Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/wXk9jLeC3C5VuuQaipZ-MHkgjHM.roa
File: wXk9jLeC3C5VuuQaipZ-MHkgjHM.roa (raw, json)
Hash identifier: zaWayCz3/z3tt5f8nScALTzCebKBSYmrwMrWEFmXKLY=
Subject key identifier: C1:79:3D:8C:B7:82:DC:2E:55:BA:E4:1A:8A:96:7E:30:79:20:8C:73
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F283D25C153A680B34240D7BB985D1883
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/wXk9jLeC3C5VuuQaipZ-MHkgjHM.roa
Signing time: Fri 03 Jul 2026 13:48:43 +0000
ROA not before: Fri 03 Jul 2026 13:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 191.44.72.0/24 maxlen: 24
191.44.73.0/24 maxlen: 24
201.3.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:3d:25:c1:53:a6:80:b3:42:40:d7:bb:98:5d:18:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 3 13:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1793d8cb782dc2e55bae41a8a967e3079208c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:ca:e6:d3:63:ce:4e:da:26:e3:b5:c4:e8:
43:c7:40:b4:4a:bb:1f:a5:c2:2f:93:ff:6d:d6:ac:
45:94:72:41:e2:d9:e5:8f:1b:52:9a:f0:1c:2a:7c:
b7:fc:d9:46:2f:8e:66:90:2d:05:b2:75:ae:70:eb:
74:b3:d8:23:99:4d:e9:37:11:48:aa:e0:3d:b0:c7:
c1:47:d4:88:9c:44:7d:6c:6b:eb:00:2d:a8:6d:3c:
0b:a0:ff:8f:84:71:38:da:af:02:73:50:68:e4:a0:
c6:03:66:ca:70:22:c5:49:b0:2f:02:b6:e7:1c:29:
c2:17:c3:44:b2:c4:4d:47:ba:be:de:39:41:2f:7e:
8b:8a:e6:4e:83:fd:5d:a2:49:a7:27:9a:f1:c2:65:
d0:2f:43:55:d6:fd:00:86:ba:0a:e7:a2:ad:58:e9:
e1:bf:bf:78:14:11:44:ef:c1:38:05:16:15:49:9c:
ce:f8:c2:41:b5:86:67:8c:46:c9:76:d1:17:6c:31:
7b:1c:0d:52:b4:37:ca:72:36:9c:07:bb:d5:7f:cf:
0a:ae:3c:b7:31:57:5a:21:18:76:06:fd:49:04:bd:
72:56:21:3e:1a:59:12:56:7c:03:88:de:79:93:7c:
f7:22:1d:37:50:a7:cd:5f:ea:8d:4a:84:c5:13:8e:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:79:3D:8C:B7:82:DC:2E:55:BA:E4:1A:8A:96:7E:30:79:20:8C:73
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/wXk9jLeC3C5VuuQaipZ-MHkgjHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.72.0/23
201.3.230.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f3:d5:ae:b5:f2:0e:9c:ec:65:3e:f7:c5:86:1a:0e:f6:5b:
28:7a:7d:b1:dc:f1:a5:e6:cb:1f:49:13:c4:de:db:1d:7f:51:
c1:09:51:94:e7:73:7f:0e:a4:64:07:2e:73:2c:c1:04:34:d1:
a6:32:ba:1d:62:b4:b2:82:f4:d4:44:6f:43:56:8d:b8:d7:ec:
0e:92:b3:c4:ad:89:16:f8:b7:65:13:1d:ee:10:64:e6:2f:d5:
0c:d1:a1:f4:24:60:73:52:20:32:9b:32:c4:47:92:c8:7b:c6:
7f:01:5e:6a:dd:9e:88:e9:85:c4:51:dd:e8:43:a7:4f:2e:8d:
70:8e:04:6a:a3:3d:5c:7f:9c:5a:c2:a8:12:a7:f5:60:20:b0:
4c:7f:5c:08:3f:67:14:6a:aa:c0:68:88:d6:ef:09:0c:c4:5b:
2e:51:e0:7c:a9:14:e4:74:9b:43:db:f8:7e:62:95:a5:0c:9a:
ba:d7:05:c7:3e:22:3c:29:42:b4:1c:64:7a:6a:54:0f:8c:29:
de:ef:f6:d0:dc:89:94:79:8a:bb:e6:33:98:fe:a0:cb:c4:77:
5c:69:b6:39:3a:e7:a4:41:5c:b2:ac:ed:d0:b3:7b:d4:dc:28:
84:b1:2f:60:ee:9b:08:47:f3:62:d7:87:64:4e:6f:e5:33:e2:
55:7b:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client