Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/hipI7kuhHGagLEQaTk386Y4VQzE.roa
File: hipI7kuhHGagLEQaTk386Y4VQzE.roa (raw, json)
Hash identifier: toft6Vnd44UVq1KAnZBMB9tIie+P6wNnrRpX3Oq4kG4=
Subject key identifier: 86:2A:48:EE:4B:A1:1C:66:A0:2C:44:1A:4E:4D:FC:E9:8E:15:43:31
Certificate issuer: /CN=4d362059c7936b5420ab3338b9623361daedb0cd
Certificate serial: 01A0A00247C15C74B4D607F77D474BB39863
Authority key identifier: 4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/hipI7kuhHGagLEQaTk386Y4VQzE.roa
Signing time: Mon 14 Sep 2026 13:01:39 +0000
ROA not before: Mon 14 Sep 2026 13:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212369
IP address blocks: 2001:678:e3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:02:47:c1:5c:74:b4:d6:07:f7:7d:47:4b:b3:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d362059c7936b5420ab3338b9623361daedb0cd
Validity
Not Before: Sep 14 13:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=862a48ee4ba11c66a02c441a4e4dfce98e154331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:9e:1a:8c:f8:89:a0:e0:74:f4:cb:70:cc:
fb:29:97:46:df:61:21:d5:82:8d:b7:4c:f5:12:fe:
08:e8:cd:42:40:92:1b:52:6f:59:1c:3e:4b:2d:84:
89:ba:7d:96:26:b1:dd:fc:b1:7f:97:71:48:1a:a2:
ec:71:a8:f8:f0:36:e7:6c:fa:f0:1c:b6:a3:11:10:
59:7e:39:e6:82:94:79:bd:cf:6b:b5:4e:ab:4f:6f:
a8:97:1a:29:9f:cf:e6:c7:23:1d:0d:35:33:ac:0d:
eb:48:53:7a:db:58:a2:17:12:6a:f4:5a:21:8b:a7:
a0:3d:19:4e:ad:9c:0b:6f:01:a1:30:95:47:f8:8b:
23:c9:2b:cf:95:a2:4f:84:95:81:f8:0b:b6:79:22:
5e:0b:3a:6f:2f:80:9d:97:66:70:43:7b:6c:7d:dd:
04:d2:ba:21:d9:49:29:49:9a:7b:09:cb:c7:4d:e9:
91:e4:e7:ff:8f:55:5c:cf:43:2b:98:fa:ac:4f:fc:
e3:dd:bf:5a:d9:0f:d3:e2:20:cf:d2:6d:fb:0e:51:
46:43:da:56:0a:22:34:c9:2c:07:2c:c1:a8:9e:d0:
3e:6f:49:6a:de:b8:46:ab:f0:02:2e:77:bc:77:ef:
13:59:f4:d8:b7:cb:8a:b4:3f:d3:eb:6b:6a:bc:8b:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2A:48:EE:4B:A1:1C:66:A0:2C:44:1A:4E:4D:FC:E9:8E:15:43:31
X509v3 Authority Key Identifier:
keyid:4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/hipI7kuhHGagLEQaTk386Y4VQzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e3c::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d6:c5:fd:f9:14:71:97:26:4c:44:e3:20:76:b3:1c:9e:bd:
cd:de:5e:98:5a:58:80:ac:37:ae:55:17:7f:34:35:09:1f:de:
35:7c:d0:3f:2f:cc:5e:9a:59:87:cd:9f:10:40:a8:b8:4f:3b:
85:77:e9:2c:3d:52:d3:5b:73:ed:8c:e4:de:35:92:51:b9:54:
38:f0:25:1b:7d:58:e8:ff:1b:5d:89:fa:69:fb:60:83:ce:35:
7b:a5:c7:cc:d4:83:da:8e:6c:57:e9:cc:31:e4:71:b6:e7:1f:
27:89:38:c8:cb:6e:4d:0b:bf:b6:3b:95:c1:f2:4b:d8:f1:8b:
07:e1:cd:3a:0b:da:2a:5c:3d:47:6f:1d:41:90:6f:6a:bf:ea:
93:c9:6e:fd:a3:ed:21:8c:cd:07:4d:0c:32:fb:8f:f0:b3:74:
be:df:e8:f9:36:cb:e3:65:47:4b:27:17:18:65:ee:89:b7:fd:
46:ff:54:22:08:27:f0:5f:2a:3c:a6:64:89:0a:d3:30:93:13:
5e:e9:d3:90:4f:9c:6a:93:ef:7f:9d:51:fd:79:ef:30:d1:3d:
dc:01:7f:1b:9a:ff:9f:3f:75:1b:3e:18:cb:d0:4e:04:56:27:
d6:6a:cc:bf:46:62:68:88:66:c5:45:e6:d6:2c:e8:7a:37:bf:
16:b5:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:04 2026 by rpki-client