7:
a9:b2:75:b5:4c:5a:63:cd:fc:ff:d5:3a:a9:79:97:e5:69:39:
c8:00:3b:9d:8e:58:5d:32:77:6b:8d:d9:00:d4:9d:c8:4f:2f:
58:96:61:1b:3e:b9:ec:77:b3:6d:c8:f8:fa:4d:58:ba:3e:f1:
4a:cc:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client