Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/rUbPooMwHNGAgBB9R53m0ZChT4Q.roa
File: rUbPooMwHNGAgBB9R53m0ZChT4Q.roa (raw, json)
Hash identifier: 8/XTeQuMpi4a63oHdoaigOiNAOganZzKF1UInkyCwIw=
Subject key identifier: AD:46:CF:A2:83:30:1C:D1:80:80:10:7D:47:9D:E6:D1:90:A1:4F:84
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A03F7CF1C92FD379D66291F4C58CF5E7AE
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/rUbPooMwHNGAgBB9R53m0ZChT4Q.roa
Signing time: Wed 26 Aug 2026 19:12:28 +0000
ROA not before: Wed 26 Aug 2026 19:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 191.44.118.0/24 maxlen: 24
201.4.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:7c:f1:c9:2f:d3:79:d6:62:91:f4:c5:8c:f5:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 26 19:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad46cfa283301cd18080107d479de6d190a14f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:e9:71:80:de:ef:8f:6d:46:59:dd:1f:c7:
c7:17:77:14:e5:29:b7:c3:b1:6d:9a:98:6e:88:87:
4b:86:a5:5a:4b:bf:63:10:ce:90:43:ab:54:2c:c3:
19:a0:42:17:0b:8d:49:1f:8c:24:7b:90:e6:0e:95:
27:93:ed:07:2e:95:09:e6:91:9d:9a:8e:6c:df:da:
f6:db:de:8a:88:33:e4:95:38:04:42:71:4c:45:23:
d3:49:9b:69:72:b8:5c:6c:09:3b:ad:d5:69:fc:39:
47:15:a6:99:aa:53:e8:93:75:ca:1a:38:22:7e:37:
21:00:91:96:13:bf:1e:93:1f:25:d1:2a:0c:b8:a6:
73:f4:ba:3b:cf:4f:34:00:ba:32:60:b6:9d:4c:77:
a1:8a:c3:25:a6:e9:b2:fd:23:9e:ca:14:b8:69:18:
54:1f:ab:55:2b:ce:c7:7d:a3:72:61:eb:6f:df:8b:
71:c8:a8:2c:d5:ff:82:cd:ba:f2:e2:ef:d1:25:a2:
d4:d7:a1:e7:95:9e:29:fa:ac:92:cc:9f:11:75:d9:
54:02:c1:14:6a:0f:ff:e1:60:9c:ec:ac:35:6c:e3:
b1:bd:d8:f1:9e:27:94:c6:ea:41:13:13:cb:67:fd:
11:5a:e8:08:a6:fc:27:6e:73:ee:03:74:16:b4:76:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:46:CF:A2:83:30:1C:D1:80:80:10:7D:47:9D:E6:D1:90:A1:4F:84
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/rUbPooMwHNGAgBB9R53m0ZChT4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.118.0/24
201.4.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:fc:c3:11:d1:5a:d6:f6:9c:c2:52:a8:5d:6d:2e:a0:8f:20:
ef:3b:4f:8e:67:fb:43:a1:82:e0:16:42:2c:26:a9:97:bf:57:
92:49:bc:37:59:0d:0b:4f:67:7a:3d:79:61:05:b2:ac:96:21:
b2:6e:7b:f4:36:34:56:1f:db:f6:34:2b:c8:36:c4:9d:4c:3f:
9e:17:8f:e4:5d:9e:04:cb:f0:11:58:cd:78:ea:fe:61:2e:8c:
cc:d4:f7:f7:91:ba:0e:82:ba:11:32:b3:07:a5:bc:4a:2a:a1:
d8:2e:6d:65:79:e6:ae:51:01:44:9a:3d:7e:e9:00:2a:cc:cd:
52:2b:a3:52:13:bd:69:61:d9:76:ff:4f:23:95:55:42:f1:ac:
f1:56:c5:cb:cc:e1:6a:20:ec:46:23:41:d2:9c:5d:c9:4f:dd:
80:b2:ec:92:98:1a:c7:9c:45:9d:bf:0f:9c:83:f8:44:ef:2b:
ba:92:e9:ec:0d:73:11:7e:81:d1:06:31:72:79:2d:75:0a:25:
49:dc:54:8a:78:0b:b0:e6:f6:60:50:d3:1e:15:72:d2:7a:d7:
46:ab:38:bb:b5:0f:8d:46:4d:c5:89:49:22:94:da:6d:a4:3f:
69:73:a5:92:39:fe:25:fb:2c:2b:3f:e4:00:83:8f:15:f6:6e:
2b:b6:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:17 2026 by rpki-client