Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa
File: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (raw, json)
Hash identifier: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=
Subject key identifier: 85:66:18:61:33:D7:E4:15:BE:62:54:09:3F:B6:BB:CD:20:52:9C:0B
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019EB2A7F313E6F3BC0B89500576ED251F2B
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa
Signing time: Wed 10 Jun 2026 17:50:11 +0000
ROA not before: Wed 10 Jun 2026 17:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26496
IP address blocks: 185.93.228.0/24 maxlen: 24
2a02:fe81::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:a7:f3:13:e6:f3:bc:0b:89:50:05:76:ed:25:1f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jun 10 17:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8566186133d7e415be6254093fb6bbcd20529c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:00:5c:be:e9:11:84:ab:5c:3a:46:4c:80:
7f:ed:ad:c7:73:98:79:b7:52:bd:20:5b:20:dc:6c:
30:3c:27:ff:24:82:7c:5f:a9:8a:46:7e:d8:e7:48:
49:42:70:65:8b:d2:b3:53:fb:e3:5b:f3:90:19:a8:
b4:a5:62:57:42:e1:85:21:61:0f:cd:c6:23:d4:7f:
15:d6:17:29:78:6d:52:23:5b:44:67:80:dc:f0:16:
6c:87:cc:1d:c5:a3:85:f0:6b:83:8b:d5:d9:31:73:
28:a3:d0:7b:17:80:52:68:f3:eb:76:d5:d5:cb:c3:
98:fd:34:4b:e5:37:d8:89:2b:6d:a3:65:20:33:83:
9b:e4:8f:d3:f4:42:6f:8b:28:a3:6f:4c:d5:5f:0e:
f2:9f:70:07:db:70:e6:c0:96:54:67:a6:a5:b2:83:
68:24:72:c3:52:f9:2d:d0:2b:d1:29:25:eb:15:cc:
24:0e:6d:de:46:af:0c:16:0c:d0:71:49:d4:92:4f:
6d:42:a9:12:d0:82:6f:7b:ae:fe:6a:a4:5e:9c:f6:
d4:89:b8:d5:c0:b8:5b:d6:fd:89:f8:eb:9d:4e:a0:
e3:31:40:eb:cf:f4:e9:d2:f0:d1:bc:fe:3c:63:dd:
97:71:61:1c:84:31:09:7b:3c:8c:62:69:9d:91:d9:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:18:61:33:D7:E4:15:BE:62:54:09:3F:B6:BB:CD:20:52:9C:0B
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.228.0/24
IPv6:
2a02:fe81::/45
Signature Algorithm: sha256WithRSAEncryption
7c:5f:c7:7b:45:18:2b:f3:74:15:c2:48:5e:0e:e7:34:b7:cd:
82:2f:25:1d:b9:54:c1:38:3f:29:a2:20:74:4c:aa:cf:01:e9:
47:f2:6c:08:2a:2a:fc:a4:18:45:f6:68:0a:a4:86:d8:16:95:
61:79:4c:9b:1c:5e:33:91:d6:2f:94:9b:34:08:07:61:de:a9:
43:81:ab:a2:b8:06:87:d7:99:70:1c:81:78:fa:0a:61:ea:a2:
df:60:06:cc:53:3a:47:ec:d3:a3:30:2b:e0:29:44:54:94:36:
8d:06:da:7d:42:fa:24:d1:e0:d2:4e:d3:2e:55:38:db:6d:a5:
13:98:53:22:c9:cd:d2:86:e8:b3:8c:04:36:b1:50:03:f7:5c:
f1:9c:7d:21:98:e6:1a:e6:82:f0:27:94:50:92:13:9d:0d:1f:
f9:c0:48:bb:60:4a:c8:27:fa:16:af:58:67:9c:5e:b8:8c:e6:
c8:69:c4:90:ce:b2:4a:04:22:6f:70:e2:ec:86:ed:89:45:6d:
84:70:8d:3d:4b:ea:2d:53:a1:fd:0a:2f:b2:ad:f9:df:e3:a7:
f3:79:fb:d7:8c:70:7e:54:3b:8f:fc:b4:d2:fe:50:25:ed:7b:
ea:e3:f6:22:42:48:af:c2:0d:2f:ea:c3:ad:85:47:fd:e9:45:
1c:16:ab:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:16 2026 by rpki-client