Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/m7sqqU20nBgcYT73Ol3W2Uno4GM.roa
File: m7sqqU20nBgcYT73Ol3W2Uno4GM.roa (raw, json)
Hash identifier: K+WbAYZxW1QYp+ZPe24GfO/oZ3atyxIFe7hlj/XxT8g=
Subject key identifier: 9B:BB:2A:A9:4D:B4:9C:18:1C:61:3E:F7:3A:5D:D6:D9:49:E8:E0:63
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DCA5DEDE6E2548846292BF331F5F2F4AF
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/m7sqqU20nBgcYT73Ol3W2Uno4GM.roa
Signing time: Sun 26 Apr 2026 15:17:26 +0000
ROA not before: Sun 26 Apr 2026 15:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 191.44.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:5d:ed:e6:e2:54:88:46:29:2b:f3:31:f5:f2:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 26 15:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bbb2aa94db49c181c613ef73a5dd6d949e8e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:0a:92:ba:7d:fb:8a:76:67:72:ce:1e:54:
d8:76:fc:bd:85:0c:fe:a0:5e:42:b2:17:f8:4a:7b:
f9:b8:ac:b8:21:ca:f9:89:ea:81:b2:7a:e0:77:2d:
a1:10:ce:a3:dc:e2:24:cb:34:3d:d1:9a:7f:bb:45:
be:61:fb:4a:16:08:c6:4e:55:07:d2:a6:05:db:c5:
b4:5f:cd:e3:e4:6a:48:a0:75:6b:df:84:55:91:0c:
85:ce:c5:34:2d:ea:6c:25:6d:aa:c7:59:3d:98:34:
40:75:60:fe:55:8f:92:d1:43:5c:2f:ed:75:0d:c8:
06:36:8f:d9:2e:0e:28:9c:af:c9:98:74:0c:f6:20:
11:62:be:46:e3:76:52:a4:14:46:b4:c3:79:e6:ca:
48:55:03:8f:14:80:da:9d:6b:23:c0:fd:d9:b5:12:
37:e9:83:89:9c:ce:da:7a:31:fa:04:f6:58:2f:5c:
23:80:92:d6:07:29:b5:cd:8f:2a:da:ea:20:b5:bb:
b2:1b:3a:f6:d1:e5:80:60:4c:34:68:93:a0:3d:b9:
6f:7d:86:11:6b:ed:83:6e:3a:80:4a:8d:7f:30:ad:
b4:10:c6:f6:ed:fc:c4:7d:b0:ca:ad:fa:0f:18:f5:
b6:64:8c:6e:0c:31:19:f6:0f:85:b3:49:a4:a0:37:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:2A:A9:4D:B4:9C:18:1C:61:3E:F7:3A:5D:D6:D9:49:E8:E0:63
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/m7sqqU20nBgcYT73Ol3W2Uno4GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:88:ea:eb:c3:83:ca:a0:3c:53:1d:29:2f:79:59:af:aa:38:
f1:08:98:89:7e:e7:4d:ba:b2:42:64:56:ab:f8:5a:78:72:9d:
35:be:1f:65:b9:a7:ae:35:25:26:b8:50:27:bb:23:85:60:59:
2d:b6:ec:73:26:47:c3:68:d1:f4:d5:f3:f3:2e:a8:b2:8a:d1:
6a:3f:46:c3:23:f3:60:2b:ab:00:0d:d4:b6:30:78:de:85:81:
c1:38:51:b8:a0:4b:8f:26:1b:a8:f2:64:5c:8c:33:44:da:12:
71:5e:8a:b3:2b:7a:ab:01:91:a4:2e:de:13:aa:21:83:b6:c9:
d9:33:7d:71:d8:dc:56:e9:7d:8e:78:4a:f1:f4:1f:7c:ce:bc:
07:cc:75:0d:ba:f8:42:c9:3f:9e:36:5e:d9:4e:5b:9d:0a:c0:
c9:8a:c9:66:ed:5f:a7:4e:78:d4:44:20:87:6b:c4:55:45:a7:
bf:71:ee:b2:e0:7a:f6:3b:56:1e:fa:3e:1e:9a:23:43:40:9f:
97:d2:e1:4f:b8:df:cf:13:04:bd:65:3f:86:6c:70:d7:8b:cc:
d3:ae:d5:01:5b:4e:15:43:f3:11:ad:e5:69:7c:49:f6:92:e1:
43:5d:2d:b6:5a:50:7d:6e:60:c2:69:f4:29:82:35:60:50:05:
a6:74:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:26:26 2026 by rpki-client