Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/HV2CsrLzF-S1qWZ8J3VTBgO48nw.roa
File: HV2CsrLzF-S1qWZ8J3VTBgO48nw.roa (raw, json)
Hash identifier: JHxkLJgnelaG3bki3cyYxVvS6B7h4MLCjzZfELjOxNs=
Subject key identifier: 1D:5D:82:B2:B2:F3:17:E4:B5:A9:66:7C:27:75:53:06:03:B8:F2:7C
Certificate issuer: /CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Certificate serial: 01A048DFF6DDAF4CC87C23A3238BCE741C46
Authority key identifier: 61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/HV2CsrLzF-S1qWZ8J3VTBgO48nw.roa
Signing time: Fri 28 Aug 2026 14:57:12 +0000
ROA not before: Fri 28 Aug 2026 14:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219360
IP address blocks: 2001:67c:23b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:df:f6:dd:af:4c:c8:7c:23:a3:23:8b:ce:74:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Validity
Not Before: Aug 28 14:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d5d82b2b2f317e4b5a9667c2775530603b8f27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:0b:0c:10:eb:45:f0:b5:2d:61:c3:07:61:
36:da:ba:34:33:fe:64:8e:0c:29:ba:b6:5b:17:e1:
c1:9c:e9:10:10:04:e0:17:7f:af:96:2a:4f:d1:55:
b3:26:22:28:6e:3f:a4:ab:d3:81:67:50:86:59:d7:
f1:65:17:b7:bf:b7:10:b5:c3:7f:28:6d:8b:58:86:
5a:fa:07:6a:4d:ec:33:bf:aa:87:9e:1d:14:3c:c1:
92:8c:0d:7c:da:df:46:56:1f:86:bb:b5:c3:81:f1:
f6:77:5b:f8:04:d7:15:43:1e:96:24:a6:fd:80:11:
fa:a6:a6:c2:43:2c:d1:4a:5d:01:95:ac:84:21:5a:
54:7b:45:dc:00:2c:c2:51:3e:21:af:37:9a:f2:21:
c3:f1:4e:37:89:6f:b5:c3:ea:c4:c1:72:8a:73:2f:
61:85:b1:f1:70:2a:54:1e:53:c0:72:5c:93:f3:dd:
61:ab:1c:f1:73:ce:2b:48:99:6b:ee:47:31:4a:ba:
38:07:5a:d5:5a:a7:15:53:8c:e5:03:c9:dc:fb:10:
07:02:de:83:cf:81:7e:55:e2:7c:9a:dd:a3:d9:21:
70:99:83:8c:35:7e:28:66:55:3a:a5:ff:34:93:73:
f2:2e:59:81:e9:11:71:c7:a5:22:20:76:af:b1:0e:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5D:82:B2:B2:F3:17:E4:B5:A9:66:7C:27:75:53:06:03:B8:F2:7C
X509v3 Authority Key Identifier:
keyid:61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/HV2CsrLzF-S1qWZ8J3VTBgO48nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:23b4::/48
Signature Algorithm: sha256WithRSAEncryption
8f:db:af:fd:c4:57:43:53:37:43:56:3a:84:a8:77:df:62:42:
8b:cc:e2:1d:da:8d:96:e8:ac:ac:c6:d9:b9:f2:a2:60:82:37:
52:2c:6a:1d:4a:14:8b:48:e7:6c:e8:1f:9f:0d:27:05:36:95:
07:07:89:9c:e8:6f:53:17:7a:bd:e5:b7:8c:15:d3:9b:59:d0:
72:22:9f:9d:fc:9a:ee:f9:b0:54:24:3b:46:1b:96:53:84:74:
63:5f:d9:e7:0b:00:2f:78:5e:79:7a:94:a3:36:8d:53:ad:38:
a8:1b:1b:f6:14:aa:14:77:91:3f:c3:91:77:39:81:19:25:6f:
a2:7a:24:22:e8:a4:fa:3c:6e:33:d7:6a:1e:68:32:f1:c5:31:
a0:f4:c3:ad:80:6b:a9:e9:5b:dc:08:94:c7:13:52:b5:8d:5e:
0f:93:c0:c4:b5:7e:83:b6:bb:21:d1:35:fb:c3:b7:16:b2:a3:
21:d1:9b:a3:85:c8:d6:b1:9c:14:49:c2:e6:80:57:6c:f7:ad:
c0:75:8d:c4:a3:32:ee:b9:95:f5:4e:97:23:c6:15:75:31:6c:
11:15:77:d6:5a:f3:ce:90:55:07:3c:70:35:e2:58:20:a3:a1:
80:5f:51:5c:cb:d1:95:69:59:ba:be:3d:a4:dc:26:b5:a1:e1:
b0:5c:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:54:15 2026 by rpki-client