Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/HTjOyBRINQBm0okCSLuO66xI_w8.roa
File: HTjOyBRINQBm0okCSLuO66xI_w8.roa (raw, json)
Hash identifier: 6p885cXWOm9db/xnK1zTb+55w01eehM5SlzOIIvWB9w=
Subject key identifier: 1D:38:CE:C8:14:48:35:00:66:D2:89:02:48:BB:8E:EB:AC:48:FF:0F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019D907DDAA00A140C9157105D24A94AFCD1
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/HTjOyBRINQBm0okCSLuO66xI_w8.roa
Signing time: Wed 15 Apr 2026 09:34:20 +0000
ROA not before: Wed 15 Apr 2026 09:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213678
IP address blocks: 193.192.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:7d:da:a0:0a:14:0c:91:57:10:5d:24:a9:4a:fc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Apr 15 09:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d38cec81448350066d2890248bb8eebac48ff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:a5:64:dc:80:0e:56:79:80:8f:e2:a1:fc:
b7:48:06:3b:de:c9:d3:65:fc:4e:cf:15:ba:1e:17:
89:0a:7c:09:e3:16:56:5f:35:a0:5f:09:e6:35:55:
b2:85:2c:73:da:39:db:69:e3:e8:5e:fc:4f:ac:66:
a7:ff:b6:5b:79:be:fa:5f:1b:86:b2:4c:e8:b5:04:
5f:11:b9:b0:3f:b4:b4:0d:68:e2:9b:b0:5a:76:c4:
f8:a5:a7:e6:71:0d:88:99:15:f0:0a:8a:5b:33:48:
bc:92:c0:ad:a9:61:ac:75:80:d3:43:34:2f:01:10:
09:57:57:34:63:8c:44:3e:33:49:ff:60:0f:38:2a:
d0:33:80:47:1f:ea:42:24:e7:87:60:6c:67:eb:04:
e3:83:d2:f7:3a:d5:6e:99:be:e0:9a:5a:89:a2:c7:
01:77:59:73:cf:86:25:e2:90:c6:d9:ec:e6:8c:ef:
22:23:da:c7:94:85:4d:54:9a:d6:dc:9b:40:69:4c:
83:a4:79:f4:de:1b:a1:61:70:b9:8a:9e:6c:de:34:
66:81:f9:b3:dd:cc:18:91:e0:ad:bb:9e:98:5e:70:
b1:da:f6:cb:c6:ae:2a:13:c0:2d:22:cb:7b:fc:ab:
2d:5c:13:33:6c:a2:02:7a:06:a3:1a:4e:56:51:74:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:38:CE:C8:14:48:35:00:66:D2:89:02:48:BB:8E:EB:AC:48:FF:0F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/HTjOyBRINQBm0okCSLuO66xI_w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.179.0/24
Signature Algorithm: sha256WithRSAEncryption
12:27:3e:ac:7e:d8:7d:2f:38:c6:0f:47:bb:6f:d5:35:eb:7c:
24:13:68:2f:5a:03:62:f8:db:e7:a6:3f:c9:8a:48:60:b4:4a:
6e:1e:20:ec:b0:e6:48:ab:aa:15:24:84:28:1e:a8:be:2a:9a:
b8:9d:ec:be:70:b2:ae:22:05:8b:bd:73:84:ae:c2:47:4b:6e:
11:1f:d3:95:bc:13:3f:7b:f5:f5:13:db:41:91:c0:b0:5c:0d:
8e:58:6a:a7:53:b3:cb:23:f9:bd:41:a5:48:7d:22:a3:7f:60:
ae:f7:c5:ab:6c:55:44:7d:cd:29:03:a5:23:70:68:ff:49:15:
3e:b6:da:cf:44:f0:ff:5b:1d:05:21:ce:88:2e:0e:72:0b:56:
89:bd:b1:df:73:17:57:47:cd:7a:dc:67:a1:20:aa:80:0e:00:
e7:c8:56:5f:25:d5:aa:c9:f8:8f:9c:46:c1:35:8d:83:72:d6:
8b:17:15:26:2e:9e:55:23:f9:ee:98:58:56:9d:89:6b:9c:aa:
98:61:db:b5:41:4b:56:ae:bf:65:cc:d6:8d:ff:a3:d8:46:9e:
1a:94:ce:c1:9a:5f:c0:af:1d:ea:7b:3a:51:82:bb:b5:ec:02:
bc:fe:12:5f:98:2a:fc:86:92:2b:f3:47:a1:76:40:16:28:6a:
5d:85:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:40 2026 by rpki-client