Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ls9EpRGVkf9uWGqpy9PWsdJvAig.roa
File: ls9EpRGVkf9uWGqpy9PWsdJvAig.roa (raw, json)
Hash identifier: /+rx7O9bDvus40VW4OOg2la7Y90XX0v92m6a9U2nDEM=
Subject key identifier: 96:CF:44:A5:11:95:91:FF:6E:58:6A:A9:CB:D3:D6:B1:D2:6F:02:28
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EAA50064A0128F548A1E92F544082B9F8
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ls9EpRGVkf9uWGqpy9PWsdJvAig.roa
Signing time: Tue 09 Jun 2026 02:57:11 +0000
ROA not before: Tue 09 Jun 2026 02:57:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 191.44.69.0/24 maxlen: 24
191.44.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:50:06:4a:01:28:f5:48:a1:e9:2f:54:40:82:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 9 02:57:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96cf44a5119591ff6e586aa9cbd3d6b1d26f0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:d2:90:2d:71:32:4b:30:88:b4:ca:32:87:
cf:bb:c5:d9:0f:78:0c:10:49:42:8a:c7:32:b3:23:
1a:cf:c3:0c:5c:a5:aa:dc:e9:7c:37:eb:60:79:4f:
60:e7:bc:c4:63:48:98:af:d8:55:40:63:4a:93:bd:
85:ef:cd:29:41:b2:ea:02:5c:87:6b:2c:14:56:32:
ed:b0:04:d6:36:48:99:ec:cc:fe:bd:06:d8:67:b5:
b8:1c:57:ba:01:56:9e:f7:5a:c2:ce:a8:e7:43:8d:
a8:81:35:5b:f5:9d:64:3f:f3:99:99:d6:70:ab:9c:
74:ad:2b:65:f5:b6:73:43:fd:ca:6a:00:78:b1:94:
37:91:c3:ea:14:a1:1d:91:25:d0:a5:75:b9:28:1c:
48:bd:87:60:44:60:de:6d:5d:ce:43:63:b7:d2:87:
73:08:b6:67:02:82:93:00:17:b6:41:28:b2:5d:49:
0a:ee:e5:12:23:b0:4b:be:d0:3d:2e:25:fe:6e:30:
ef:b8:24:d9:6f:ae:c7:38:8a:e1:af:59:f6:9e:50:
ac:3d:dd:33:83:f9:1a:d1:9e:ef:30:3e:79:3a:de:
4a:5a:c7:24:30:1f:16:14:62:a7:1f:b3:23:c2:1c:
de:2e:88:6f:fd:4c:fa:51:4a:ac:7d:d2:02:e3:2c:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CF:44:A5:11:95:91:FF:6E:58:6A:A9:CB:D3:D6:B1:D2:6F:02:28
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ls9EpRGVkf9uWGqpy9PWsdJvAig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.69.0/24
191.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:45:d6:3c:d3:7f:97:2c:eb:cf:bf:c7:32:b8:1e:71:82:2f:
7b:34:a7:a9:9a:40:b3:c6:d1:9c:50:21:d4:0b:db:d8:e4:ca:
1b:14:47:9d:fd:ca:b0:97:6e:71:c3:39:b5:f6:9a:3a:bb:fa:
0a:19:68:d9:db:6f:a6:dd:ba:f8:33:ea:45:2b:cf:a5:02:d8:
28:6c:65:56:e9:cb:2e:b8:bf:1e:9d:10:5d:af:9e:e4:ea:f5:
49:c1:65:0b:94:4e:4d:29:ac:5a:55:5a:80:e9:f0:ae:95:a7:
db:f9:e0:c1:b1:78:7e:c4:61:ae:82:e1:b1:2a:a9:31:dc:7b:
1f:7c:03:0d:9d:a0:54:d3:d5:8a:f5:ae:bd:0c:b9:9d:87:0f:
0e:a4:f6:0c:dd:7b:65:6b:d5:4a:bb:ca:8a:4e:f0:09:92:3a:
fc:a2:d5:31:28:2b:7f:a5:80:ce:dc:4b:23:6d:60:df:9c:36:
e3:15:eb:25:9f:84:09:22:50:46:ef:64:2f:98:9e:63:6f:69:
52:e1:a0:a2:26:00:56:c1:1c:76:39:d0:f3:67:23:c0:99:23:
5c:f7:f1:00:0b:bf:e4:06:70:12:d7:ea:33:e2:8e:a6:4f:09:
a7:31:b3:f2:1c:24:38:87:e1:1b:6c:43:e6:1b:a2:80:5f:97:
31:ae:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:48:02 2026 by rpki-client