Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/HivILvymqncyu4kzXVkIX7ILl5k.roa
File: HivILvymqncyu4kzXVkIX7ILl5k.roa (raw, json)
Hash identifier: v33uaraRSZDb221ZLSNj9uM/rVrGUTNVYseptwrMKOk=
Subject key identifier: 1E:2B:C8:2E:FC:A6:AA:77:32:BB:89:33:5D:59:08:5F:B2:0B:97:99
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF258DF09C34AD1A4D73109ECEFA29B
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/HivILvymqncyu4kzXVkIX7ILl5k.roa
Signing time: Thu 10 Sep 2026 20:11:27 +0000
ROA not before: Thu 10 Sep 2026 20:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f2:58:df:09:c3:4a:d1:a4:d7:31:09:ec:ef:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e2bc82efca6aa7732bb89335d59085fb20b9799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:00:e4:14:d6:82:7f:e1:b9:6b:0c:5a:df:
36:6c:21:e3:2c:a3:8e:6d:cf:83:af:c0:f5:e9:69:
52:a4:84:14:6b:56:c6:6f:fa:27:18:b7:15:35:f5:
7c:92:9a:b3:a0:65:fe:de:9e:56:39:97:30:1a:8b:
7e:e6:c1:f2:b3:e9:1a:5d:96:a4:0f:f4:0d:6b:db:
0d:2f:36:36:b2:07:8e:71:af:20:df:dc:90:3b:40:
1d:38:d3:78:3e:d2:ef:d5:0e:d8:65:90:44:72:db:
be:58:61:9b:12:ca:25:4d:6d:ee:a1:3a:58:80:d6:
25:fa:54:f7:a1:cc:af:dc:d9:72:1c:8d:61:74:7a:
a1:3a:11:87:dd:b5:d0:f0:72:bf:81:7c:0f:04:18:
08:14:15:2b:4f:94:2f:11:73:e5:92:14:41:44:70:
b6:fc:aa:93:53:ea:00:a4:46:0e:a8:07:24:b7:89:
0a:16:2e:0c:ab:ee:a7:54:0b:11:4f:66:7a:1b:b1:
8b:8f:a8:fb:ba:0b:83:c2:d0:e2:1e:86:87:3b:9a:
b7:bb:36:b6:42:dd:e1:34:a1:7c:96:72:01:89:d8:
cd:f6:f8:75:94:2c:81:b8:5d:75:4a:e0:41:1e:71:
ad:0d:34:0f:d0:51:5e:e8:5c:33:df:f8:8b:f6:89:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2B:C8:2E:FC:A6:AA:77:32:BB:89:33:5D:59:08:5F:B2:0B:97:99
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/HivILvymqncyu4kzXVkIX7ILl5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.51.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cc:27:15:ea:b8:3b:8e:b4:87:45:54:13:e2:55:f6:f7:e3:
13:96:6b:69:01:d6:ec:8a:82:1f:20:c3:54:f4:8d:93:f2:5f:
51:24:a9:e1:37:fc:55:8f:f5:4e:70:dc:b8:0d:ae:bd:e3:df:
a5:44:e6:ea:07:0c:d3:cd:c2:5e:de:38:28:8f:9a:0b:14:53:
29:60:ff:30:a0:18:db:0e:5d:7e:80:60:38:53:39:01:a3:6d:
54:81:79:3f:68:d8:c2:9e:00:14:0e:d8:9e:71:d8:a4:8e:25:
23:9e:72:dc:4c:39:da:ec:34:59:c8:fe:49:87:9f:d2:24:45:
bc:6c:dd:af:24:c0:7a:4d:c0:00:b0:f8:36:d6:3a:82:22:dd:
4f:83:f1:7e:2b:0c:91:1e:b5:41:82:c8:0c:16:10:56:9d:e1:
1e:53:94:f1:b9:0c:27:a0:9b:2d:6e:3f:97:4b:ca:15:a6:65:
df:dd:54:0b:87:92:ff:90:43:30:ab:fa:86:9f:e4:69:8b:8f:
7c:2b:bc:9e:12:77:9a:9f:56:94:de:b9:91:34:6d:e1:96:43:
3e:36:bb:69:16:82:ad:9a:39:33:95:0a:15:97:13:60:2f:18:
7c:6c:46:c6:41:16:1e:b3:b7:ca:78:24:d5:10:4a:f0:e7:74:
98:80:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:27:27 2026 by rpki-client