Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/tMf1KbyE-DvV94JjiZdnOSEsplw.roa
File: tMf1KbyE-DvV94JjiZdnOSEsplw.roa (raw, json)
Hash identifier: v2280CJrAPs1DgfRIpZwPAODzQidwye4Y3T+CZxf3U0=
Subject key identifier: B4:C7:F5:29:BC:84:F8:3B:D5:F7:82:63:89:97:67:39:21:2C:A6:5C
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FCBEA44987111D4DF72C35543605556ED
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/tMf1KbyE-DvV94JjiZdnOSEsplw.roa
Signing time: Tue 04 Aug 2026 08:35:55 +0000
ROA not before: Tue 04 Aug 2026 08:35:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 191.44.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:ea:44:98:71:11:d4:df:72:c3:55:43:60:55:56:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 4 08:35:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4c7f529bc84f83bd5f7826389976739212ca65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:39:64:4f:72:15:79:b4:c1:e3:2d:89:60:
f8:e8:3c:19:55:b0:91:95:b2:9a:69:ef:ef:cc:b1:
33:25:28:5a:94:f9:17:c9:cb:61:18:2c:b2:81:73:
62:2b:a3:d0:0f:28:3c:ae:73:ea:ba:6f:72:f2:1c:
55:21:39:23:00:47:0b:53:5e:c4:6d:cb:40:01:02:
56:5f:66:4c:31:c0:30:07:89:3c:e9:cc:fa:20:cc:
c2:bd:32:a9:aa:5a:01:77:da:3d:aa:21:f7:4d:2a:
00:8d:5d:38:90:81:e2:f8:70:d7:da:dd:45:82:78:
82:d4:28:2b:4e:ca:31:e7:7f:76:f7:e8:ef:11:3b:
61:2c:ad:95:e5:ec:40:86:aa:22:ed:a3:83:41:c5:
ea:3e:3b:31:31:43:dd:1b:71:e5:36:2f:40:5e:7f:
79:25:c7:9f:a2:2d:b6:fc:d7:f8:ee:b6:3a:ed:23:
fc:b2:df:2e:a8:23:f6:5d:a4:51:4f:50:08:3b:b5:
50:39:8a:de:54:ed:8b:a0:31:46:43:7c:40:00:ca:
db:db:b3:a7:bf:15:6e:50:63:80:6b:8e:cb:02:49:
13:4e:be:97:f1:db:cf:ba:1f:ce:4d:5d:ca:5b:23:
85:6f:1a:dd:69:29:7c:2f:4a:04:84:e6:4e:65:4f:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:F5:29:BC:84:F8:3B:D5:F7:82:63:89:97:67:39:21:2C:A6:5C
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/tMf1KbyE-DvV94JjiZdnOSEsplw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e3:32:ea:4f:e3:37:1d:c2:cd:a6:e0:6c:d3:da:9b:ee:79:
50:18:31:f0:70:82:73:92:14:92:83:82:22:31:32:64:6a:38:
ba:89:9a:7f:0e:b3:7b:38:9b:8c:ea:41:f6:66:8a:d5:c2:f7:
2f:9c:72:e7:15:c3:c5:d1:ee:cd:8c:e9:6b:ce:a1:93:99:f3:
11:d8:de:d3:94:05:8b:5a:ed:e3:ba:8f:36:9a:cb:31:9c:3e:
f1:33:c1:23:c1:21:ac:89:97:3e:34:4f:ad:c4:39:ea:7d:92:
b1:55:6c:70:f3:27:be:c9:23:43:93:d7:53:fd:7d:09:73:a7:
7a:ab:fa:5c:5f:49:ec:9d:ba:3d:b2:6e:89:a8:52:c2:5e:d9:
66:01:16:f3:cf:3c:5b:8c:4e:32:11:31:1d:eb:83:d6:c4:d8:
ff:2e:ad:0e:0b:e5:1d:e1:8e:76:86:4f:c0:72:fb:7d:d3:bb:
6c:a1:93:b3:b5:ab:90:85:9d:af:3a:b8:56:f7:09:0c:a2:61:
c4:76:fc:98:31:86:53:58:74:dc:e7:ba:d6:c6:ce:81:ca:dc:
84:7a:87:3b:3f:77:f3:75:c4:eb:63:30:5e:1b:a9:09:a5:ea:
05:d3:b3:71:60:20:5b:83:af:0c:65:79:d0:45:b7:3f:16:df:
24:37:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:15:02 2026 by rpki-client