Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/HJPLxJxpfq1R9TzTgRQlYzUDbhs.roa
File: HJPLxJxpfq1R9TzTgRQlYzUDbhs.roa (raw, json)
Hash identifier: OQoHpJCgdLNrLAKiPR4smDKveNyBf+LPF6Xo5G3zvkg=
Subject key identifier: 1C:93:CB:C4:9C:69:7E:AD:51:F5:3C:D3:81:14:25:63:35:03:6E:1B
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019B775955698229E82CDF71402A21D46CA3
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/HJPLxJxpfq1R9TzTgRQlYzUDbhs.roa
Signing time: Thu 01 Jan 2026 02:18:21 +0000
ROA not before: Thu 01 Jan 2026 02:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21423
IP address blocks: 194.0.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:55:69:82:29:e8:2c:df:71:40:2a:21:d4:6c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Jan 1 02:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c93cbc49c697ead51f53cd38114256335036e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:cf:74:b7:a6:0b:5e:a4:7d:f2:b3:54:31:
65:e2:ef:17:15:32:7b:43:4a:8c:be:2c:89:b2:f0:
d8:77:40:82:b1:9f:bb:53:2d:9e:de:b2:d5:22:c6:
ea:67:cb:a7:cc:b5:e8:77:19:8a:75:66:47:35:a1:
0e:62:79:5a:44:35:a8:2b:61:e3:02:9a:d2:16:29:
d4:e2:94:2f:b4:45:eb:00:44:99:33:c1:14:50:34:
b2:dc:a4:b3:c5:9d:69:dd:99:b4:72:30:2a:5a:33:
ad:b2:d3:c5:55:e5:e2:7c:63:a3:71:8c:a3:77:9f:
bc:fc:9a:c2:d3:a5:16:18:1d:62:27:ea:11:c8:75:
eb:e2:3f:e3:4f:63:de:f5:67:f1:62:18:3b:51:f0:
0a:02:61:2a:d2:d8:fb:4e:50:03:49:b6:b8:4a:bd:
11:1d:a7:e8:a9:8e:d4:d7:64:1c:81:e6:ec:56:e1:
8d:e8:de:33:8d:a1:c8:83:3d:25:ac:f4:47:69:06:
99:d4:fb:e5:69:3b:87:9a:54:3f:f7:4f:38:74:f1:
df:54:1c:74:dd:16:92:4f:30:18:32:cc:8e:cb:b5:
1f:7b:69:dd:11:20:6e:43:b3:3b:fb:ef:be:aa:d6:
07:fc:6d:03:72:d4:bd:de:24:b5:26:63:ed:e9:02:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:CB:C4:9C:69:7E:AD:51:F5:3C:D3:81:14:25:63:35:03:6E:1B
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/HJPLxJxpfq1R9TzTgRQlYzUDbhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e5:17:99:6a:e2:f7:f4:47:a6:cf:63:5c:90:cd:28:a9:d5:
e3:9d:28:d4:62:7f:28:a0:96:95:6d:f0:fd:55:55:e0:69:6d:
85:54:26:44:45:58:d9:85:2e:27:9e:a0:46:b8:c0:6a:03:90:
a7:3f:0a:4b:af:d4:da:42:a8:51:77:28:a3:97:9c:b6:aa:69:
5b:56:a9:c3:92:28:c8:36:9a:e8:85:6d:3f:ee:da:e7:ab:ee:
2b:20:90:a7:53:52:66:cf:19:4b:c5:c3:2a:11:ef:60:40:ef:
25:ee:93:42:c5:21:37:7c:ff:d8:a5:d8:f5:b9:50:54:36:31:
80:84:5c:f5:71:55:4c:90:4c:6f:21:4c:e5:93:bb:a7:9b:0d:
ed:8a:f9:40:d4:0b:85:4e:0c:33:75:06:14:a7:35:4c:6b:4f:
58:60:35:92:d7:35:90:03:66:07:51:b3:5f:8a:f9:67:0c:e6:
5d:3e:ab:8b:86:af:76:94:77:a7:3f:a7:ab:67:3d:4a:e8:d9:
a7:27:89:c2:15:bb:6f:84:95:28:53:de:77:3b:f5:43:46:24:
13:67:4b:9d:09:8a:f3:58:91:38:db:ef:45:a3:cd:3f:cb:bd:
f1:7e:13:13:90:cf:5b:42:a4:e8:ba:34:f8:23:06:61:52:a0:
63:a0:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:12:20 2026 by rpki-client