Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/psMB5jsaOKKAmpbsTluGJxPFrEE.roa
File: psMB5jsaOKKAmpbsTluGJxPFrEE.roa (raw, json)
Hash identifier: YkiDWibYMxq4I0bFA7A8GLPlwpUYKoOZuvBug8HwHQ4=
Subject key identifier: A6:C3:01:E6:3B:1A:38:A2:80:9A:96:EC:4E:5B:86:27:13:C5:AC:41
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0162F83F2347B8B639E5C8908797D6A35
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/psMB5jsaOKKAmpbsTluGJxPFrEE.roa
Signing time: Tue 18 Aug 2026 18:43:27 +0000
ROA not before: Tue 18 Aug 2026 18:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218959
IP address blocks: 191.44.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:2f:83:f2:34:7b:8b:63:9e:5c:89:08:79:7d:6a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 18 18:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6c301e63b1a38a2809a96ec4e5b862713c5ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:1d:4b:cd:f5:93:bc:6a:92:b9:75:e8:47:
3a:d1:0e:94:10:18:dd:f8:64:c3:4b:06:ef:47:4e:
d0:fc:6b:47:d4:f6:fa:61:18:ce:33:b7:25:04:25:
06:1d:a6:f4:01:93:a1:c0:16:20:fe:83:fd:d6:12:
41:03:d9:32:0d:fd:10:b7:78:35:67:fa:05:fd:13:
c7:e7:91:01:0b:eb:ac:43:1c:77:a1:19:2f:a2:27:
bd:8a:0d:e7:1d:7c:31:03:c2:c5:4e:dc:ea:9b:70:
cd:7a:d3:2b:e1:6f:39:60:06:2e:8f:48:33:bb:5a:
87:92:33:20:8c:35:af:40:b0:1b:e4:46:3f:0e:8f:
29:95:71:ff:3e:1a:c5:27:6c:5b:8b:e9:c2:53:00:
45:b0:7c:57:c3:68:56:06:d1:1e:75:29:c8:53:cf:
2c:2c:0a:58:fe:55:26:cf:90:48:ea:6a:b2:11:26:
06:0e:7d:28:34:d9:dd:93:72:5d:ec:47:b7:46:41:
05:39:9a:17:b0:96:9d:02:06:a3:a3:74:ea:b4:79:
ac:5b:98:70:71:1a:9a:29:1e:9d:ca:66:2c:17:d0:
80:5d:0b:f5:c6:94:40:a3:38:25:50:05:d7:2e:8a:
9c:8e:33:49:f5:d6:8c:4c:95:38:87:16:4c:0b:d2:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:01:E6:3B:1A:38:A2:80:9A:96:EC:4E:5B:86:27:13:C5:AC:41
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/psMB5jsaOKKAmpbsTluGJxPFrEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
22:58:cf:78:5f:74:3e:79:64:97:d6:0b:d0:49:a8:34:3e:01:
a7:5e:fb:f6:ac:fa:02:7b:e2:cb:a1:68:6e:cc:08:72:0f:b4:
6b:ec:cd:74:78:ce:8d:83:86:8c:b4:44:9b:f3:cd:b9:11:26:
3f:9f:d3:c9:ff:0b:13:a5:d0:ac:43:7b:5e:84:33:fc:9d:a5:
07:4f:3f:ff:9a:c4:ad:7e:68:85:9f:c1:7c:31:08:30:d4:86:
f9:70:5e:53:91:17:30:ab:19:7b:a9:99:ed:04:93:03:4c:f9:
e5:06:04:11:4f:19:df:2b:a7:48:95:56:b8:f8:6e:e5:e7:be:
0d:80:e3:ce:5c:a8:78:32:1a:e0:06:22:fe:36:1c:93:a7:a1:
03:49:dd:18:ca:ec:48:2e:9f:a3:c1:ba:16:b2:8f:69:f5:ad:
80:4c:8c:79:04:7b:b4:2f:fd:cb:20:68:1f:4e:64:19:4e:61:
74:c9:d7:3e:44:12:4a:7b:79:47:41:42:48:05:88:e4:50:d0:
ee:c7:da:7b:4a:03:c3:08:1b:5d:14:ec:d0:4b:e8:29:4f:9e:
cf:44:8c:e7:99:89:3a:6d:0a:e2:a5:b5:56:e9:52:bf:84:44:
0b:cd:1d:2b:3a:0e:c4:c2:89:05:f0:37:23:0d:5d:32:cc:4a:
f8:0e:15:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAWL4PyNHuLY55ciQh5fWo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwODE4MTg0MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmMzMDFlNjNiMWEzOGEyODA5YTk2ZWM0ZTViODYyNzEzYzVhYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i8dS831k7xqkrl16Ec60Q6UEBjd
+GTDSwbvR07Q/GtH1Pb6YRjOM7clBCUGHab0AZOhwBYg/oP91hJBA9kyDf0Qt3g1
Z/oF/RPH55EBC+usQxx3oRkvoie9ig3nHXwxA8LFTtzqm3DNetMr4W85YAYuj0gz
u1qHkjMgjDWvQLAb5EY/Do8plXH/PhrFJ2xbi+nCUwBFsHxXw2hWBtEedSnIU88s
LApY/lUmz5BI6mqyESYGDn0oNNndk3Jd7Ee3RkEFOZoXsJadAgajo3TqtHmsW5hw
cRqaKR6dymYsF9CAXQv1xpRAozglUAXXLoqcjjNJ9daMTJU4hxZMC9KHvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbDAeY7GjiigJqW7E5bhicTxaxBMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvcHNNQjVqc2FPS0tBbXBic1RsdUdKeFBGckVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyx8MA0G
CSqGSIb3DQEBCwUAA4IBAQAiWM94X3Q+eWSX1gvQSag0PgGnXvv2rPoCe+LLoWhu
zAhyD7Rr7M10eM6Ng4aMtESb8825ESY/n9PJ/wsTpdCsQ3tehDP8naUHTz//msSt
fmiFn8F8MQgw1Ib5cF5TkRcwqxl7qZntBJMDTPnlBgQRTxnfK6dIlVa4+G7l574N
gOPOXKh4MhrgBiL+NhyTp6EDSd0YyuxILp+jwboWso9p9a2ATIx5BHu0L/3LIGgf
TmQZTmF0ydc+RBJKe3lHQUJIBYjkUNDux9p7SgPDCBtdFOzQS+gpT57PRIznmYk6
bQripbVW6VK/hEQLzR0rOg7EwokF8DcjDV0yzEr4DhVk
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:57 2026 by rpki-client