Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HkpcaE9lt0B_RLdE5vweKL-DJvs.roa
File: HkpcaE9lt0B_RLdE5vweKL-DJvs.roa (raw, json)
Hash identifier: 1VEQWb4Oarlzr0myV4wgk86M2+LevIe6u4/jK19eMRY=
Subject key identifier: 1E:4A:5C:68:4F:65:B7:40:7F:44:B7:44:E6:FC:1E:28:BF:83:26:FB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A1154C56A5A4DF0DAB15B4B216A74E776C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HkpcaE9lt0B_RLdE5vweKL-DJvs.roa
Signing time: Wed 07 Oct 2026 07:38:06 +0000
ROA not before: Wed 07 Oct 2026 07:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 79.175.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:4c:56:a5:a4:df:0d:ab:15:b4:b2:16:a7:4e:77:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 7 07:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e4a5c684f65b7407f44b744e6fc1e28bf8326fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:db:e4:2d:5f:ff:62:df:9e:f3:c8:70:30:84:
2f:a7:ae:08:19:48:67:a3:59:bb:33:6b:ea:ed:0f:
02:a3:a9:ef:7e:cc:49:88:e7:8e:5f:00:63:f1:d3:
f2:0a:b2:89:33:67:30:9c:50:55:cd:f3:c5:d8:da:
5b:7b:9e:d8:0c:0f:e2:03:f0:d2:14:00:7f:45:91:
6a:44:56:96:0e:e5:66:de:8e:60:4f:3b:6d:25:2b:
0d:8e:eb:27:77:74:cb:f9:2d:41:6a:68:a1:b2:2a:
19:41:18:4a:d0:1f:ef:61:25:d5:c7:8a:60:19:e1:
14:3f:fe:2c:f4:41:c2:89:f7:f9:06:90:2d:dc:06:
c0:8b:41:d9:0f:f1:f8:be:09:10:88:80:37:bd:a5:
c0:db:d6:a1:56:c1:af:05:61:e6:a1:6f:2d:21:f1:
03:b8:f8:b8:c4:b7:1d:43:ce:fa:5a:0f:9e:83:e8:
30:22:ce:c9:c8:bc:93:9f:31:00:b0:68:79:80:b9:
7c:8f:e7:c3:90:44:15:6c:01:a4:e5:82:e4:69:f2:
d6:b0:21:87:42:32:92:2b:bb:67:44:e2:c6:dd:22:
e2:0a:32:83:c9:69:59:14:63:9f:e3:f4:a5:34:bc:
b9:59:ec:71:13:1a:e4:8b:ec:cf:61:ff:25:de:18:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:5C:68:4F:65:B7:40:7F:44:B7:44:E6:FC:1E:28:BF:83:26:FB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HkpcaE9lt0B_RLdE5vweKL-DJvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ee:86:25:f9:b2:86:35:82:13:f2:92:b2:a6:aa:bf:c6:0f:
e8:7f:ea:16:22:8a:45:5d:90:51:a7:e7:85:53:65:83:79:4c:
ce:cd:a4:fd:cd:0c:5f:dd:80:ba:fa:f7:54:3f:16:05:cf:3a:
53:cc:24:d9:9b:ff:0e:c7:4e:77:a9:a1:2e:03:93:b4:67:d7:
19:8e:aa:c8:30:f5:45:0d:c7:97:2c:68:0d:99:7d:1d:f6:94:
02:00:ea:73:ec:ac:a3:ad:e4:e4:c4:5f:89:43:1f:fe:de:54:
47:98:2d:71:5b:97:fb:e2:cb:0c:2d:67:a9:57:4c:25:5c:da:
8a:49:00:f5:46:23:69:b2:78:df:01:f5:89:3d:76:37:b6:4e:
b3:42:93:3a:1b:e2:74:e5:60:78:25:f9:bd:1c:61:ef:d7:09:
d0:0d:cb:7b:e8:2e:75:59:e7:31:13:b4:7a:8b:ff:18:6f:71:
62:d1:91:36:7b:d3:ac:d1:28:ae:96:44:ca:ed:87:43:30:10:
6b:41:9a:e3:59:62:7f:10:e0:8c:c1:54:f8:2c:ad:8d:a3:4c:
a9:86:7f:71:65:bb:71:b5:63:97:fc:99:81:91:fa:f8:08:f1:
fc:c9:10:f0:7e:52:a5:13:0d:7b:d9:2c:b3:0f:60:6f:10:a3:
4c:1d:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:50 2026 by rpki-client