Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pYfQRSRbwlWipAP39jArbyzuOok.roa
File: pYfQRSRbwlWipAP39jArbyzuOok.roa (raw, json)
Hash identifier: EMDRPVEZxIRCem387k09ix5BUd8yQFdf/RPF9EdIpQs=
Subject key identifier: A5:87:D0:45:24:5B:C2:55:A2:A4:03:F7:F6:30:2B:6F:2C:EE:3A:89
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A01AFFD2923F90ABAEB0FF3F4BA4E1AA73
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pYfQRSRbwlWipAP39jArbyzuOok.roa
Signing time: Wed 19 Aug 2026 17:09:28 +0000
ROA not before: Wed 19 Aug 2026 17:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201814
IP address blocks: 191.44.80.0/24 maxlen: 24
191.44.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:ff:d2:92:3f:90:ab:ae:b0:ff:3f:4b:a4:e1:aa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 19 17:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a587d045245bc255a2a403f7f6302b6f2cee3a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:cd:ab:3c:ad:7d:15:40:95:3f:11:e5:8f:
d4:9e:e5:b4:f4:41:8b:6e:12:a1:a8:51:7e:f8:a6:
f8:c6:f5:82:fd:21:ea:9a:aa:08:ba:5c:e0:4a:b7:
03:e8:f4:f2:89:0a:cb:c1:f0:2f:a2:f4:07:99:f8:
09:de:ee:14:56:43:14:f0:ad:10:e9:cd:e1:98:67:
97:9c:a1:75:07:c8:02:94:85:b3:8d:3f:6b:3b:a4:
c1:9f:87:ec:eb:42:d4:a5:a9:4b:ab:fd:6f:03:72:
35:59:2e:47:81:56:8b:94:0f:ec:33:eb:ff:cf:37:
86:3e:f6:b2:b3:70:4c:32:6d:28:37:d3:8e:65:09:
22:cc:99:d9:22:e7:83:2e:9c:aa:9e:73:38:67:3d:
d8:79:b0:06:13:91:ca:67:89:5c:5b:57:56:f5:2f:
5e:e9:d6:b1:e3:18:3b:be:fa:9a:55:fe:c9:ad:b1:
a4:35:ff:56:31:4d:bd:7a:43:d1:49:1c:50:e2:b0:
60:6c:db:6b:40:cf:3d:53:1e:9e:c0:38:b4:39:73:
e6:14:cb:7c:9c:ee:ba:b5:6a:28:d8:e9:66:06:f9:
85:8f:09:a3:e2:d6:09:70:72:11:44:10:c4:f6:93:
a2:71:86:cf:16:e3:df:de:26:8f:59:fb:de:17:da:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:87:D0:45:24:5B:C2:55:A2:A4:03:F7:F6:30:2B:6F:2C:EE:3A:89
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pYfQRSRbwlWipAP39jArbyzuOok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8d:6f:f0:91:90:c0:bc:ad:93:49:7b:e0:5e:5e:40:f1:ff:
f3:ce:d2:eb:dd:4a:40:2e:e2:ef:cc:eb:1c:9d:46:8b:12:da:
34:70:31:7d:d5:5c:99:71:4f:86:85:7a:2f:1a:cd:c4:86:ae:
4e:c0:f9:f0:aa:c3:03:d2:85:29:39:80:db:6b:f5:e5:7c:7a:
52:28:a1:8e:5f:a1:f6:db:09:cd:f2:6b:fa:88:46:8f:a5:e4:
62:ea:57:95:bc:3d:c3:da:01:b6:b5:59:d2:2d:44:2a:79:9d:
36:d3:32:9b:e8:39:d3:32:86:6f:c1:21:8e:85:e4:91:98:cb:
74:1a:a3:5e:56:25:d0:ea:16:13:d0:33:34:ad:6e:13:23:79:
33:37:b6:31:4e:5c:2c:b6:b8:c1:55:87:b1:cc:37:de:fa:56:
6d:9f:00:9e:5c:06:6f:07:b6:3b:14:d7:d7:85:12:b1:22:aa:
b2:7e:13:89:d7:22:28:82:40:9a:a0:50:59:5b:c6:02:30:0c:
18:07:d3:fa:96:dc:53:f7:e8:66:ce:b4:5e:99:a6:e9:a1:00:
dd:d2:e8:d9:67:dd:32:a9:a9:1e:22:bd:a6:2e:8a:de:38:38:
eb:ff:77:4d:44:a4:db:e4:53:f5:bb:ea:23:c1:86:9b:d1:4d:
1f:3e:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:17 2026 by rpki-client