Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/_33YSg5P9-_VmHHErBd0KLeX1o8.roa
File: _33YSg5P9-_VmHHErBd0KLeX1o8.roa (raw, json)
Hash identifier: EmfpNJ7ONZRaHQj21Ww5hNoAXm5H/OGd166T+T6P94g=
Subject key identifier: FF:7D:D8:4A:0E:4F:F7:EF:D5:98:71:C4:AC:17:74:28:B7:97:D6:8F
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F95F429EF1D5035723D895BA090F7FAD5
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/_33YSg5P9-_VmHHErBd0KLeX1o8.roa
Signing time: Fri 24 Jul 2026 21:07:14 +0000
ROA not before: Fri 24 Jul 2026 21:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402807
IP address blocks: 191.44.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:f4:29:ef:1d:50:35:72:3d:89:5b:a0:90:f7:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 24 21:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff7dd84a0e4ff7efd59871c4ac177428b797d68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:30:47:8e:2f:10:46:70:0f:b5:f7:ba:95:
09:31:a5:dc:ec:7b:15:b9:1a:b8:57:82:90:ab:ac:
d5:70:4c:9c:5f:85:4f:9d:2b:6c:23:e4:4c:01:10:
4c:cc:99:fb:52:1e:be:13:d1:09:ce:59:6d:a7:1d:
f4:a9:eb:c7:99:d6:b7:eb:2e:e2:02:9a:6b:33:05:
eb:c9:e7:60:27:d8:b7:d3:9c:89:97:79:34:81:db:
32:1b:68:63:be:33:16:bd:2b:37:29:c0:ff:be:05:
8b:a8:80:b2:c6:f7:b4:c1:35:d9:28:0d:9c:ca:c4:
b8:d5:5a:31:6b:45:90:fd:5e:d4:9b:4b:af:36:a3:
f0:ed:67:5f:e8:d2:82:cb:21:a3:e7:ff:e8:d0:4a:
e4:ad:1b:91:2e:c3:0f:4c:ef:50:56:3d:59:4f:c3:
d0:40:f2:68:bb:f6:df:fd:de:76:29:cc:70:c2:7d:
21:6b:dc:75:fd:00:99:cf:0c:36:75:c4:73:c5:76:
48:c2:40:d6:1f:41:59:52:0c:4d:3c:e8:1a:b6:96:
c4:db:56:aa:57:0e:93:bd:3f:72:8e:36:0f:fa:bd:
09:e9:cd:61:5d:21:0a:3b:ad:a3:0b:aa:d5:62:50:
8f:a1:f4:e7:1f:87:8a:20:d1:fd:2d:78:2c:19:b1:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:D8:4A:0E:4F:F7:EF:D5:98:71:C4:AC:17:74:28:B7:97:D6:8F
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/_33YSg5P9-_VmHHErBd0KLeX1o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7e:68:df:cd:34:b6:e5:61:3b:1a:47:84:6b:64:54:08:88:
22:36:c5:3e:2d:f5:1e:dd:8f:df:d4:71:3d:77:4d:b7:ae:4f:
b6:0a:70:6e:b3:3f:88:33:13:45:ad:98:cc:04:5d:6a:cc:29:
ea:d2:9c:52:76:86:93:ff:00:ed:48:77:11:51:25:28:5f:14:
6b:e7:c6:29:ec:03:ec:81:9d:e7:7d:61:4b:3d:b1:d0:48:10:
74:f5:e6:5f:39:a7:bc:1e:7e:f0:cf:71:10:33:8f:50:72:9a:
f6:7a:25:ed:d9:a9:eb:48:ae:f4:f9:9b:06:5b:52:de:56:13:
1b:91:2e:21:5e:58:3d:30:65:6e:f0:d2:88:3e:36:73:91:d0:
be:6f:56:4b:ef:b0:e6:02:73:54:28:ec:8c:66:f0:95:e1:c3:
eb:a2:e5:87:e8:d8:16:42:0c:d7:28:70:94:97:82:8b:25:f0:
6c:de:ad:50:d3:14:0e:8d:8f:e8:ba:43:84:b9:f7:65:cf:5e:
07:20:c6:ba:31:bf:c2:6f:c5:40:b5:df:9c:55:98:2c:b8:e7:
9a:dc:81:98:97:4a:4a:73:20:48:db:95:be:6a:cb:5d:69:3b:
6a:c2:e0:ab:3e:83:81:e2:5b:a4:da:5c:4b:dc:0c:2b:22:e5:
a5:c4:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:39 2026 by rpki-client