Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HF-YnX3Ut3LDSsMV1KVfEEUhFAA.roa
File: HF-YnX3Ut3LDSsMV1KVfEEUhFAA.roa (raw, json)
Hash identifier: GJh7/lywdg7yxhz6PgTjnRyJfLr0Jkn3EpDepopK6Ug=
Subject key identifier: 1C:5F:98:9D:7D:D4:B7:72:C3:4A:C3:15:D4:A5:5F:10:45:21:14:00
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A04022A7E851BDBB84961E3DF8642E3080
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HF-YnX3Ut3LDSsMV1KVfEEUhFAA.roa
Signing time: Wed 26 Aug 2026 22:13:27 +0000
ROA not before: Wed 26 Aug 2026 22:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219094
IP address blocks: 2a0a:79c0:1500::/48 maxlen: 48
2a0a:79c0:1501::/48 maxlen: 48
2a0a:79c0:1502::/48 maxlen: 48
2a0a:79c0:1503::/48 maxlen: 48
2a0a:79c0:1504::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:22:a7:e8:51:bd:bb:84:96:1e:3d:f8:64:2e:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Aug 26 22:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c5f989d7dd4b772c34ac315d4a55f1045211400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:ff:0a:01:4e:8b:f2:05:b5:d2:6a:29:8c:
7d:f1:09:41:bd:53:91:2b:fc:99:c9:c9:c9:aa:05:
12:ef:9c:e2:36:9f:f3:e2:5b:0d:e2:3a:94:4b:ca:
cd:6b:f2:b5:28:f2:c4:43:36:e1:3d:57:ed:67:8c:
9a:7a:07:0e:e6:98:3a:17:60:29:70:36:fc:b8:55:
44:73:88:22:63:4e:4b:f8:46:56:67:95:23:88:10:
64:a4:44:5e:76:8f:71:56:4b:13:10:c9:a7:fe:52:
a0:ae:d0:9d:9d:7c:49:4b:ce:90:53:20:19:c0:d8:
12:d7:2b:26:39:18:bb:d3:a9:c6:3a:cd:ca:a5:50:
50:38:ea:88:1f:0d:5a:03:e0:62:62:1f:30:fc:3a:
3e:24:86:b7:5e:d6:0b:6f:95:b5:25:f3:93:a3:fb:
1d:b3:f7:46:a4:6e:1f:e0:29:54:6b:da:93:43:01:
1f:d4:24:c0:5f:65:8c:7b:06:5d:54:3c:52:34:9d:
8d:95:b0:b3:84:7a:53:22:b1:bf:d9:ef:7d:0a:f7:
20:59:d7:f7:6b:31:f1:bb:5d:be:4a:6e:36:bf:7c:
6f:92:06:86:2c:df:b6:dd:3c:a2:d4:d1:7d:b7:53:
f8:f0:cc:f6:95:dd:e2:49:1b:18:ae:29:d6:65:95:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5F:98:9D:7D:D4:B7:72:C3:4A:C3:15:D4:A5:5F:10:45:21:14:00
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/HF-YnX3Ut3LDSsMV1KVfEEUhFAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:1500::-2a0a:79c0:1504:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cd:66:3a:b4:16:90:97:6e:42:9f:7c:56:fa:64:4d:e2:f3:6e:
44:2f:16:d8:1e:d5:2e:4d:a6:89:04:1d:76:b9:a2:40:12:9f:
7a:9f:0d:b5:ef:10:fc:fa:6a:64:02:7a:b7:9f:01:de:4e:1d:
87:ed:68:f9:d2:08:07:c3:96:b5:55:fc:d3:fe:97:2f:4a:f5:
1a:96:12:3b:dc:a6:37:c4:2d:4a:2c:87:89:e1:e0:9a:95:c0:
e7:cf:ad:80:bb:f9:ae:ac:0b:f9:bb:1e:92:14:ae:a2:7f:42:
57:48:2a:ef:80:a0:68:70:61:e9:ad:21:a7:e4:4e:04:8f:51:
4a:70:ff:f9:c3:0e:20:28:a8:9b:ef:81:6d:a7:50:0b:6a:40:
d6:06:c8:c9:b5:02:11:a4:5d:18:07:82:fa:e8:da:f0:ad:74:
c0:ca:f8:29:2f:59:05:05:7e:81:4c:1b:16:a5:63:f3:58:fe:
ff:2e:d7:be:cc:f9:8d:e6:91:3c:db:e0:a0:62:79:92:ad:bb:
97:a9:83:fe:09:37:25:ab:5e:13:47:1a:8d:22:a3:73:ee:cd:
30:bf:03:c9:98:5d:37:3f:2e:a2:c7:33:f1:fe:43:6c:45:32:
32:95:26:70:ab:2f:f6:e4:75:a5:ca:2a:e0:b3:80:a9:78:0b:
0a:24:64:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:09 2026 by rpki-client