Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/vbFpQyaM7eCZ6HVjML2TzVSK0oU.roa
File: vbFpQyaM7eCZ6HVjML2TzVSK0oU.roa (raw, json)
Hash identifier: muDs3s2peZCSgYbiSg+38JEDWmjY6ehnb/tZpm8uIec=
Subject key identifier: BD:B1:69:43:26:8C:ED:E0:99:E8:75:63:30:BD:93:CD:54:8A:D2:85
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0579009D00BC7CF6F48091201544080A5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/vbFpQyaM7eCZ6HVjML2TzVSK0oU.roa
Signing time: Mon 31 Aug 2026 11:24:12 +0000
ROA not before: Mon 31 Aug 2026 11:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 191.44.71.0/24 maxlen: 24
191.44.88.0/24 maxlen: 24
191.44.91.0/24 maxlen: 24
191.44.125.0/24 maxlen: 24
191.44.126.0/24 maxlen: 24
191.44.127.0/24 maxlen: 24
201.4.64.0/24 maxlen: 24
201.4.65.0/24 maxlen: 24
201.4.68.0/24 maxlen: 24
201.4.69.0/24 maxlen: 24
201.4.70.0/24 maxlen: 24
201.4.71.0/24 maxlen: 24
201.4.75.0/24 maxlen: 24
201.7.28.0/24 maxlen: 24
201.7.29.0/24 maxlen: 24
201.7.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:90:09:d0:0b:c7:cf:6f:48:09:12:01:54:40:80:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 31 11:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb16943268cede099e8756330bd93cd548ad285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:87:17:70:00:31:4b:e5:56:1f:71:50:f3:
3f:ef:7e:1e:ef:9e:16:75:92:a5:24:3a:26:69:b1:
a1:d8:90:28:1b:08:e5:38:cb:fe:1e:0b:03:61:66:
ec:11:8f:ed:87:58:48:a3:99:fd:30:fc:be:37:a6:
d2:26:58:03:20:6f:17:fb:b2:ae:7a:97:f8:e1:63:
4f:54:99:f0:52:54:52:34:43:0a:81:92:15:9d:83:
6a:53:0c:ad:b4:0a:75:df:33:2f:f5:f9:a3:b2:9c:
23:85:f6:25:a1:42:39:8a:9c:2f:73:5c:a1:72:fc:
66:0e:27:73:79:54:80:eb:8c:15:d4:48:f4:29:1f:
94:e8:60:97:f7:e5:d3:eb:37:78:dd:c0:03:8d:13:
11:69:ab:c5:33:c0:31:a8:9f:2e:35:8d:e3:d9:40:
3d:a7:33:99:82:3e:dc:85:7e:ac:6f:cc:6a:49:ef:
ad:fb:17:1f:85:99:ce:45:49:9f:a0:20:d5:04:ad:
2f:50:f7:9a:ac:8b:15:ff:81:c7:ee:7c:48:5e:7f:
15:22:49:75:33:bf:21:51:fa:98:72:dd:1d:d7:90:
f4:56:53:22:31:21:cf:9b:da:ea:30:cf:c7:3f:0c:
7b:4b:2b:c2:08:09:71:0a:ae:82:cb:01:e7:c4:9c:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:69:43:26:8C:ED:E0:99:E8:75:63:30:BD:93:CD:54:8A:D2:85
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/vbFpQyaM7eCZ6HVjML2TzVSK0oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.71.0/24
191.44.88.0/24
191.44.91.0/24
191.44.125.0-191.44.127.255
201.4.64.0/23
201.4.68.0/22
201.4.75.0/24
201.7.28.0/23
201.7.31.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e6:05:17:ff:a7:21:7c:dd:22:2e:d3:37:e4:fd:4d:b8:c2:
d5:f0:45:a9:de:20:b1:9c:9e:bc:33:9b:a5:83:21:94:97:82:
c0:62:46:a0:b6:59:c7:76:45:49:0c:5b:d4:fb:b3:db:46:c4:
1c:d7:69:2d:40:e3:28:84:12:58:77:5e:a1:58:e3:e7:4c:ff:
37:17:b1:31:46:57:1e:32:b2:ea:1d:f2:40:40:e9:3b:cc:89:
74:9b:c5:cd:8b:b5:ad:4e:88:b4:14:d7:07:6f:c8:91:43:df:
21:07:ef:0e:b0:5f:4e:cb:83:eb:59:0d:bd:cc:0b:d6:b5:42:
e0:23:3f:82:ea:fa:a2:ae:66:36:61:99:2f:9b:88:50:82:08:
46:b4:21:92:b3:06:ee:d1:2e:9b:b7:1d:20:06:e0:5e:c9:96:
a2:1b:79:69:70:9d:d2:5a:71:fb:b2:31:fa:53:fd:92:18:8f:
d6:ed:d0:47:1c:f2:69:e0:04:ee:27:64:6f:af:e1:bf:ee:06:
c8:17:3d:6d:3f:55:6f:17:f9:4e:49:c8:b5:f8:4b:89:3a:71:
28:81:42:e3:7c:92:e4:ea:8e:ac:8f:18:72:cd:fd:c1:ba:b3:
97:69:ff:0b:0f:d2:0f:85:c1:22:0c:07:a1:b7:10:35:ed:98:
f8:d5:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:41 2026 by rpki-client