Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/eAEjbTs3WCrZN62FJ8QNRDroV4Q.roa
File: eAEjbTs3WCrZN62FJ8QNRDroV4Q.roa (raw, json)
Hash identifier: aUBtijtV5o5R3vD+OZVWBmcbYb5jpA/0VZQ17nFkqM4=
Subject key identifier: 78:01:23:6D:3B:37:58:2A:D9:37:AD:85:27:C4:0D:44:3A:E8:57:84
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0F8363435198B97A05DFB10C45EC16AF6
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/eAEjbTs3WCrZN62FJ8QNRDroV4Q.roa
Signing time: Thu 01 Oct 2026 16:04:56 +0000
ROA not before: Thu 01 Oct 2026 16:04:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 191.44.94.0/24 maxlen: 24
201.4.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:36:34:35:19:8b:97:a0:5d:fb:10:c4:5e:c1:6a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 1 16:04:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7801236d3b37582ad937ad8527c40d443ae85784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:1c:9d:35:ef:16:ac:d0:b8:8e:fd:eb:62:
89:03:32:8a:3d:19:56:38:c3:33:c8:b6:01:17:e7:
f0:02:61:99:e5:aa:a1:e7:98:90:43:61:d8:f7:ca:
fa:dd:f8:8a:17:cc:f2:3e:34:82:5b:18:35:1f:06:
b7:25:06:dc:1d:9a:6b:1d:d0:5d:cb:c0:39:0b:6d:
d3:b3:66:a5:aa:2c:c7:f9:69:b7:55:a0:4b:58:30:
1e:f3:48:fb:40:22:8f:02:53:9e:f2:88:c0:ab:2b:
a8:42:3d:cf:0b:3d:cd:07:f5:b0:d7:f7:42:7b:59:
74:55:1f:49:f4:f3:be:02:4c:71:12:7a:17:71:ff:
66:f9:56:b9:d2:4f:db:d9:f4:f4:62:ee:43:ea:e7:
07:fd:a1:66:12:dd:a9:44:6a:bf:8e:01:60:e6:8a:
1e:76:a9:ae:43:25:7c:59:07:fd:2a:b1:ed:3d:ae:
1f:9e:0c:61:88:19:e5:79:15:1c:b8:03:7d:ee:f2:
37:85:fd:9f:16:7f:a8:51:92:9d:2c:94:04:70:ca:
2c:e5:5c:b1:64:9f:27:92:51:80:b9:c0:2a:b4:bd:
4c:8d:f5:f3:63:81:76:51:06:34:95:7f:89:23:cd:
78:4f:3c:92:f7:fb:fa:68:cc:35:ad:84:10:c7:ed:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:23:6D:3B:37:58:2A:D9:37:AD:85:27:C4:0D:44:3A:E8:57:84
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/eAEjbTs3WCrZN62FJ8QNRDroV4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.94.0/24
201.4.73.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:8e:23:9b:38:9c:b7:1c:c4:6d:de:db:be:3f:d3:25:de:
55:cf:8f:7f:15:af:f7:4c:0d:10:ac:39:50:4e:dd:ab:c2:04:
13:0a:ea:ae:08:9f:b3:bb:01:ef:cc:3e:80:e1:b3:08:96:20:
0d:90:83:1a:5e:0c:66:65:9a:81:b6:ca:74:8f:ee:5b:2a:d9:
87:78:f1:a4:73:c5:f3:85:8c:08:96:af:46:ce:f6:66:77:b8:
46:77:36:f5:b4:2b:d8:ef:da:4b:92:fd:bc:b3:ec:68:36:a1:
49:d3:46:22:4d:19:54:a9:65:a6:17:87:9c:4c:ff:53:61:17:
1e:9d:05:22:2d:08:62:04:73:3b:59:da:9d:18:7f:93:41:dd:
0b:f9:ed:ee:ba:71:94:ee:91:35:b9:12:15:e3:8c:f0:b6:85:
dd:b1:af:32:f3:a1:69:4e:1c:3f:5c:fb:79:a4:bc:8c:f5:21:
e4:a8:96:94:7a:7a:20:a4:38:93:d5:31:46:c1:76:34:66:12:
40:b7:eb:af:7b:54:d9:6b:e7:6b:99:1c:5a:aa:ac:1e:d7:81:
84:02:56:74:3e:e5:42:a7:2e:df:d1:38:a1:39:d2:d3:17:39:
5b:26:d9:f4:87:0e:35:82:4e:5d:e0:bc:cb:ec:1c:da:dc:24:
ee:23:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:57:22 2026 by rpki-client