Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/_rhlAoPDXAOwZHj4Z6sUVJGTVaA.roa
File: _rhlAoPDXAOwZHj4Z6sUVJGTVaA.roa (raw, json)
Hash identifier: nWp5IEwVXbskUGRK7G8OBDU0Ik0dX6hm5HXG2/lzYVQ=
Subject key identifier: FE:B8:65:02:83:C3:5C:03:B0:64:78:F8:67:AB:14:54:91:93:55:A0
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FA7ED9C36B70B8A110BCFBA420B18D0D2
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/_rhlAoPDXAOwZHj4Z6sUVJGTVaA.roa
Signing time: Tue 28 Jul 2026 08:53:14 +0000
ROA not before: Tue 28 Jul 2026 08:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146892
IP address blocks: 191.44.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:ed:9c:36:b7:0b:8a:11:0b:cf:ba:42:0b:18:d0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 28 08:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb8650283c35c03b06478f867ab1454919355a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:3d:1c:af:41:50:8e:2c:90:8b:b7:09:81:
cf:20:d4:00:ae:7a:a9:4f:18:57:2f:f5:be:e3:0b:
0e:9f:82:0e:7a:ff:45:52:57:45:39:b2:f1:15:5c:
d7:8c:51:69:32:b1:8e:9c:0f:26:98:2c:9c:c0:dc:
4d:3c:48:a4:5d:3a:f1:4d:7e:d3:9e:d7:4a:e6:ca:
3b:03:73:3b:2a:2e:ec:8f:86:5e:0c:b1:91:64:39:
28:59:d9:43:a7:2a:f7:52:ed:ac:e1:5a:dd:3a:68:
c9:d6:ec:f5:44:6a:fb:4c:fe:d4:68:18:2a:fc:03:
db:d1:11:a6:e5:2b:7a:7d:56:72:83:3c:94:77:d8:
fe:74:9c:6f:b1:30:d2:1e:7a:f6:af:9b:62:55:b9:
9c:b7:e3:0e:90:a6:ba:17:32:62:17:e9:04:8f:20:
f2:61:9b:65:68:f3:a8:2e:ee:d0:63:57:9b:e7:1e:
df:23:64:bd:88:18:62:3e:6e:7d:5b:83:99:42:16:
d2:8e:dd:16:a7:fe:5f:27:83:48:90:e6:5c:d8:c4:
2b:8c:11:ea:ec:7f:3d:1c:cf:02:5b:a9:cd:10:c0:
e1:e3:bd:c4:d6:cc:d8:77:27:5b:f7:d4:c0:db:ce:
52:2a:3d:ab:ab:9a:6f:35:48:fa:ea:9f:af:d5:94:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B8:65:02:83:C3:5C:03:B0:64:78:F8:67:AB:14:54:91:93:55:A0
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/_rhlAoPDXAOwZHj4Z6sUVJGTVaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2a:1b:19:c9:e3:d3:8f:4d:75:8c:29:28:7d:d1:ce:5e:09:
e3:7c:d8:fe:ce:e0:34:e1:0e:8b:a7:df:5e:fd:81:2d:26:a7:
c8:43:f1:f8:08:6a:6b:5b:d4:62:4e:6f:c6:55:12:aa:fd:c6:
af:00:9e:f1:3c:04:6a:b7:15:49:cf:04:72:6d:ac:62:95:11:
43:00:a5:e0:48:38:1e:f2:7b:f8:b8:ab:ad:65:cc:c0:1e:a2:
65:d7:8f:e6:01:8f:f2:66:40:3a:57:9f:4d:05:3d:00:8d:bf:
ad:be:78:97:2b:49:c8:9d:5d:32:72:80:4e:36:7b:f5:e6:15:
ef:fe:db:d3:e4:7c:5b:db:ed:a2:a7:fa:1e:6c:2f:66:ed:5f:
cf:92:5b:2a:c4:09:00:88:eb:39:4a:b5:70:47:85:f9:b9:c9:
6a:9d:b6:a3:67:86:14:76:57:ed:d2:91:a0:57:2c:77:d2:9f:
98:51:4e:80:3e:d1:ee:c0:9f:47:a8:0d:09:bc:be:2e:a0:22:
26:8e:74:8f:66:04:8b:db:83:8d:73:3b:79:89:43:47:fb:c1:
38:d3:50:f0:02:b7:ec:cd:eb:87:45:b3:4c:3b:40:d9:02:cd:
37:c3:a2:e1:b7:db:e6:17:ed:7f:71:6c:6d:b8:84:44:a0:b9:
d2:d1:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:07:29 2026 by rpki-client