Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/HsCVKKjD5XsGJNbww6u4KL9dwZM.roa
File: HsCVKKjD5XsGJNbww6u4KL9dwZM.roa (raw, json)
Hash identifier: 3M5kednkV/Bpc4meaa5CCYnCsbM/CaiGU0hZ88NunW0=
Subject key identifier: 1E:C0:95:28:A8:C3:E5:7B:06:24:D6:F0:C3:AB:B8:28:BF:5D:C1:93
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A0C97907C46E1CEFD001FD5318564C611A
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/HsCVKKjD5XsGJNbww6u4KL9dwZM.roa
Signing time: Tue 22 Sep 2026 14:15:47 +0000
ROA not before: Tue 22 Sep 2026 14:15:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219181
IP address blocks: 194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:79:07:c4:6e:1c:ef:d0:01:fd:53:18:56:4c:61:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Sep 22 14:15:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ec09528a8c3e57b0624d6f0c3abb828bf5dc193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:f7:13:26:62:f3:d0:72:48:55:e3:26:cc:
be:66:da:55:a8:a9:dc:93:25:be:0f:5c:ba:ed:38:
8d:e6:4f:7b:5b:95:47:e4:03:70:70:ce:06:15:d8:
f4:61:ff:a0:aa:af:6f:89:34:60:08:1c:96:b7:0c:
fa:ee:89:42:c8:89:0d:cd:6f:d6:61:19:26:e4:01:
68:78:26:a8:af:c6:13:75:12:a8:e7:16:51:62:12:
29:82:83:0e:04:c3:ae:c9:55:8f:cc:af:37:a7:66:
87:62:6e:96:4a:42:0c:6f:aa:34:56:dd:a5:ad:7b:
05:0f:ef:c2:ca:5c:63:e5:e2:c7:70:7c:a4:1d:89:
54:d2:34:10:31:8c:c1:12:07:16:05:0c:15:9b:45:
5d:fa:a2:60:92:d0:ea:76:a4:d2:d6:95:ab:ad:2a:
b4:e5:2c:82:64:93:ad:ac:98:11:89:c5:1e:23:04:
6a:ea:61:99:ca:b9:fb:19:0f:e0:33:2f:a7:02:b8:
fb:77:33:f1:6e:6f:ac:91:43:d1:d1:8d:11:39:27:
6a:3b:ff:07:5e:f5:51:b6:47:71:2b:90:a8:b2:72:
bf:17:c6:bc:03:8d:95:1a:e8:6c:2c:d4:27:37:ba:
5f:92:e2:98:b5:2c:5d:66:d2:be:a3:f3:d9:8e:d4:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:95:28:A8:C3:E5:7B:06:24:D6:F0:C3:AB:B8:28:BF:5D:C1:93
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/HsCVKKjD5XsGJNbww6u4KL9dwZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:30:34:48:ad:6d:d9:60:83:e5:77:73:d9:6d:15:65:1c:ea:
91:af:ae:95:81:d7:0d:e4:c5:5a:db:1c:09:5e:73:74:72:d2:
b3:8e:7a:da:f9:ed:d4:6c:0b:c3:0a:c8:6a:98:48:12:35:0e:
1c:5b:67:b4:79:6d:c4:cc:b8:f8:ff:09:bb:e5:26:75:f1:01:
a7:95:de:84:a6:f2:50:43:6c:3a:08:88:56:5f:d3:ce:83:4e:
69:bb:3e:a3:6d:07:04:c2:55:9d:dd:17:81:0b:02:47:79:76:
01:1c:00:26:1e:a3:c9:bf:8b:f5:ae:63:20:cb:8f:1a:e9:0e:
f6:0b:b5:45:a2:d7:f8:34:29:b7:2c:61:2a:7b:5f:57:ef:90:
6f:18:0f:c1:0f:e2:89:99:18:78:90:a5:9a:80:ba:63:5b:86:
ce:d0:ef:16:9a:a2:6a:92:cf:11:59:fb:90:2a:a7:7d:34:2c:
06:80:71:c8:0f:69:cb:21:41:29:49:c0:2a:f8:44:45:e8:a0:
f6:0c:32:fd:67:c4:f5:b9:82:af:4e:89:11:fc:c1:7a:c3:76:
8f:1d:9b:38:69:7c:c3:76:b1:f0:86:83:ed:c8:5f:c6:17:ce:
78:b2:ea:cb:20:de:2d:70:ea:0d:03:f2:e5:3d:16:a7:42:e9:
d1:d3:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:16:47 2026 by rpki-client