Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/HDgTefBqgeJ6yK2VqLa7_IllQEE.roa
File: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (raw, json)
Hash identifier: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=
Subject key identifier: 1C:38:13:79:F0:6A:81:E2:7A:C8:AD:95:A8:B6:BB:FC:89:65:40:41
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 019C5BC433A17922F95316AE605343E77C26
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/HDgTefBqgeJ6yK2VqLa7_IllQEE.roa
Signing time: Sat 14 Feb 2026 10:48:30 +0000
ROA not before: Sat 14 Feb 2026 10:48:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12905
IP address blocks: 193.200.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5b:c4:33:a1:79:22:f9:53:16:ae:60:53:43:e7:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Feb 14 10:48:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c381379f06a81e27ac8ad95a8b6bbfc89654041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:ab:7b:79:d3:c8:67:d9:dd:c3:ce:b9:b0:
b1:e8:73:23:16:05:65:0f:cf:88:ab:0d:c1:0b:f1:
16:27:03:3d:f6:9c:83:19:78:56:a4:7e:56:d6:0c:
55:ba:01:3b:33:37:b7:9e:20:4e:e3:ca:f1:66:1e:
99:ea:02:ca:94:c4:52:82:d3:72:d7:a5:68:3c:aa:
60:f8:7e:87:e1:e1:eb:d5:5e:36:cc:9f:f5:c3:b9:
06:19:19:96:00:13:30:60:14:b5:37:93:4a:b3:fb:
07:0e:01:96:0f:5c:a7:bb:84:fc:3c:6b:38:b4:db:
13:27:fd:01:13:87:ba:0a:f7:f2:ca:9b:8a:84:2c:
64:8e:0e:9c:3b:bf:c2:d3:9f:d8:fd:6f:5a:d9:ec:
5f:d9:1a:d6:37:a1:0b:62:4a:b4:a7:0b:d6:3d:15:
da:49:60:be:bf:13:61:15:87:bb:8c:69:55:e3:29:
dc:a8:49:78:a1:7c:86:4f:23:bf:8e:2c:24:db:71:
09:c3:5e:f2:6f:27:aa:a6:93:67:14:d2:c3:43:57:
74:95:39:7d:a4:f4:ee:72:b9:a2:5d:48:f9:b3:7e:
31:a3:42:96:63:f9:aa:c5:72:a1:8d:b9:00:fa:06:
8d:ff:93:60:16:b9:72:24:ee:b8:9e:8b:55:f9:d0:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:38:13:79:F0:6A:81:E2:7A:C8:AD:95:A8:B6:BB:FC:89:65:40:41
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/HDgTefBqgeJ6yK2VqLa7_IllQEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.9.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6b:ea:7e:31:0c:da:4c:af:3c:6d:92:bf:a3:0b:1f:19:b0:
af:32:63:ff:50:b2:c4:8a:94:55:66:32:48:28:02:82:bb:6d:
01:e6:da:dd:40:86:0a:7b:8c:97:ac:d7:41:16:e0:9b:c6:17:
e9:da:34:3f:d8:66:13:73:3a:71:cb:75:a8:5b:14:82:49:60:
92:cb:6b:4c:73:9e:33:22:e7:b4:ca:a0:1e:fd:b5:c4:e6:ea:
50:b7:01:cb:86:0e:44:2f:b2:cc:10:e8:91:3c:51:0e:56:99:
7a:b6:4a:9f:42:03:65:63:7a:54:2a:6f:49:34:6c:57:f1:10:
85:6c:b7:d9:58:3d:2b:ce:47:ec:a6:7a:30:59:62:cf:14:49:
09:7d:a1:e6:c5:0d:fc:f2:a7:d9:87:c4:58:8d:11:ff:c9:60:
a6:69:55:39:d7:d5:5f:c9:4b:f5:2e:bf:a1:52:72:40:6e:6f:
14:52:a6:4d:42:66:57:4c:b8:41:bb:33:58:09:71:5e:e1:d5:
59:95:bd:8f:c9:31:32:22:04:f1:27:12:56:8f:d1:69:e4:7f:
0e:95:be:f2:09:fe:2e:78:88:0a:b8:c3:06:c6:54:b2:ce:7b:
a7:e8:66:57:9e:46:48:ff:e6:5c:a8:16:c5:e5:40:29:94:85:
57:29:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:43 2026 by rpki-client