Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/HK_qFKd2hY8FMrPVBlrUtU3ZNRc.roa
File: HK_qFKd2hY8FMrPVBlrUtU3ZNRc.roa (raw, json)
Hash identifier: s6ds8Bxas84dKP57kCmFlJVUTacHzm8AN1LOMw8xcRk=
Subject key identifier: 1C:AF:EA:14:A7:76:85:8F:05:32:B3:D5:06:5A:D4:B5:4D:D9:35:17
Certificate issuer: /CN=363392f1bc8cdfa0be3928c4f55830335884d48f
Certificate serial: 01A18A6AFD742569F7B01D6EF7526E7A5591
Authority key identifier: 36:33:92:F1:BC:8C:DF:A0:BE:39:28:C4:F5:58:30:33:58:84:D4:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjOS8byM36C-OSjE9VgwM1iE1I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/HK_qFKd2hY8FMrPVBlrUtU3ZNRc.roa
Signing time: Fri 30 Oct 2026 01:27:09 +0000
ROA not before: Fri 30 Oct 2026 01:27:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22665
IP address blocks: 149.245.253.0/24 maxlen: 24
2a04:d840::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjOS8byM36C-OSjE9VgwM1iE1I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:6a:fd:74:25:69:f7:b0:1d:6e:f7:52:6e:7a:55:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363392f1bc8cdfa0be3928c4f55830335884d48f
Validity
Not Before: Oct 30 01:27:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cafea14a776858f0532b3d5065ad4b54dd93517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:19:88:97:c1:74:ff:51:35:00:70:a7:81:
72:42:e9:96:9b:e1:4c:9f:39:12:89:f4:7e:86:2b:
8e:36:1e:3b:2c:e2:92:36:ec:2c:b4:5e:7a:11:3e:
71:3f:47:36:05:65:89:34:8e:20:2a:12:c4:40:af:
38:82:a9:fb:f0:4d:b4:cc:29:e2:37:0f:61:2c:49:
44:5f:f8:93:2d:41:f7:3f:47:3b:ec:47:6e:12:88:
52:bd:29:dd:02:c7:f2:13:d9:8c:38:62:a1:29:89:
c3:00:37:80:7f:9b:dc:18:7c:a3:15:2e:54:d1:11:
9d:6b:82:69:b5:a9:ee:b9:ea:bb:5b:8d:5d:5e:98:
a6:58:1f:e9:0f:0d:42:2c:fb:c2:f2:1d:32:a6:2b:
b3:c4:7b:c8:03:e0:0c:70:7d:bd:9d:90:6b:e6:ea:
d8:19:e9:b6:13:47:01:68:1e:66:e7:97:07:31:23:
0b:99:96:9f:48:61:fc:0c:bd:60:e8:6f:70:3f:e8:
68:3c:60:22:19:4f:1d:00:bf:ec:99:43:41:36:bd:
22:e0:f8:16:7a:4b:7b:4a:bf:34:08:69:e0:6d:37:
64:52:71:21:2c:93:f6:8c:81:08:da:43:54:01:21:
ab:77:dc:93:78:85:04:a2:f9:cd:9c:e1:d3:93:d9:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:EA:14:A7:76:85:8F:05:32:B3:D5:06:5A:D4:B5:4D:D9:35:17
X509v3 Authority Key Identifier:
keyid:36:33:92:F1:BC:8C:DF:A0:BE:39:28:C4:F5:58:30:33:58:84:D4:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjOS8byM36C-OSjE9VgwM1iE1I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/HK_qFKd2hY8FMrPVBlrUtU3ZNRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.245.253.0/24
IPv6:
2a04:d840::/30
Signature Algorithm: sha256WithRSAEncryption
27:0b:2d:93:f2:01:ef:74:d0:02:b4:16:a1:89:46:4a:07:1b:
ef:cb:9f:e6:1e:d0:73:5d:83:ec:a6:54:20:f9:46:9e:f4:8c:
34:de:23:7b:94:e9:bc:e8:bf:b9:08:91:4a:08:ff:87:5d:74:
3d:14:a3:d9:cc:25:56:24:ff:8a:da:c0:e4:97:ff:fc:9f:f8:
c0:a3:bc:91:00:9f:eb:f9:a7:f5:15:7c:5e:58:84:b9:fb:a9:
06:36:68:2b:51:96:58:8a:28:bb:8a:ab:8e:85:a8:9d:23:b7:
73:9f:ee:f6:eb:17:ec:0f:68:b0:7c:9e:e2:90:fe:08:02:45:
48:2b:2d:a9:49:df:56:50:3b:49:4a:56:79:72:48:75:ff:8f:
b0:d1:91:37:dd:0a:0f:42:55:57:f9:b1:7c:f2:81:4e:9d:23:
51:8a:9a:16:45:94:71:28:b7:4d:02:cf:17:09:56:4f:44:ba:
55:7e:da:76:89:63:4c:68:81:ba:7e:dd:da:bb:23:81:c5:72:
d3:3a:0b:6a:0a:10:d5:a2:35:4e:84:b3:d0:34:9e:23:a6:96:
14:f6:c3:1d:67:9b:14:ef:92:64:7b:d0:58:03:9f:fd:41:92:
f2:c8:6f:7c:f2:f0:72:e6:41:62:a3:70:cd:3e:de:cf:7d:f2:
c7:f6:12:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:02:06 2026 by rpki-client