Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/mxOorWo-m_r3xYBzwQIdh2VNV44.roa
File: mxOorWo-m_r3xYBzwQIdh2VNV44.roa (raw, json)
Hash identifier: JTeBGXBD5KV5hhTQfElIRq4ziKeL8qEIUKefs4GspgQ=
Subject key identifier: 9B:13:A8:AD:6A:3E:9B:FA:F7:C5:80:73:C1:02:1D:87:65:4D:57:8E
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E45FB9A3299FAD7E5CEC58F32D7DD8D87
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/mxOorWo-m_r3xYBzwQIdh2VNV44.roa
Signing time: Wed 20 May 2026 15:22:57 +0000
ROA not before: Wed 20 May 2026 15:22:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198924
IP address blocks: 191.44.104.0/24 maxlen: 24
191.44.105.0/24 maxlen: 24
191.44.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:fb:9a:32:99:fa:d7:e5:ce:c5:8f:32:d7:dd:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 20 15:22:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b13a8ad6a3e9bfaf7c58073c1021d87654d578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:b1:9f:87:ca:05:0c:fc:11:5d:18:28:0b:
af:51:ab:54:fe:5d:a2:2d:52:42:68:cf:4e:bc:f9:
67:b1:1e:6f:f7:54:26:df:80:7b:62:b8:38:b5:38:
dd:2a:c9:75:4e:b9:34:26:bd:1d:69:54:85:7a:f1:
db:46:97:32:89:23:b0:82:e9:80:bc:ae:0f:91:c4:
81:d1:14:41:6e:fc:8e:6b:3d:a9:ca:dc:32:82:07:
03:42:37:5f:da:5f:5e:88:96:66:58:2a:a7:d7:51:
55:c6:83:41:92:f8:40:9f:57:4e:c8:a8:db:66:f7:
ad:02:02:8e:cd:19:3d:ff:b1:27:af:0a:14:43:b6:
a6:c5:77:74:d2:a1:4f:33:9a:26:5e:ea:fb:67:ff:
1f:17:1b:5f:84:9e:15:02:58:75:b2:e7:33:da:8f:
cd:65:15:0b:2f:d9:9b:dc:aa:b3:74:41:44:0f:d9:
f8:a9:dc:1a:62:53:71:67:46:bd:dd:cd:f4:22:0e:
ea:f0:94:af:c8:36:b0:03:16:c7:c8:37:50:7f:17:
0a:f0:71:41:bc:d5:82:9b:e6:b2:7d:40:3f:8c:2d:
80:35:99:b5:0c:1e:39:1b:d3:4f:20:22:ad:b7:58:
14:a7:30:c2:aa:25:90:b3:28:c0:1a:3f:46:c2:9b:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:A8:AD:6A:3E:9B:FA:F7:C5:80:73:C1:02:1D:87:65:4D:57:8E
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/mxOorWo-m_r3xYBzwQIdh2VNV44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.104.0/23
191.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2d:62:3f:38:31:59:51:9d:e8:91:bd:02:1d:c3:16:f6:0d:
4a:3e:b0:fc:60:67:e5:e0:ac:67:fb:45:0c:ea:b1:88:44:e9:
49:7d:2a:19:9e:0b:a8:b0:de:81:59:f5:d0:68:ea:75:96:48:
6b:38:1e:2e:18:ae:3a:f8:21:68:e0:aa:ba:75:7a:69:89:2d:
6a:70:59:dd:c2:09:d4:90:36:3e:21:c8:a7:01:c9:43:14:63:
72:16:fb:21:60:71:4d:cc:2c:fb:66:5a:03:57:9f:38:e6:32:
ea:7f:cf:d1:43:ca:18:fb:43:16:f3:8d:2b:8f:4f:8e:ac:9e:
cc:e6:13:ae:c0:7d:4f:e4:a8:07:0a:ff:f2:a8:79:70:85:71:
b1:34:c0:76:39:34:99:2c:ed:81:44:f4:fe:cf:14:dc:f4:d5:
28:08:2a:27:9c:55:b7:58:4b:e4:f9:21:81:ba:a3:7a:c5:c4:
c9:05:b8:68:2d:74:08:f3:86:67:6b:f0:c0:52:61:ae:ef:93:
82:81:e8:6a:2d:09:0b:59:74:50:2c:71:16:33:68:a0:4f:7e:
ee:1d:ee:c7:88:86:81:b4:78:eb:32:b7:a9:21:9d:61:76:6a:
60:c7:4c:a0:5c:6c:1e:94:ad:f9:37:8e:74:9c:f9:8f:d9:00:
d0:18:5a:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5F+5oymfrX5c7FjzLX3Y2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNTIwMTUyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjEzYThhZDZhM2U5YmZhZjdjNTgwNzNjMTAyMWQ4NzY1NGQ1NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxuxn4fKBQz8EV0YKAuvUatU/l2i
LVJCaM9OvPlnsR5v91Qm34B7Yrg4tTjdKsl1Trk0Jr0daVSFevHbRpcyiSOwgumA
vK4PkcSB0RRBbvyOaz2pytwyggcDQjdf2l9eiJZmWCqn11FVxoNBkvhAn1dOyKjb
ZvetAgKOzRk9/7EnrwoUQ7amxXd00qFPM5omXur7Z/8fFxtfhJ4VAlh1sucz2o/N
ZRULL9mb3KqzdEFED9n4qdwaYlNxZ0a93c30Ig7q8JSvyDawAxbHyDdQfxcK8HFB
vNWCm+ayfUA/jC2ANZm1DB45G9NPICKtt1gUpzDCqiWQsyjAGj9GwptMXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJsTqK1qPpv698WAc8ECHYdlTVeOMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvbXhPb3JXby1tX3IzeFlCendRSWRoMlZOVjQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBvyxoAwQA
vyx1MA0GCSqGSIb3DQEBCwUAA4IBAQCBLWI/ODFZUZ3okb0CHcMW9g1KPrD8YGfl
4Kxn+0UM6rGIROlJfSoZnguosN6BWfXQaOp1lkhrOB4uGK46+CFo4Kq6dXppiS1q
cFndwgnUkDY+IcinAclDFGNyFvshYHFNzCz7ZloDV5845jLqf8/RQ8oY+0MW840r
j0+OrJ7M5hOuwH1P5KgHCv/yqHlwhXGxNMB2OTSZLO2BRPT+zxTc9NUoCConnFW3
WEvk+SGBuqN6xcTJBbhoLXQI84Zna/DAUmGu75OCgehqLQkLWXRQLHEWM2igT37u
He7HiIaBtHjrMrepIZ1hdmpgx0ygXGwelK35N450nPmP2QDQGFo2
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:04:16 2026 by rpki-client