Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HFkuY0ZEm-2IryKrZdphDth0eHk.roa
File: HFkuY0ZEm-2IryKrZdphDth0eHk.roa (raw, json)
Hash identifier: 0npaQXe+EI6hIVi3Jkh9QMgnBKMSk9CrQY/p88LFvCA=
Subject key identifier: 1C:59:2E:63:46:44:9B:ED:88:AF:22:AB:65:DA:61:0E:D8:74:78:79
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0A37CE992E6C2353171BBC0023AC390D2
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HFkuY0ZEm-2IryKrZdphDth0eHk.roa
Signing time: Tue 15 Sep 2026 05:14:27 +0000
ROA not before: Tue 15 Sep 2026 05:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219101
IP address blocks: 2a10:fa81:1f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:7c:e9:92:e6:c2:35:31:71:bb:c0:02:3a:c3:90:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 15 05:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c592e6346449bed88af22ab65da610ed8747879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:41:b8:f8:65:f2:c6:a5:6a:89:9a:70:8c:
79:54:41:19:59:55:72:f2:b3:74:9d:c0:18:1b:42:
2e:7a:27:12:89:e6:f3:52:17:74:b3:8b:82:cc:89:
93:f7:79:08:b3:72:29:b4:4a:8f:59:23:83:8f:4e:
3d:f8:5e:02:5f:6b:ab:38:a1:4e:41:e8:f8:87:97:
81:51:4b:df:9e:30:1d:4a:ce:72:e9:e9:5e:48:f6:
8d:ab:60:21:18:6c:56:2f:60:43:5f:65:ca:16:b2:
c7:1c:20:d9:26:98:1c:77:1d:09:0f:23:fd:a8:b4:
fe:79:33:ee:3b:2f:33:65:82:d6:99:a8:b0:54:62:
06:15:b9:ca:bc:80:3f:e3:29:b3:35:69:dc:fb:9d:
9d:87:2b:7b:94:6e:f4:ad:a5:ab:90:dc:a2:9d:e7:
6c:36:9d:fa:23:04:56:1b:de:5c:0d:82:6b:10:b6:
ce:42:a7:48:c1:24:b8:fd:e7:bb:55:4d:93:92:83:
96:6b:60:37:ea:fe:d7:95:bb:47:21:44:71:68:e8:
94:c4:e0:83:3f:e6:d2:82:11:43:9d:85:ae:2b:c5:
5e:fa:08:f2:67:1a:28:7e:7d:53:02:67:d3:54:3b:
1a:ad:7c:3b:c9:04:45:64:71:3b:89:21:da:ca:f7:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:59:2E:63:46:44:9B:ED:88:AF:22:AB:65:DA:61:0E:D8:74:78:79
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HFkuY0ZEm-2IryKrZdphDth0eHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1f00::/48
Signature Algorithm: sha256WithRSAEncryption
61:44:7e:e6:6a:54:6a:2e:4e:b4:48:dc:49:2e:da:c6:68:9c:
4b:3d:b9:96:9d:12:c3:88:2b:8a:7a:28:74:12:b1:15:1f:d0:
cc:d2:1b:3a:c0:ec:e8:3a:6c:63:d6:b6:d8:65:a0:5e:52:9a:
01:ca:d5:d8:62:90:09:b7:f7:ce:3c:db:e8:3f:47:47:65:ae:
26:56:d2:4e:5c:dc:98:37:3e:ef:4f:aa:7c:b7:5b:0d:6c:16:
6d:c5:33:7c:a7:e0:3b:31:15:63:84:00:f1:76:e3:b0:5d:ed:
84:95:57:2c:0b:2a:c7:53:b2:63:44:c0:58:88:2e:88:a1:35:
85:ea:4d:ac:62:f6:c9:c3:39:22:18:16:51:95:fd:5c:87:24:
6a:23:74:67:af:e8:16:ef:7d:ae:83:1f:a6:dd:7d:9e:44:77:
2b:44:d7:2c:23:fd:12:2a:c2:1c:14:ff:8d:3f:e4:c7:27:15:
39:e2:10:9d:7c:bf:51:c0:de:42:e4:36:6f:f0:29:6f:4f:05:
1c:5e:bb:1c:2b:ec:bb:71:67:d4:8b:ab:6f:6d:b2:5e:5b:ae:
23:a6:ea:c7:15:28:1e:cb:21:ad:b4:8a:19:05:16:e6:ee:90:
de:86:70:d9:15:be:ee:72:54:64:b9:be:eb:45:d4:dd:09:c1:
8b:ae:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:21 2026 by rpki-client