Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pyLZyY5z5N9c-TrvySKKTwoV2MQ.roa
File: pyLZyY5z5N9c-TrvySKKTwoV2MQ.roa (raw, json)
Hash identifier: yWJwAPCAz7n2l77b/n3NwL5HwsUUpXKHa40E700HQuA=
Subject key identifier: A7:22:D9:C9:8E:73:E4:DF:5C:F9:3A:EF:C9:22:8A:4F:0A:15:D8:C4
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A03E38D9B4735B3F8B7184E9B370DCD907
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pyLZyY5z5N9c-TrvySKKTwoV2MQ.roa
Signing time: Wed 26 Aug 2026 13:18:28 +0000
ROA not before: Wed 26 Aug 2026 13:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 191.44.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:38:d9:b4:73:5b:3f:8b:71:84:e9:b3:70:dc:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 26 13:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a722d9c98e73e4df5cf93aefc9228a4f0a15d8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:e7:c5:9b:ae:d5:e6:1a:1b:14:64:d9:d1:
e6:8e:d0:c7:a8:e7:71:90:62:63:4c:0a:f8:4f:60:
ce:0b:6f:17:29:5b:0c:6c:45:21:be:82:29:0e:af:
91:0d:f2:09:86:c3:e1:cd:3b:71:e3:81:06:91:7c:
7e:b0:54:10:4b:13:6f:a5:76:16:be:ed:8c:ef:6a:
aa:65:46:74:f0:4d:71:e7:4d:5f:d9:51:6a:fa:86:
29:ec:81:5e:35:1b:ff:06:d0:75:7a:65:22:0d:d1:
36:1a:f0:cc:73:86:3e:8d:7f:68:21:42:57:fa:5e:
27:33:67:8c:a4:8b:f6:55:5b:97:df:bc:c9:55:9c:
83:dc:6c:b7:43:60:c6:9c:bc:1e:2e:6a:61:f7:c0:
ba:9e:b2:89:af:ad:af:1c:f9:34:1c:c4:81:a5:93:
de:21:32:e3:5d:f2:49:e2:46:36:a5:0d:ce:34:d0:
3b:61:93:6c:9d:b0:4f:a7:fd:49:34:cd:a8:09:27:
f0:b0:01:33:1f:f4:3e:ed:8a:ac:32:5e:7e:21:3e:
fe:4c:1c:a5:ab:75:6b:6d:65:26:7e:8f:82:1f:e2:
0c:87:cf:73:f8:3a:58:25:8d:3b:91:87:2d:cb:90:
12:2d:bd:e8:13:ce:58:bd:7d:c1:fd:a7:97:a1:84:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:22:D9:C9:8E:73:E4:DF:5C:F9:3A:EF:C9:22:8A:4F:0A:15:D8:C4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pyLZyY5z5N9c-TrvySKKTwoV2MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1d:62:60:33:e0:e4:cc:83:02:4f:2f:ca:cc:7a:79:4a:de:
df:2e:55:53:db:ec:27:1d:c6:ad:70:0d:44:d4:6a:9a:75:d5:
ce:47:77:2d:6c:e6:1e:7c:c0:72:9c:0f:ef:24:d7:7f:98:4e:
ef:4b:a5:a7:48:18:ed:4b:ad:e2:2d:87:b5:79:a2:3a:9d:3e:
01:14:4b:a5:b2:57:d4:d8:d0:f6:4b:c6:38:b4:ab:cf:14:5a:
f6:84:55:4f:43:03:28:19:a7:ef:a0:bd:35:c2:48:eb:e6:f1:
93:38:7c:5e:fb:d2:62:ca:47:09:41:f1:a5:00:65:ec:96:15:
f2:3c:77:76:fc:a3:0e:69:db:23:a0:cc:dc:0d:c3:49:42:1b:
83:6b:35:1f:f7:ad:be:5c:d4:68:7a:9e:c6:51:9a:1e:44:19:
ab:f6:fd:b8:75:41:a1:20:0f:67:c5:62:ff:ba:c7:9d:24:a7:
a6:87:76:00:a9:38:dc:83:0e:8e:dd:a1:1f:d2:9b:ff:bd:d5:
72:44:84:c0:ce:21:67:dd:f8:74:89:11:b1:ef:7f:f2:93:e2:
c5:02:2a:cf:59:8a:e9:3a:6e:3a:c3:21:f9:d4:2d:0f:0f:36:
ef:92:f9:09:f5:d5:a7:68:fc:f7:50:27:5d:87:44:95:58:ae:
32:3f:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:44:06 2026 by rpki-client