Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HkDrKLlRKuk9UUrqVvsPOnzNecg.roa
File: HkDrKLlRKuk9UUrqVvsPOnzNecg.roa (raw, json)
Hash identifier: Dli3f7kzgCnviPirDlC15bXH6kyg47Sl9VgZxGcrjoc=
Subject key identifier: 1E:40:EB:28:B9:51:2A:E9:3D:51:4A:EA:56:FB:0F:3A:7C:CD:79:C8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EAC69769C908DF24D82828F78AC0044DB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HkDrKLlRKuk9UUrqVvsPOnzNecg.roa
Signing time: Tue 09 Jun 2026 12:44:13 +0000
ROA not before: Tue 09 Jun 2026 12:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 81.5.141.0/24 maxlen: 24
82.152.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:69:76:9c:90:8d:f2:4d:82:82:8f:78:ac:00:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 9 12:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e40eb28b9512ae93d514aea56fb0f3a7ccd79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:6b:40:49:ff:88:b7:85:21:0e:68:ca:db:
56:c3:23:31:13:57:2e:61:85:f5:c1:b3:30:5a:2d:
d4:40:9b:97:6b:a2:22:c4:c0:1f:77:db:46:b0:f6:
74:6f:b3:6b:9b:49:2b:53:58:f4:be:9b:08:f2:3c:
26:33:1a:42:98:ae:33:1e:33:94:44:00:a7:a2:1c:
6f:27:0d:4d:98:bc:bd:89:b2:a2:88:aa:60:36:49:
86:20:39:f6:6c:a8:25:49:56:cf:6c:4f:82:bc:57:
9d:b5:90:29:e5:7f:91:26:dc:b6:80:bf:fd:3c:4f:
54:e6:c3:81:06:e0:7b:94:11:67:d1:3f:00:79:19:
d5:44:07:dc:46:4b:43:34:85:b3:f8:f6:87:5a:80:
5e:a4:02:b7:af:6a:02:e8:e7:d8:c0:33:c8:43:1b:
2f:1c:e6:5b:10:73:27:93:78:ae:cf:f5:a7:4c:1f:
e1:3e:ac:f4:e3:b9:e8:84:0a:31:e9:98:cc:43:c1:
9f:20:1a:0d:90:db:cb:73:3d:c3:39:d4:d9:ea:f2:
3b:a5:f2:4b:19:85:dc:ad:cc:ca:72:71:87:a1:1e:
fb:e0:1d:6d:d5:4d:2a:b2:08:78:76:6a:55:44:14:
5f:bd:0f:e6:7d:a7:54:49:8f:d4:b8:c8:08:dc:29:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:40:EB:28:B9:51:2A:E9:3D:51:4A:EA:56:FB:0F:3A:7C:CD:79:C8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HkDrKLlRKuk9UUrqVvsPOnzNecg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.141.0/24
82.152.222.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6e:b0:1f:41:2b:ae:4a:53:e5:0c:f6:60:c2:45:ef:d4:ae:
2d:35:8c:13:1d:2e:1d:cd:8f:5b:67:36:19:df:da:d9:1f:5c:
ac:9f:bc:b5:78:dd:cb:3f:62:d5:d9:f3:1c:5d:f9:c7:30:2d:
e5:f6:87:09:62:6f:63:80:d7:38:fe:4a:6a:ef:20:8b:33:08:
33:9b:c3:58:c9:e2:47:96:a7:0a:e3:72:7d:42:c8:9e:cd:cb:
06:53:95:c4:98:a4:db:1e:96:60:4d:75:88:36:f4:dc:5c:91:
44:3a:0a:9c:fe:d9:32:07:b8:ec:1a:f0:25:ea:20:4b:36:ce:
fb:31:e9:3e:35:f4:41:5e:04:fc:42:7b:c9:44:4e:f3:98:08:
4d:9c:27:b6:06:af:95:7b:c5:b3:e1:15:5d:32:7e:af:1d:81:
2c:5a:eb:f7:65:de:f3:95:21:32:d0:05:56:40:dd:71:01:76:
d2:0d:e7:ed:bf:42:e5:f2:3f:80:61:c8:12:3d:2e:a2:6a:2b:
b2:b8:88:bf:8c:6c:d8:6d:5b:6c:bb:ae:43:e1:55:52:a3:71:
ce:94:cd:77:2a:9f:a6:76:ed:84:44:3f:40:6b:51:16:3b:5e:
d8:b4:e8:5b:b7:d9:8b:6c:3b:9e:ec:c3:b7:f3:b1:a8:10:6a:
5e:ae:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:24 2026 by rpki-client