Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HCF-NZlTN9-aByVxCdwOKH69lRM.roa
File: HCF-NZlTN9-aByVxCdwOKH69lRM.roa (raw, json)
Hash identifier: AImQWUkXPFl7nZYg0I+tg03TaSHkyW5jAQOQfk+rMH0=
Subject key identifier: 1C:21:7E:35:99:53:37:DF:9A:07:25:71:09:DC:0E:28:7E:BD:95:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C291BF489699E3A03672B6DEBBA5B243E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HCF-NZlTN9-aByVxCdwOKH69lRM.roa
Signing time: Wed 04 Feb 2026 14:43:43 +0000
ROA not before: Wed 04 Feb 2026 14:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 163.5.12.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:1b:f4:89:69:9e:3a:03:67:2b:6d:eb:ba:5b:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 4 14:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c217e35995337df9a07257109dc0e287ebd9513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:3e:40:90:36:4d:f2:93:11:b4:97:e0:48:
1c:14:5b:12:7b:19:fe:67:2f:ab:39:71:6e:82:a2:
4e:c1:89:3b:a6:5c:6d:d2:d0:81:07:7f:e5:69:4f:
42:df:e8:74:55:24:9f:cb:08:c9:05:3e:30:bd:8a:
f7:71:ea:8d:42:ac:42:3f:7c:2a:bd:d9:ad:c9:ba:
23:93:f8:e0:d8:53:65:44:2a:c0:4d:63:68:57:60:
96:da:4c:6b:b5:b7:d4:16:4e:08:f9:94:4e:34:9f:
4f:31:ad:1a:68:6a:06:a9:d7:c4:48:cb:4c:fc:ff:
aa:09:ba:e0:34:97:41:ef:80:dd:53:48:71:b8:f7:
ab:6a:41:8d:fa:37:ce:a7:09:65:dd:f6:5a:78:9e:
57:da:4f:fd:1e:00:26:99:30:8f:10:3a:89:1c:8c:
e9:37:b5:0c:cd:a8:bc:9c:a8:71:cb:c0:d5:f4:46:
8d:11:9c:0d:f8:67:c3:5d:33:2c:41:b2:3f:99:18:
6e:0b:30:4b:77:fb:c0:5d:41:f7:9f:f9:e5:c3:27:
25:25:a7:a5:c6:0e:c1:1b:ce:d6:23:82:59:31:50:
88:14:f5:44:cc:b6:44:fc:38:27:3e:fd:56:97:55:
04:14:f5:ec:9a:1d:67:14:a3:bc:55:3b:f4:0a:ef:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:7E:35:99:53:37:DF:9A:07:25:71:09:DC:0E:28:7E:BD:95:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HCF-NZlTN9-aByVxCdwOKH69lRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.12.0/24
163.5.75.0/24
163.5.78.0/24
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f0:ad:45:30:61:fa:ee:32:f2:3c:5d:ce:05:b6:fb:ee:35:
a2:e4:0d:0e:b9:fb:99:fd:82:be:c2:27:c6:c6:07:94:3b:5a:
d6:e4:f4:3d:ac:9d:c4:a8:83:ac:ac:04:02:c2:c9:df:99:ee:
e8:4e:8c:61:e7:7c:db:45:4d:10:9e:c7:9f:85:e0:2c:66:30:
bb:e5:10:9a:c7:b7:08:2d:64:2c:87:39:5c:b9:c7:8d:6c:d4:
c6:a2:3a:99:19:a0:2d:b2:2d:42:42:40:84:84:4c:6f:7d:37:
8b:d4:84:d2:f2:cf:de:c7:58:17:05:21:2d:95:08:8b:c6:a4:
59:ec:cf:2e:79:75:6f:15:b2:81:b7:d3:38:ff:24:a0:3d:47:
b7:46:4a:35:1b:06:02:c1:89:f9:ad:61:ae:ee:ef:dd:80:a9:
a7:cb:de:7f:d8:3b:fa:cb:19:1c:35:d0:8c:1a:eb:06:68:4f:
66:74:04:68:a0:61:4d:1b:5a:f7:41:86:0f:b5:3e:e9:97:ca:
80:1f:66:53:e7:6e:57:bb:4c:48:7b:df:60:04:a3:d1:c2:2a:
be:d3:1d:17:b2:c7:77:65:5e:40:89:66:b5:e2:f0:30:e2:c2:
1d:b2:8b:92:8f:c8:ce:92:36:2e:7d:35:ae:35:f8:01:f2:4c:
05:f3:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:14 2026 by rpki-client