Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa
File: EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa (raw, json)
Hash identifier: UeXhJ2qTzLZJgTHgN9h/HZW4A+wpinm+DBVQ9mkXo+g=
Subject key identifier: 13:0B:83:04:DC:2C:6D:23:2D:CB:1D:1C:64:CB:4C:D2:A3:E4:3C:C0
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019D9847E078673996F87C0B68B7BF16075C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa
Signing time: Thu 16 Apr 2026 21:52:20 +0000
ROA not before: Thu 16 Apr 2026 21:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 191.44.72.0/24 maxlen: 24
191.44.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:47:e0:78:67:39:96:f8:7c:0b:68:b7:bf:16:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 16 21:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=130b8304dc2c6d232dcb1d1c64cb4cd2a3e43cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:a0:aa:74:fd:1c:1f:cd:4a:53:4f:8f:0c:
46:ae:8e:35:61:4a:36:78:33:e2:76:ee:5f:7a:ba:
93:da:40:78:45:e1:07:0d:84:bd:cc:c0:36:1d:75:
03:a5:e9:0c:5e:ae:9f:00:e3:0f:cf:c3:e3:11:89:
b1:fb:a9:c1:02:1b:b2:fc:b9:52:09:84:24:0d:7a:
6a:e6:6f:36:2b:67:15:d5:5d:da:ef:5b:67:11:93:
60:4f:05:34:a9:01:68:b7:f2:6c:c4:b7:2d:e7:93:
45:21:7f:40:3c:9d:35:10:06:20:51:2a:7f:c1:b0:
35:47:b5:29:5a:4b:a1:4b:62:6c:c6:3c:9a:df:f3:
87:90:24:01:38:2b:80:54:d8:38:26:96:e6:f4:3f:
6a:0f:4f:fd:1d:25:5f:90:47:73:5c:22:c9:43:02:
3a:13:6c:d3:43:51:24:0d:b2:9a:e6:e9:60:7d:57:
a6:e0:4c:2a:03:97:59:78:ad:cd:39:6c:92:51:ef:
56:46:ff:e7:f8:40:36:cf:40:df:91:81:8b:69:61:
53:0f:a4:22:95:60:b8:5e:74:10:d6:25:79:62:39:
99:ef:f6:18:c8:ae:92:e3:5a:58:7f:d3:c8:79:92:
e2:9f:e8:6a:b7:52:11:07:d8:7c:01:60:4e:62:6a:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0B:83:04:DC:2C:6D:23:2D:CB:1D:1C:64:CB:4C:D2:A3:E4:3C:C0
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.72.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:94:27:5b:fc:10:1a:44:40:80:78:86:4e:a1:64:8b:6d:0f:
a3:95:96:93:b8:cb:05:9b:83:46:42:90:01:67:15:e4:c7:6b:
38:86:99:f6:35:0b:15:ad:ba:ec:cd:69:b9:d6:75:bb:9d:78:
b2:18:42:60:2c:05:d7:f2:cb:1d:a7:88:d2:82:65:25:b4:41:
52:bc:98:34:0b:0b:cc:68:ef:c4:97:79:0f:39:eb:d9:7d:a0:
48:8a:7c:9d:f4:ec:bb:a2:39:8e:31:3b:fb:93:67:4b:56:33:
82:96:16:2c:85:bb:74:96:00:c4:52:ea:eb:79:ff:6c:96:c0:
ed:9d:4f:5d:b5:b8:1c:bd:96:3c:f5:ac:72:10:9b:ff:76:08:
b0:fb:09:93:c8:3a:ea:85:3f:35:29:12:de:55:f7:4e:57:df:
23:45:92:5d:b9:17:d9:c5:39:86:54:dc:03:b2:2f:17:c4:ae:
3c:a6:a3:1d:95:06:ca:2f:d3:7e:a1:c8:e9:91:ad:09:7d:2a:
31:bd:61:2a:51:bf:48:d1:15:71:81:6f:0d:e9:21:1c:1f:2d:
e1:0b:60:a2:a3:1d:07:63:49:7c:aa:26:d9:a7:ca:54:dc:73:
4b:db:6d:77:9e:6e:92:3c:91:c5:d9:58:57:4a:91:ce:3b:a2:
b2:17:10:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2YR+B4ZzmW+HwLaLe/FgdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwNDE2MjE1MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzBiODMwNGRjMmM2ZDIzMmRjYjFkMWM2NGNiNGNkMmEzZTQzY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKWgqnT9HB/NSlNPjwxGro41YUo2
eDPidu5ferqT2kB4ReEHDYS9zMA2HXUDpekMXq6fAOMPz8PjEYmx+6nBAhuy/LlS
CYQkDXpq5m82K2cV1V3a71tnEZNgTwU0qQFot/JsxLct55NFIX9APJ01EAYgUSp/
wbA1R7UpWkuhS2Jsxjya3/OHkCQBOCuAVNg4Jpbm9D9qD0/9HSVfkEdzXCLJQwI6
E2zTQ1EkDbKa5ulgfVem4EwqA5dZeK3NOWySUe9WRv/n+EA2z0DfkYGLaWFTD6Qi
lWC4XnQQ1iV5YjmZ7/YYyK6S41pYf9PIeZLin+hqt1IRB9h8AWBOYmrvTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMLgwTcLG0jLcsdHGTLTNKj5DzAMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvRXd1REJOd3NiU010eXgwY1pNdE0wcVBrUE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvyxIMA0G
CSqGSIb3DQEBCwUAA4IBAQAKlCdb/BAaRECAeIZOoWSLbQ+jlZaTuMsFm4NGQpAB
ZxXkx2s4hpn2NQsVrbrszWm51nW7nXiyGEJgLAXX8ssdp4jSgmUltEFSvJg0CwvM
aO/El3kPOevZfaBIinyd9Oy7ojmOMTv7k2dLVjOClhYshbt0lgDEUurref9slsDt
nU9dtbgcvZY89axyEJv/dgiw+wmTyDrqhT81KRLeVfdOV98jRZJduRfZxTmGVNwD
si8XxK48pqMdlQbKL9N+ocjpka0JfSoxvWEqUb9I0RVxgW8N6SEcHy3hC2Ciox0H
Y0l8qibZp8pU3HNL2213nm6SPJHF2VhXSpHOO6KyFxDR
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:49 2026 by rpki-client