Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/HlPf6jt7HgmbuEWgecuG4Sgaorc.roa
File: HlPf6jt7HgmbuEWgecuG4Sgaorc.roa (raw, json)
Hash identifier: j8/ocuESU17xtFvRR6K0O2U6/8pNxL5+xXsijYbdSGQ=
Subject key identifier: 1E:53:DF:EA:3B:7B:1E:09:9B:B8:45:A0:79:CB:86:E1:28:1A:A2:B7
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 019E6AF69D1E6AC3DAD3F71D767A0F02076F
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/HlPf6jt7HgmbuEWgecuG4Sgaorc.roa
Signing time: Wed 27 May 2026 19:43:27 +0000
ROA not before: Wed 27 May 2026 19:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205478
IP address blocks: 176.113.95.0/24 maxlen: 24
2a14:e100:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:f6:9d:1e:6a:c3:da:d3:f7:1d:76:7a:0f:02:07:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: May 27 19:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e53dfea3b7b1e099bb845a079cb86e1281aa2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:ec:20:bd:f2:0d:cb:af:93:9c:10:bd:72:
0b:45:25:27:80:be:b8:cb:e3:53:12:eb:f3:80:78:
45:d9:a1:8e:9a:ff:2f:a0:c6:5f:a9:96:b8:00:02:
59:e3:55:4c:d4:3f:8e:2b:4f:2a:29:c1:83:88:92:
f2:67:00:fc:88:39:4b:56:07:58:9c:9d:e7:c6:36:
6a:e6:cd:72:9a:9e:2e:52:68:f8:0d:62:79:e0:9e:
f8:54:7b:ee:43:0b:d3:14:e5:0e:8e:87:58:33:3f:
fc:ad:e6:fb:99:2d:5b:f0:e1:52:3b:41:e3:47:75:
f8:6d:8d:66:0f:a8:f1:c8:b2:9a:f3:11:4a:e0:f4:
3d:20:11:42:aa:19:0b:01:99:a3:af:37:d5:07:6e:
72:f7:90:64:16:8d:e6:d8:0a:f0:19:01:53:a7:5f:
32:68:93:13:f1:a5:7f:4a:53:f4:4e:7b:59:f3:d5:
e9:db:ec:f2:71:14:aa:96:d6:30:dc:7b:4f:18:87:
5e:5b:fe:0f:4b:db:9e:99:9c:ed:3c:5a:0e:dd:72:
f4:54:09:99:cb:fb:38:75:e4:26:9c:95:75:78:1a:
1b:6c:27:cb:bd:79:63:38:a2:8f:98:02:c5:80:7e:
ec:2c:55:2e:40:f4:de:eb:07:50:c3:05:75:47:1a:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:DF:EA:3B:7B:1E:09:9B:B8:45:A0:79:CB:86:E1:28:1A:A2:B7
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/HlPf6jt7HgmbuEWgecuG4Sgaorc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.95.0/24
IPv6:
2a14:e100:3::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ea:2b:8a:31:45:08:99:89:fc:78:25:6f:ac:f0:aa:b8:f7:
f1:89:c4:42:35:d4:f1:2f:28:fa:0a:49:cf:5a:ef:70:98:ff:
2d:09:85:3a:6c:61:ed:89:eb:e5:91:e2:ec:7c:a6:0c:97:4f:
b2:1e:22:1e:6f:ea:a9:3f:ce:3e:c1:d3:fb:fb:d3:54:a1:6f:
f3:57:86:7c:bb:9b:49:cd:2d:17:34:f4:1d:b4:f3:50:08:19:
98:bf:3e:2c:02:5d:4b:b8:e4:00:22:18:6c:19:e6:08:fe:d0:
24:12:82:1c:21:f9:90:07:c8:f5:00:13:f7:e9:53:62:71:61:
33:ab:35:ee:0a:a3:23:e2:14:73:ef:12:18:48:de:d9:39:6b:
21:ff:85:29:b5:51:60:b4:cb:cc:19:6e:c9:a3:05:c0:a1:8c:
79:d5:ec:97:90:92:aa:ac:6a:1a:53:d9:35:09:3a:17:be:31:
41:52:e7:cc:c4:8d:26:32:f7:ad:9f:ac:11:7b:0f:73:76:9f:
a2:cc:1f:34:3b:0a:ba:bb:4b:e4:96:f4:d6:0e:8d:7b:50:0d:
ad:cb:05:43:d1:f9:bc:40:b8:6c:e1:30:37:8e:55:89:a1:cd:
88:c7:5f:7a:ac:5a:39:db:1e:41:26:d6:0c:f8:17:0c:15:f4:
aa:2e:2f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:26 2026 by rpki-client