Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HQxj7wwjJx0Wy48l44FsWz-sKdo.roa
File: HQxj7wwjJx0Wy48l44FsWz-sKdo.roa (raw, json)
Hash identifier: ShwDsntUyDWfzaKRIS7LdH0JWE0iDl0KP2kH0Pa1LYQ=
Subject key identifier: 1D:0C:63:EF:0C:23:27:1D:16:CB:8F:25:E3:81:6C:5B:3F:AC:29:DA
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019C556561DFC6D0FD7095FF2124809ABD40
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HQxj7wwjJx0Wy48l44FsWz-sKdo.roa
Signing time: Fri 13 Feb 2026 05:07:13 +0000
ROA not before: Fri 13 Feb 2026 05:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212264
IP address blocks: 194.85.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:65:61:df:c6:d0:fd:70:95:ff:21:24:80:9a:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Feb 13 05:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d0c63ef0c23271d16cb8f25e3816c5b3fac29da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:81:27:71:88:f4:a8:7f:de:31:55:a0:9e:
c1:ea:fa:88:ba:07:4f:c3:2d:60:e5:f6:df:98:e0:
f2:a3:c9:ff:37:a8:72:81:de:38:76:d1:76:e6:eb:
96:7a:2d:36:08:f4:08:98:df:7f:a3:b6:c6:27:51:
ad:ae:0a:24:6f:b7:80:39:43:1d:1e:23:0a:1e:ab:
66:7b:da:03:fd:9f:31:78:d1:a2:dd:0f:b8:cb:15:
01:9d:1a:8c:0c:8b:b2:4e:1a:2d:91:f8:e1:67:0d:
85:2d:f7:92:7d:38:03:78:08:1d:c8:54:83:59:96:
f7:6a:27:aa:be:9e:95:8c:ae:43:c6:d4:da:80:f8:
6f:bd:e4:18:02:08:d4:95:f7:03:dc:b9:83:a5:77:
b9:36:4e:d2:bd:d4:51:4a:5f:01:67:4b:69:f4:6d:
13:a9:b8:45:8d:0f:7f:7d:eb:81:d8:ab:b2:45:79:
98:f2:78:45:df:79:42:1d:de:a9:8a:4d:a2:8a:e2:
2d:53:54:b6:07:2e:94:f3:53:3b:f3:e2:ab:6f:c8:
8c:ef:ca:f1:f6:f2:d2:05:a6:af:27:65:c3:f6:52:
05:ba:46:7e:94:73:0b:5f:37:80:d2:51:46:cb:50:
93:92:36:62:7a:8f:69:22:34:94:d8:d3:36:b9:b2:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:63:EF:0C:23:27:1D:16:CB:8F:25:E3:81:6C:5B:3F:AC:29:DA
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HQxj7wwjJx0Wy48l44FsWz-sKdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8f:a8:96:67:a1:26:2e:75:32:12:b0:3a:54:f6:a3:dd:db:
5a:40:57:65:30:b3:e7:dd:e4:bf:8c:02:6d:d8:2f:83:63:db:
30:8f:a2:6a:94:ec:f6:ff:51:5d:38:68:18:f8:62:de:ca:8e:
23:ad:c7:83:8e:7b:78:53:7c:ec:c8:5e:88:47:10:35:88:7e:
d6:52:2e:b5:52:5a:e6:9c:85:0b:ed:6f:56:7c:24:6d:5b:e8:
a1:7e:d3:f8:61:fb:fc:20:9f:74:e9:1e:01:89:05:b7:ba:e6:
90:dd:6b:a2:3d:37:e9:d8:9d:fc:1c:1f:fe:3d:ce:cc:26:51:
50:aa:f2:83:b2:eb:1f:b6:b9:33:de:bd:c8:f1:05:ce:01:8d:
1a:05:72:57:31:e6:ee:32:5f:c5:9d:ab:3f:5a:35:74:c8:96:
f3:1c:27:ca:1d:d0:e4:0c:02:26:d3:73:3c:30:80:ac:fe:21:
39:25:db:a8:06:5d:a3:1a:5e:25:d0:eb:3f:f0:d2:44:6a:f1:
69:22:76:d4:24:c4:5d:51:7a:58:c0:49:26:22:74:50:04:1d:
ad:04:25:bc:18:41:78:81:c2:88:91:7e:81:06:63:ba:f4:48:
37:b2:fd:36:12:0c:eb:fc:7d:ac:26:cb:2c:82:30:45:79:18:
e0:18:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:18 2026 by rpki-client