Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/HYskSlnFFnMGNI10Uw104dCcvuE.roa
File: HYskSlnFFnMGNI10Uw104dCcvuE.roa (raw, json)
Hash identifier: XKJ9awBieOSrdMNdzhx1JpF/kxXhAcJ85Wzb/jM8VwM=
Subject key identifier: 1D:8B:24:4A:59:C5:16:73:06:34:8D:74:53:0D:74:E1:D0:9C:BE:E1
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019C44D59140331BD6E4002BCB6A8BD8C0F3
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/HYskSlnFFnMGNI10Uw104dCcvuE.roa
Signing time: Mon 09 Feb 2026 23:56:12 +0000
ROA not before: Mon 09 Feb 2026 23:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.159.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d5:91:40:33:1b:d6:e4:00:2b:cb:6a:8b:d8:c0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Feb 9 23:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d8b244a59c5167306348d74530d74e1d09cbee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:06:cf:ea:64:92:d8:17:d5:2b:d2:f2:75:
dc:f7:98:0c:45:a8:a1:84:3c:af:ec:47:a6:6b:c7:
1d:d9:71:22:6f:fe:16:68:66:ec:7f:78:29:a3:3e:
22:fc:79:39:01:fa:f9:3a:7e:7e:75:fa:3e:ee:25:
59:bc:79:28:57:58:8f:8a:ee:0c:13:eb:66:3a:a0:
00:2a:27:e3:43:62:21:06:7b:ef:ca:f6:23:58:28:
48:56:4c:94:41:07:0e:1e:9a:f1:31:ec:09:ce:6f:
fd:a9:99:5c:39:03:ea:6f:8d:ce:f5:88:05:fa:e7:
d4:17:e9:c3:16:c3:3a:aa:af:cc:ee:f0:8e:e4:ca:
8a:92:52:fe:3f:bb:8c:cd:6d:60:02:23:6b:a1:f2:
2a:e5:39:7a:7e:54:7f:99:f2:84:b8:9a:7e:ed:97:
55:02:2d:98:23:2b:b2:ab:cf:b0:7c:fe:d1:00:1b:
91:4a:98:d6:75:d3:d9:fd:91:36:bd:0f:4a:2b:0e:
e3:b6:09:75:01:dc:52:cf:32:e4:11:d1:cb:01:cf:
1f:7e:78:29:11:14:35:16:13:60:03:85:40:f2:64:
11:35:42:50:d5:26:0f:91:d2:cc:86:fc:39:67:a4:
ef:d8:3a:2d:18:3c:fd:cc:b2:13:7d:43:41:1a:44:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8B:24:4A:59:C5:16:73:06:34:8D:74:53:0D:74:E1:D0:9C:BE:E1
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/HYskSlnFFnMGNI10Uw104dCcvuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.12.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b1:e6:ff:ec:24:81:bb:a3:66:17:5f:6b:d9:a7:2c:9d:c3:
3e:df:26:c8:67:ae:8d:32:63:93:12:06:87:f7:24:eb:4c:62:
63:1d:59:c2:90:55:58:6f:66:d1:56:67:3a:76:38:2a:7d:b5:
bf:68:70:4b:84:44:bb:dc:cc:9b:c4:73:cb:7c:84:e3:7a:c0:
5f:bf:01:2c:27:6e:7f:f5:0c:d6:76:66:de:d3:7b:e9:6f:60:
76:b3:27:35:81:52:c9:f6:85:2b:0f:8d:d0:c1:f7:23:f4:da:
70:8a:e6:73:17:50:9f:63:38:f9:28:fe:ec:39:83:1d:91:71:
87:4c:b1:b6:d8:fb:8c:51:bd:16:dd:82:ee:9a:b6:30:b0:54:
2d:de:16:ae:6c:ca:b7:25:ef:42:2b:48:31:2c:b1:39:53:25:
85:f7:f6:12:cf:03:6e:a7:92:5a:9a:05:93:4a:9e:79:3f:e4:
b4:8f:92:12:ef:02:ee:e5:82:c0:45:93:3f:e1:90:5b:da:6a:
1c:01:dc:96:82:e7:ac:ed:4b:26:f4:b6:bb:19:19:ac:56:0a:
9b:c3:50:ec:dd:f2:e7:5c:d1:4c:90:04:4a:64:c5:e9:fd:42:
33:50:51:65:93:6e:a3:00:b3:d7:46:62:b6:74:b5:7d:c8:64:
f5:b2:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:08 2026 by rpki-client