Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/HKmOA4kYZLilOR3lns1zO5ipEbU.roa
File: HKmOA4kYZLilOR3lns1zO5ipEbU.roa (raw, json)
Hash identifier: Yz7lQttPSDYdbYbtexTLUwIiQDzr90HjmuYUCaHlIKw=
Subject key identifier: 1C:A9:8E:03:89:18:64:B8:A5:39:1D:E5:9E:CD:73:3B:98:A9:11:B5
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019FA96F09D50F1D116D800D15D256A31DA5
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/HKmOA4kYZLilOR3lns1zO5ipEbU.roa
Signing time: Tue 28 Jul 2026 15:54:14 +0000
ROA not before: Tue 28 Jul 2026 15:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 271793
IP address blocks: 194.30.161.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:6f:09:d5:0f:1d:11:6d:80:0d:15:d2:56:a3:1d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jul 28 15:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ca98e03891864b8a5391de59ecd733b98a911b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:72:82:87:07:9e:dd:46:1f:00:5b:0d:f6:
d8:1e:3a:91:e2:9b:0d:f2:c8:27:08:9c:3c:18:30:
a5:da:40:02:73:af:12:89:f2:f7:ee:7e:24:eb:1e:
9a:e6:7e:23:2c:25:59:e2:c2:b0:5e:b0:9b:bf:b3:
2e:f0:66:b8:44:81:2c:4f:70:df:af:64:d8:6b:b6:
f9:43:31:62:cd:90:52:3b:63:aa:48:fd:66:e5:cf:
af:4e:99:72:bd:e6:e9:09:de:12:55:f5:7e:2d:3f:
68:65:67:43:86:f2:6a:f8:de:c8:39:0e:f8:7c:bc:
4f:76:c5:23:4e:78:6d:40:b9:5b:5c:af:e3:fb:e7:
36:f5:19:87:58:56:34:6d:f3:4d:b1:2d:13:ea:7b:
f0:29:91:f6:29:10:7d:80:0b:50:65:89:cc:7e:79:
b5:28:90:cf:88:82:3d:58:2e:84:4f:64:c0:2a:a1:
15:d7:3e:6f:26:17:bc:26:7c:bd:00:31:d8:87:ff:
14:1d:bf:4b:58:1b:84:84:26:4b:60:c4:9e:35:5d:
34:90:21:3d:c8:4a:18:1e:f0:df:c6:b9:9e:07:fd:
87:f5:91:3a:d1:c7:3b:28:71:c4:c5:2a:2b:79:93:
41:f6:33:dc:d1:0e:1c:a3:e2:ce:ad:a1:0f:e6:87:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:8E:03:89:18:64:B8:A5:39:1D:E5:9E:CD:73:3B:98:A9:11:B5
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/HKmOA4kYZLilOR3lns1zO5ipEbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.161.0/24
194.30.165.0/24
Signature Algorithm: sha256WithRSAEncryption
16:dd:36:ae:16:1f:74:48:80:03:37:0f:90:11:60:e4:e3:c8:
92:9a:49:8e:6f:5b:2d:4d:b4:22:47:3a:f3:55:8b:b2:a5:0e:
74:54:11:7e:d2:19:59:3d:5e:75:29:6f:55:19:ae:52:04:37:
c5:b8:92:25:56:b0:f8:45:92:c2:e0:c0:ef:73:d7:18:5c:77:
81:8a:fd:09:de:da:df:ce:76:32:73:32:ee:9b:e3:fb:42:c7:
8e:74:87:3b:a9:1c:60:08:37:dc:7d:fe:df:82:d2:0a:e5:21:
a6:c8:77:cd:ec:da:fa:89:64:66:7e:5e:eb:d6:8e:0a:16:9f:
23:c2:8a:5a:06:3b:eb:bc:ad:70:80:de:ec:60:9c:a9:61:21:
58:6b:78:47:3e:53:cc:da:7b:f5:99:99:fe:f2:da:5a:4d:57:
f7:44:b2:88:b7:84:e0:f4:aa:82:71:ab:25:71:f7:9b:78:69:
0a:a1:24:2a:66:ea:9d:cf:e4:24:c8:7f:cc:63:b0:26:9c:37:
9a:6f:92:16:4a:d6:9b:ff:5c:5e:59:74:4b:35:92:61:ad:58:
67:87:28:90:fb:34:86:ee:89:ef:44:92:d5:46:89:a8:f2:cd:
65:12:a6:a6:55:34:c3:64:1f:97:88:d4:08:55:a1:c8:ef:4b:
e7:a0:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:35 2026 by rpki-client