Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/zS59qFxXL3BYIT4Z0_THN7FPV4g.roa
File: zS59qFxXL3BYIT4Z0_THN7FPV4g.roa (raw, json)
Hash identifier: OUbS7wxUfBLY5BaWKVg9wl/zUwgN5HeRcbLggIAF2LM=
Subject key identifier: CD:2E:7D:A8:5C:57:2F:70:58:21:3E:19:D3:F4:C7:37:B1:4F:57:88
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0233FF1BBBA21A74936ED246150C0B505
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/zS59qFxXL3BYIT4Z0_THN7FPV4g.roa
Signing time: Fri 21 Aug 2026 07:36:28 +0000
ROA not before: Fri 21 Aug 2026 07:36:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 191.44.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:3f:f1:bb:ba:21:a7:49:36:ed:24:61:50:c0:b5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 21 07:36:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd2e7da85c572f7058213e19d3f4c737b14f5788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:b2:c3:fb:78:96:74:83:43:f5:17:a8:18:
c0:28:7a:93:e7:0d:4b:17:d1:cb:16:5b:87:b9:48:
a4:bc:cb:86:9b:8a:b2:89:14:84:ad:77:83:be:4d:
f6:df:93:6b:34:06:91:ee:f5:d2:45:8f:77:53:ea:
33:db:44:64:48:c6:63:3d:d4:29:31:05:29:4f:64:
a0:23:9a:5c:45:6c:51:ab:4e:9a:fe:cd:2b:b1:81:
fa:32:80:89:14:a0:ba:e8:3f:a9:2f:07:91:09:69:
b3:bf:a3:8e:d4:31:b3:b6:0e:29:ce:83:45:36:ea:
3a:55:cd:0b:0c:4c:a9:de:67:b0:b4:fd:63:c8:d9:
af:0e:7a:75:e5:30:35:55:48:d2:c4:58:36:a7:ae:
5b:26:c1:ae:47:b8:4a:f7:5b:60:85:42:0a:14:0b:
52:e1:ce:f1:b8:dd:a5:43:1d:d9:cd:c6:23:c3:cb:
90:7b:3f:22:8c:df:52:07:83:75:18:ec:6b:c2:12:
bb:78:b2:86:d9:7b:a5:d4:4c:9c:cc:be:6b:e0:ef:
51:d4:e7:da:1d:b8:f1:41:82:a7:7d:91:d5:c4:13:
bc:b3:29:36:9a:6a:1a:01:a4:f3:fb:18:6a:92:af:
0e:8d:e8:6e:17:09:e7:c3:73:4e:a0:f3:cc:83:de:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:7D:A8:5C:57:2F:70:58:21:3E:19:D3:F4:C7:37:B1:4F:57:88
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/zS59qFxXL3BYIT4Z0_THN7FPV4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.97.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7e:b2:22:cd:6b:2b:e1:59:94:21:62:b1:00:01:5d:d5:29:
29:b5:85:94:60:4e:83:db:7f:3e:a4:cd:b5:93:a6:00:76:d3:
6c:0b:02:ff:d0:99:cc:bc:e6:a0:aa:6b:58:9c:e1:6a:24:39:
25:70:ce:45:c5:93:dc:94:72:5b:bc:c0:09:0f:9a:ee:58:cf:
21:b9:41:4f:77:db:eb:00:66:87:d1:d0:4e:aa:f8:6e:ab:59:
5d:97:39:4a:52:26:1f:ec:c0:25:3c:ad:a3:37:a1:18:70:5e:
77:3a:e7:9b:28:f2:8c:29:4b:c8:70:26:d2:46:3a:cb:33:14:
f8:16:a0:f4:be:b4:b9:43:fa:56:46:c5:01:34:e2:c5:cf:7f:
bc:26:3e:06:37:3f:50:53:f7:c3:ab:36:e1:09:dc:18:0e:9d:
04:b3:6e:b8:f8:27:26:15:b8:5e:36:2e:9b:8d:a0:8e:14:44:
98:3d:64:99:34:05:51:21:42:76:54:71:04:3a:b6:3b:52:63:
cb:40:e5:a2:24:d9:8d:72:7f:26:c8:74:20:4b:9c:86:5f:0a:
3f:a5:d7:4c:34:bc:13:2e:f5:13:95:30:b9:8a:b6:38:55:b6:
5b:20:2b:c5:96:b9:9a:c5:22:8c:9e:f6:f0:3a:7a:51:16:98:
a3:02:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:48 2026 by rpki-client