Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oXvdgg58pGvM9LCInuKijbyiL_Q.roa
File: oXvdgg58pGvM9LCInuKijbyiL_Q.roa (raw, json)
Hash identifier: gYtDUeAdtYCMrhHeREdvaHQ3nxEpIlLyb9Nu22AGAaU=
Subject key identifier: A1:7B:DD:82:0E:7C:A4:6B:CC:F4:B0:88:9E:E2:A2:8D:BC:A2:2F:F4
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A03E383FAF302B9D65D7FD6A957BD7C466
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oXvdgg58pGvM9LCInuKijbyiL_Q.roa
Signing time: Wed 26 Aug 2026 13:17:48 +0000
ROA not before: Wed 26 Aug 2026 13:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 191.44.99.0/24 maxlen: 24
191.44.124.0/24 maxlen: 24
201.3.230.0/24 maxlen: 24
201.4.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:38:3f:af:30:2b:9d:65:d7:fd:6a:95:7b:d7:c4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 26 13:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a17bdd820e7ca46bccf4b0889ee2a28dbca22ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:92:02:c9:b8:f9:74:79:be:81:5c:cf:58:
b6:ab:3e:b6:d1:7c:59:f6:d2:5c:d7:ce:45:09:97:
fb:a7:41:87:18:50:38:87:8d:82:1d:1b:71:50:6c:
b6:4e:0d:3d:dc:db:54:30:1f:16:7d:14:d6:03:b6:
90:27:90:cf:62:6a:30:e2:88:9e:df:c9:0c:39:77:
47:48:fc:d7:b6:b8:a9:d8:22:24:fa:83:70:95:bd:
95:64:43:4d:24:b7:c8:9c:83:fc:eb:f6:23:9b:a9:
7d:79:6c:a2:90:3a:fc:6b:45:70:81:ed:8d:8c:bc:
00:d0:54:bc:f7:20:de:52:4e:46:08:71:da:12:9f:
45:32:62:e9:34:d4:8b:29:51:a7:c9:be:c5:30:65:
25:11:9b:e8:2f:5a:23:58:90:54:57:f5:a8:37:9c:
7f:ba:3a:57:ad:b2:11:44:53:59:de:b4:09:8c:d6:
14:9a:6d:2b:93:f4:c6:15:9c:5a:d3:64:4e:cc:9e:
c8:59:09:ab:26:6d:f6:e8:26:55:bb:da:e0:a8:25:
f4:bb:da:e1:be:d0:7c:d7:c9:d2:1f:36:6f:ba:6d:
42:53:cf:37:a9:9d:16:e9:ec:9f:df:29:99:6d:64:
cb:8c:7a:b4:1b:b4:27:70:4d:d6:f5:45:83:c6:9d:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:DD:82:0E:7C:A4:6B:CC:F4:B0:88:9E:E2:A2:8D:BC:A2:2F:F4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/oXvdgg58pGvM9LCInuKijbyiL_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.99.0/24
191.44.124.0/24
201.3.230.0/24
201.4.67.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fe:fd:4f:34:13:ba:cc:34:03:a3:d9:b5:38:ac:ed:f4:7a:
1d:b5:51:d5:56:6b:bf:34:b1:8a:71:b9:e5:74:99:44:72:a0:
e5:62:e5:f5:d9:5f:4c:f3:ce:f2:07:17:1d:af:d9:17:06:e1:
43:3f:ca:52:98:63:f7:94:ae:cd:b8:9f:22:2c:85:49:a5:77:
8e:2f:9f:fb:c3:a8:85:08:ac:d7:c6:35:0d:5b:e4:2e:ac:bc:
36:6c:84:eb:8d:b8:13:07:75:3c:c5:1f:e0:9e:f3:2e:e6:8f:
89:33:47:24:7a:c2:48:20:1c:a3:1a:7f:db:5e:48:29:40:10:
9e:51:ec:e9:87:13:9c:be:d5:49:00:fc:d1:0c:15:75:0f:2f:
68:fb:2f:12:67:ae:13:70:33:06:bc:c6:ba:29:d8:b6:a6:f6:
63:97:ef:8b:32:65:4a:66:8c:1e:97:98:9e:39:7a:93:6b:f7:
b7:84:01:4c:4b:ed:06:07:22:34:dc:51:8b:6c:16:c4:f5:a4:
91:31:8d:79:2d:0a:44:7f:e8:45:72:59:90:37:8e:2a:90:ec:
46:40:e9:52:b0:de:75:58:03:98:77:65:d2:18:b6:73:f6:0a:
2d:d1:8c:22:ec:2c:0c:92:d1:3b:e8:aa:b6:5e:b7:35:96:5e:
48:65:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:13 2026 by rpki-client