Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa
File: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (raw, json)
Hash identifier: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=
Subject key identifier: D4:74:36:A1:87:6B:93:36:C6:99:C1:06:B8:E2:A0:0E:92:95:03:E0
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019D8B9EE774C38DA8A61DE960F65BCEE25F
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa
Signing time: Tue 14 Apr 2026 10:52:20 +0000
ROA not before: Tue 14 Apr 2026 10:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202798
IP address blocks: 91.102.126.0/24 maxlen: 24
2001:67c:db8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:9e:e7:74:c3:8d:a8:a6:1d:e9:60:f6:5b:ce:e2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Apr 14 10:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d47436a1876b9336c699c106b8e2a00e929503e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:d7:d9:60:e1:d1:a0:4a:1e:ca:14:bd:d2:
0b:6f:e1:54:0f:58:fd:8b:53:61:ad:f2:c6:ec:9c:
f7:ed:c1:7d:cc:38:f2:54:a0:ff:48:49:1e:d0:b6:
1c:68:11:f1:c2:44:dd:62:08:ff:c5:9e:00:9c:37:
de:3b:02:bc:08:6f:c8:67:96:f3:3a:49:8b:e7:9e:
8d:d8:3b:d2:e9:e6:ff:96:25:e4:14:38:1e:e5:1e:
dd:0f:2a:71:6e:92:54:cf:20:9e:d6:d4:59:4c:a6:
09:f9:76:9f:21:4d:b6:a6:14:16:c0:96:af:89:90:
39:bb:1a:c8:bd:2b:e7:1b:38:06:75:32:47:82:2d:
c6:f3:e7:87:e1:38:0c:55:17:63:25:6f:db:3d:dd:
48:2e:c4:74:e9:5c:74:3a:80:f6:ca:e5:01:80:f4:
7d:14:2b:e6:ed:5a:39:60:97:4f:f7:25:7a:fc:00:
cd:e6:5f:01:db:cd:c8:cd:b2:51:a7:2b:8e:b8:a2:
00:42:c2:d4:f8:89:99:e2:ba:c8:7b:02:ff:c3:25:
6e:94:55:af:b1:3f:15:eb:7a:07:f2:4d:a9:a6:20:
3b:57:8c:40:ea:98:7e:fc:91:50:98:cb:40:ee:71:
8c:87:25:13:23:17:ea:d4:39:f7:6f:f5:d5:0b:b1:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:36:A1:87:6B:93:36:C6:99:C1:06:B8:E2:A0:0E:92:95:03:E0
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.126.0/24
IPv6:
2001:67c:db8::/48
Signature Algorithm: sha256WithRSAEncryption
83:62:fd:cc:3d:a3:d9:30:09:7d:98:56:65:12:f6:89:fe:85:
d1:64:0e:ae:68:8a:8a:9d:a4:64:2c:d6:e8:1d:10:0d:4d:2e:
35:51:df:c7:84:d0:68:bb:bf:42:8c:a5:a4:64:fc:13:05:a1:
83:35:d3:5f:77:4c:c1:22:2a:53:4e:bc:c3:5d:25:e7:2f:74:
7c:fb:7c:f8:7c:54:f5:62:23:de:fe:90:1a:fb:e8:84:bb:fe:
aa:f2:56:9d:cf:34:3f:73:e8:a3:a8:a1:fd:10:a8:ba:a5:b5:
d2:01:b7:12:78:e3:33:75:f6:63:93:8c:a3:e0:c9:35:cb:bf:
46:de:be:9f:dc:ec:43:70:8c:85:1e:92:9d:81:da:4c:37:3f:
79:cb:5c:ae:e1:76:5b:6e:e5:ed:ab:75:3d:9c:80:61:df:e8:
08:99:8a:d1:5e:d7:7e:bb:8e:32:8a:76:b0:89:d4:4d:8d:60:
6f:83:ef:7b:40:5e:ac:d3:08:d0:c3:4f:95:2e:00:6e:49:a2:
d3:44:30:db:65:8d:6d:a3:4a:f7:86:e9:b5:bd:ce:db:cc:81:
2c:d7:97:bb:a6:69:54:87:07:0e:2f:e7:7e:dd:2b:c9:16:6b:
e1:23:8b:50:d8:eb:dd:d9:68:51:89:14:34:c4:e8:17:9e:fe:
da:05:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:13:06 2026 by rpki-client