Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/quF9WWVYrCSQtFYT-9bYnXlsC9Y.roa
File: quF9WWVYrCSQtFYT-9bYnXlsC9Y.roa (raw, json)
Hash identifier: 30A5bhLHgPDPR/XWbKFvxyra01Yk8H7Cj14pjcYX+CA=
Subject key identifier: AA:E1:7D:59:65:58:AC:24:90:B4:56:13:FB:D6:D8:9D:79:6C:0B:D6
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A03A653B8E6B88C15E12F7911E09FDBD3A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/quF9WWVYrCSQtFYT-9bYnXlsC9Y.roa
Signing time: Tue 25 Aug 2026 19:28:27 +0000
ROA not before: Tue 25 Aug 2026 19:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 191.44.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:65:3b:8e:6b:88:c1:5e:12:f7:91:1e:09:fd:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 25 19:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aae17d596558ac2490b45613fbd6d89d796c0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:98:31:b9:a6:6f:04:6f:d4:cc:91:e4:b2:
12:06:9b:94:20:e1:03:b6:eb:4b:40:51:3b:75:22:
de:13:8e:cf:69:23:9a:0b:ec:2d:f2:59:68:49:71:
3e:13:53:38:1f:2d:8e:06:90:b0:d2:0a:c9:6b:47:
9c:4b:a2:cb:c8:92:45:38:d9:b1:be:b4:a7:d5:a5:
b4:63:80:3f:8c:ce:86:41:f3:f3:83:18:cf:1f:84:
5d:82:30:75:b9:c8:cd:08:1a:6d:7f:c6:f8:02:00:
5d:f3:3c:bc:66:fd:3f:57:c5:df:dd:44:5e:5e:cb:
86:f1:82:ed:c8:1f:4d:ab:a0:80:dd:80:e7:3e:b1:
77:ed:16:b6:f3:6a:ee:4e:a2:fc:44:d9:33:c8:d0:
f5:fb:16:23:45:fa:5f:4c:36:99:be:45:c9:30:39:
34:9d:7f:f0:cb:3f:62:a3:d0:ad:90:90:17:14:70:
32:fc:46:a0:47:d2:9d:32:a6:1f:b7:ef:bf:e0:b4:
b6:5b:6b:7b:cf:f4:9a:58:57:41:83:78:97:79:96:
9e:ec:64:fb:9c:09:10:2c:ea:c8:b7:7f:15:63:64:
32:d9:0e:51:8e:ce:85:91:ee:6e:a8:24:18:c5:41:
ba:29:3a:69:dc:1d:36:fe:c5:ca:5f:58:3b:f1:1e:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:7D:59:65:58:AC:24:90:B4:56:13:FB:D6:D8:9D:79:6C:0B:D6
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/quF9WWVYrCSQtFYT-9bYnXlsC9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.101.0/24
Signature Algorithm: sha256WithRSAEncryption
15:37:cf:c8:07:26:82:ae:37:99:89:f6:05:bc:9b:42:79:05:
7e:58:41:34:ef:df:9c:a2:06:58:8d:93:7f:86:32:4c:06:e7:
11:28:4e:7b:7d:e6:cf:d2:40:7c:67:d0:4f:a2:57:ee:87:2d:
ae:6d:ab:d3:58:cf:2d:ef:a2:0b:db:c4:ca:c7:57:ff:e4:03:
26:62:33:c3:e4:f7:69:28:02:4f:9d:f3:00:d0:8e:0b:7c:36:
de:05:a5:9f:88:cd:c6:d3:d2:62:5b:93:78:ea:34:3a:a6:01:
54:1b:04:dd:28:1d:0e:99:a0:43:98:28:48:46:d9:b8:ca:34:
ef:38:38:e7:ba:58:9e:22:6f:ce:b3:c5:54:75:60:e9:1d:ff:
c9:c6:25:e3:5b:44:f5:15:07:f8:2e:db:eb:8a:dd:36:50:29:
e8:f8:95:5a:ec:f0:74:54:93:a9:c2:bb:71:8d:12:fc:18:c6:
1e:6e:e4:e3:cb:ae:95:9f:9f:fe:53:81:23:c8:74:6a:f4:ed:
ac:ba:c8:77:e1:65:2d:a8:c6:a3:49:b1:c9:27:be:8d:c1:5c:
9e:99:d7:97:2a:d4:c1:a7:61:49:df:98:3d:55:18:65:72:86:
08:b1:ca:4e:2e:96:f5:df:c2:5e:0a:70:3c:c1:96:ce:e6:40:
9c:a2:6a:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA6ZTuOa4jBXhL3kR4J/b06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwODI1MTkyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWUxN2Q1OTY1NThhYzI0OTBiNDU2MTNmYmQ2ZDg5ZDc5NmMwYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSGYMbmmbwRv1MyR5LISBpuUIOED
tutLQFE7dSLeE47PaSOaC+wt8lloSXE+E1M4Hy2OBpCw0grJa0ecS6LLyJJFONmx
vrSn1aW0Y4A/jM6GQfPzgxjPH4RdgjB1ucjNCBptf8b4AgBd8zy8Zv0/V8Xf3URe
XsuG8YLtyB9Nq6CA3YDnPrF37Ra282ruTqL8RNkzyND1+xYjRfpfTDaZvkXJMDk0
nX/wyz9io9CtkJAXFHAy/EagR9KdMqYft++/4LS2W2t7z/SaWFdBg3iXeZae7GT7
nAkQLOrIt38VY2Qy2Q5Rjs6Fke5uqCQYxUG6KTpp3B02/sXKX1g78R4bKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKrhfVllWKwkkLRWE/vW2J15bAvWMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvcXVGOVdXVllyQ1NRdEZZVC05YlluWGxzQzlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxlMA0G
CSqGSIb3DQEBCwUAA4IBAQAVN8/IByaCrjeZifYFvJtCeQV+WEE079+cogZYjZN/
hjJMBucRKE57febP0kB8Z9BPolfuhy2ubavTWM8t76IL28TKx1f/5AMmYjPD5Pdp
KAJPnfMA0I4LfDbeBaWfiM3G09JiW5N46jQ6pgFUGwTdKB0OmaBDmChIRtm4yjTv
ODjnulieIm/Os8VUdWDpHf/JxiXjW0T1FQf4Ltvrit02UCno+JVa7PB0VJOpwrtx
jRL8GMYebuTjy66Vn5/+U4EjyHRq9O2sush34WUtqMajSbHJJ76NwVyemdeXKtTB
p2FJ35g9VRhlcoYIscpOLpb138JeCnA8wZbO5kCcompL
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:14 2026 by rpki-client