Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pWtlzxVm8EK4dTtB9LiuBTFsQDQ.roa
File: pWtlzxVm8EK4dTtB9LiuBTFsQDQ.roa (raw, json)
Hash identifier: 3Z/1jNLDUExNq/OLHA7owThjDLg42cXhteCAhei/ztY=
Subject key identifier: A5:6B:65:CF:15:66:F0:42:B8:75:3B:41:F4:B8:AE:05:31:6C:40:34
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0447407AE7165846FED2D3B62EABFDF7E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pWtlzxVm8EK4dTtB9LiuBTFsQDQ.roa
Signing time: Thu 27 Aug 2026 18:20:49 +0000
ROA not before: Thu 27 Aug 2026 18:20:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198607
IP address blocks: 201.4.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:74:07:ae:71:65:84:6f:ed:2d:3b:62:ea:bf:df:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 27 18:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a56b65cf1566f042b8753b41f4b8ae05316c4034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:c8:be:78:fa:d9:e6:4b:63:44:82:ae:b9:
ac:74:1a:56:b6:f6:c3:41:5d:c6:0c:7c:33:57:a1:
14:63:6d:02:44:95:e2:38:32:b9:e8:6e:65:6a:ac:
78:20:ff:03:11:50:64:d3:19:e8:76:09:fb:52:55:
47:98:bc:ca:a1:18:dd:f5:24:3e:65:2f:5a:4e:c9:
04:08:0f:fd:fb:2f:91:8b:bf:f7:df:0d:1f:3a:44:
94:98:aa:46:d3:94:49:83:ec:70:0c:e4:7d:58:ed:
f8:f4:0d:e8:70:c0:d0:c7:4e:59:92:3c:bd:d7:26:
1a:35:e3:85:66:9a:53:5e:00:a0:3c:e8:f0:e0:67:
2f:16:63:c2:5b:a7:6d:b1:9b:61:95:1a:fd:7d:a6:
fc:be:58:e9:f1:6b:b7:55:af:de:47:63:41:cf:d5:
3a:80:25:9e:a9:fe:07:72:d8:9d:98:7f:f7:90:1c:
6c:6b:a2:fb:d2:6b:a7:89:ab:d2:bd:9e:b7:53:cb:
4f:be:f4:9a:92:90:cf:d2:55:7f:84:57:6e:57:b5:
f9:38:c2:54:a4:f0:c5:02:79:ae:2e:b9:03:44:82:
36:ae:23:e0:71:1b:ee:45:1c:49:d0:88:59:20:89:
ea:17:8b:c2:77:64:00:09:63:1e:97:40:00:d9:62:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:65:CF:15:66:F0:42:B8:75:3B:41:F4:B8:AE:05:31:6C:40:34
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pWtlzxVm8EK4dTtB9LiuBTFsQDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.78.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8e:06:29:2f:95:ed:12:af:0e:44:4a:ad:03:6d:13:bd:3c:
80:e9:62:81:fe:74:39:48:bf:8f:48:81:db:75:be:9b:95:96:
5c:97:78:76:50:b4:df:2e:d9:08:fb:c1:6a:5f:63:21:c1:03:
ee:6e:8f:a7:73:2c:c3:1e:26:ef:6a:70:58:e6:2c:a6:e9:b2:
fb:0a:02:90:b0:ed:3a:8a:73:fa:1e:d3:f7:3b:be:22:e5:ed:
bf:2a:f3:b4:ee:ce:d6:5a:89:3d:57:48:a4:79:28:05:b2:b9:
94:a6:61:15:34:ef:9d:07:79:14:00:bd:0c:1e:aa:01:c2:4e:
1e:4d:27:f1:07:90:86:1b:b1:f9:cd:b5:8e:ca:63:54:a8:5a:
71:84:45:2a:75:04:3c:00:13:c7:2d:fb:f4:94:5d:5f:94:51:
b5:07:89:71:49:0b:27:75:72:d5:f5:02:3d:02:69:27:69:31:
f6:6d:00:49:4e:46:e9:f8:02:88:19:11:12:48:1f:d7:35:01:
b4:1d:e1:91:2d:52:15:44:c3:94:c3:d6:ac:ba:ef:1c:fc:ea:
9a:9b:05:bc:87:a9:10:76:3d:7c:c0:3c:a7:9c:2f:ac:48:3e:
13:8e:c0:c6:5c:8f:70:3c:55:d8:d7:01:78:6d:86:e5:0e:30:
00:92:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:16 2026 by rpki-client