Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/wRoRQUULK3o7iJPVrE4WjRzz_jA.roa
File: wRoRQUULK3o7iJPVrE4WjRzz_jA.roa (raw, json)
Hash identifier: MJ7xYJKlBl8Xd0fVCX+ZUSxJBE1xvFkBBGg9gxd2itE=
Subject key identifier: C1:1A:11:41:45:0B:2B:7A:3B:88:93:D5:AC:4E:16:8D:1C:F3:FE:30
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DA26C50B963F957B054BF28F3C5699A4D
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/wRoRQUULK3o7iJPVrE4WjRzz_jA.roa
Signing time: Sat 18 Apr 2026 21:08:20 +0000
ROA not before: Sat 18 Apr 2026 21:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 191.44.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:6c:50:b9:63:f9:57:b0:54:bf:28:f3:c5:69:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 18 21:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c11a1141450b2b7a3b8893d5ac4e168d1cf3fe30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:47:0d:e5:80:15:a4:b5:81:2a:90:98:c7:
8f:39:56:ea:2f:d8:c7:69:df:64:2d:21:6a:56:89:
41:a4:0d:22:9d:2f:57:e0:21:9d:d5:a4:d5:6e:40:
0e:0c:eb:0c:47:8c:f2:5b:af:c8:67:ec:cf:a3:fd:
7f:73:a7:d7:29:d1:2a:79:d3:32:ef:eb:47:e8:cf:
c1:a7:fa:01:68:bb:c9:81:c2:99:2f:91:1f:02:24:
1d:56:38:f8:b6:d9:89:4f:d9:c2:c2:8e:41:a0:9f:
c0:50:58:49:26:ec:5a:e0:7e:64:4d:95:55:ef:1a:
29:d2:95:55:c6:e4:70:46:6c:ab:38:94:11:48:a0:
07:50:c1:80:c2:85:67:c2:a1:de:45:1e:cc:bc:94:
c9:4d:a8:01:d5:11:51:b5:f0:28:6b:6b:cd:1d:ae:
bc:3d:52:e9:64:e4:16:e8:1a:6a:f9:70:ff:b5:77:
72:dd:62:67:fe:9b:7b:ca:29:72:4c:c5:40:ae:bb:
d6:76:bf:6e:c5:9b:b4:85:6f:a8:bc:e6:69:8d:29:
d8:f3:e5:6b:ac:2b:2d:c6:c7:1f:be:6c:91:03:a1:
9a:24:49:8f:f7:e2:7a:e5:4b:af:af:89:46:b6:b2:
25:aa:07:2c:de:52:4d:25:f0:09:8a:a1:19:fb:bd:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1A:11:41:45:0B:2B:7A:3B:88:93:D5:AC:4E:16:8D:1C:F3:FE:30
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/wRoRQUULK3o7iJPVrE4WjRzz_jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.78.0/24
Signature Algorithm: sha256WithRSAEncryption
36:36:d5:87:eb:46:31:60:9b:16:48:e8:4c:32:a2:cd:7c:41:
6c:5d:1c:5e:7f:ec:1a:07:53:01:cd:48:1d:67:ff:2e:93:46:
15:d9:d7:4b:bb:79:51:ed:27:d9:42:71:18:77:28:28:4d:4b:
4d:e5:dd:a1:61:80:a5:78:0a:6a:7c:d1:4a:a5:14:ac:17:a2:
3b:f0:bf:3a:04:9f:32:28:58:47:8c:cc:ad:28:a7:79:f6:f5:
dd:5b:a5:30:b3:37:3a:95:4a:d6:0c:54:25:7f:d3:3a:70:76:
ef:a3:4c:9a:78:d7:b4:46:a5:45:ec:92:77:3f:91:e9:a7:ff:
75:09:07:a6:12:9d:7c:db:a0:db:cc:77:50:c7:cf:fa:58:1d:
3c:c5:4c:7c:52:67:40:61:64:4b:e5:bc:3a:3b:65:11:1e:82:
bb:02:23:3f:83:a1:dc:dc:3d:41:31:57:9b:e1:87:65:10:3d:
cd:8b:47:54:66:6b:64:0b:a3:74:1f:2c:f6:21:01:ef:89:6e:
0b:0e:c9:d0:8b:12:2f:16:03:89:12:9a:dc:4d:58:bf:63:83:
ef:93:ec:c6:05:ef:0a:69:af:f3:e4:86:8b:d8:dd:d2:96:7c:
0b:ab:49:f3:b0:0e:51:8e:15:f8:da:31:ad:05:d5:9e:d8:af:
69:2e:d4:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2ibFC5Y/lXsFS/KPPFaZpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNDE4MjEwODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTFhMTE0MTQ1MGIyYjdhM2I4ODkzZDVhYzRlMTY4ZDFjZjNmZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZhHDeWAFaS1gSqQmMePOVbqL9jH
ad9kLSFqVolBpA0inS9X4CGd1aTVbkAODOsMR4zyW6/IZ+zPo/1/c6fXKdEqedMy
7+tH6M/Bp/oBaLvJgcKZL5EfAiQdVjj4ttmJT9nCwo5BoJ/AUFhJJuxa4H5kTZVV
7xop0pVVxuRwRmyrOJQRSKAHUMGAwoVnwqHeRR7MvJTJTagB1RFRtfAoa2vNHa68
PVLpZOQW6Bpq+XD/tXdy3WJn/pt7yilyTMVArrvWdr9uxZu0hW+ovOZpjSnY8+Vr
rCstxscfvmyRA6GaJEmP9+J65Uuvr4lGtrIlqgcs3lJNJfAJiqEZ+70thwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEaEUFFCyt6O4iT1axOFo0c8/4wMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvd1JvUlFVVUxLM283aUpQVnJFNFdqUnp6X2pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxOMA0G
CSqGSIb3DQEBCwUAA4IBAQA2NtWH60YxYJsWSOhMMqLNfEFsXRxef+waB1MBzUgd
Z/8uk0YV2ddLu3lR7SfZQnEYdygoTUtN5d2hYYCleApqfNFKpRSsF6I78L86BJ8y
KFhHjMytKKd59vXdW6Uwszc6lUrWDFQlf9M6cHbvo0yaeNe0RqVF7JJ3P5Hpp/91
CQemEp1826DbzHdQx8/6WB08xUx8UmdAYWRL5bw6O2URHoK7AiM/g6Hc3D1BMVeb
4YdlED3Ni0dUZmtkC6N0Hyz2IQHviW4LDsnQixIvFgOJEprcTVi/Y4Pvk+zGBe8K
aa/z5IaL2N3SlnwLq0nzsA5RjhX42jGtBdWe2K9pLtS4
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:17:09 2026 by rpki-client