Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/c-HjLKQSxtnvzyWLH_611ObuEAY.roa
File: c-HjLKQSxtnvzyWLH_611ObuEAY.roa (raw, json)
Hash identifier: H839FL+6ufvkO1eladY3YPL4NNkFY7naVOP/ppVVcpg=
Subject key identifier: 73:E1:E3:2C:A4:12:C6:D9:EF:CF:25:8B:1F:FE:B5:D4:E6:EE:10:06
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 01A0AF4ABD388500326655917D5B35E73B9D
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/c-HjLKQSxtnvzyWLH_611ObuEAY.roa
Signing time: Thu 17 Sep 2026 12:15:05 +0000
ROA not before: Thu 17 Sep 2026 12:15:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.152.114.0/23 maxlen: 23
132.243.181.0/24 maxlen: 24
132.243.182.0/23 maxlen: 24
2a03:70c1:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:4a:bd:38:85:00:32:66:55:91:7d:5b:35:e7:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Sep 17 12:15:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73e1e32ca412c6d9efcf258b1ffeb5d4e6ee1006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:8f:c2:8e:6c:d0:52:10:e1:3a:d2:71:0e:
74:ef:ed:34:d5:8e:6f:0d:23:aa:23:47:fd:56:26:
5b:59:36:a6:55:a5:09:58:8b:eb:87:12:1b:35:1e:
de:5d:d8:97:1e:a4:35:c6:29:bb:77:b8:b5:91:8a:
08:ea:c7:13:31:89:43:10:02:19:f3:6b:af:84:56:
06:62:93:b6:7b:51:b4:82:64:e7:d7:77:71:4e:fd:
7c:08:dc:38:0b:8a:6b:f8:99:be:7d:29:60:4d:78:
d9:ec:c1:07:16:94:65:7a:1e:60:18:13:69:2d:3c:
b3:75:02:3c:a5:1e:8f:e7:e1:58:df:7c:e4:d4:3c:
1e:0a:5b:0e:e0:43:78:43:e3:4b:3f:2a:fa:3c:b9:
5b:b7:5d:62:01:59:58:14:92:1c:8a:4a:03:d1:37:
8c:11:31:b8:4b:1e:8a:22:7d:a7:7b:45:36:d4:e5:
d1:b4:a4:06:40:92:bb:72:cc:60:e6:68:03:1a:eb:
29:10:21:0a:00:06:d8:6a:5d:f0:d0:95:e1:a0:0a:
bc:1e:cc:34:78:03:89:88:9e:af:db:e6:b1:45:58:
89:6b:a9:37:0a:7f:54:c1:07:f4:40:3b:7d:ac:b1:
e9:5e:8e:75:f9:78:5b:d7:a7:dc:29:88:24:a4:4d:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E1:E3:2C:A4:12:C6:D9:EF:CF:25:8B:1F:FE:B5:D4:E6:EE:10:06
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/c-HjLKQSxtnvzyWLH_611ObuEAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.114.0/23
132.243.181.0-132.243.183.255
IPv6:
2a03:70c1:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
7f:ff:4c:f2:fb:6b:dc:f2:6c:83:3e:83:fb:09:50:11:e7:23:
61:a9:f8:6f:5d:b5:3a:1c:f1:4c:dc:2c:f9:78:dc:00:ee:8c:
23:6c:0a:dd:4b:30:94:40:0b:06:eb:82:6f:66:06:a6:05:fe:
2b:5a:6f:40:a5:3d:a2:a2:f4:36:7d:d1:e0:cd:d8:9e:86:7f:
8f:87:55:93:14:46:1e:94:f7:cc:c8:c4:36:13:dc:60:2d:fd:
66:87:32:82:7d:24:11:24:8c:c9:0b:61:ce:dd:1a:c0:b4:f4:
c5:c3:53:58:0e:38:13:fc:c8:3e:4e:8b:87:85:5f:24:38:c1:
7d:a1:a2:5e:77:a3:1c:a9:ad:9a:3e:14:fd:74:68:56:a7:bc:
9f:dd:e0:bc:d9:39:a0:d8:f5:9b:19:ce:e9:68:db:1d:bf:35:
6c:82:30:59:4c:ec:e3:f7:f4:05:17:5c:1b:75:c9:a0:bf:22:
8e:fd:84:e6:6d:56:30:4b:29:27:0b:63:05:f6:06:ef:06:b1:
cb:b6:8f:86:fe:55:a0:2b:5d:69:9b:d3:d0:b7:52:3c:b0:ca:
82:c1:94:db:58:cb:40:ef:1d:ae:45:f5:6b:81:b4:87:bc:b4:
4b:bf:4f:9b:3f:6c:a7:5c:ce:2d:dc:40:3b:a5:2e:b5:03:43:
59:0d:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:36 2026 by rpki-client