Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/HiiPQJYwHAaSYAVm8uTze8vCE9o.roa
File: HiiPQJYwHAaSYAVm8uTze8vCE9o.roa (raw, json)
Hash identifier: 2nziwQn2BDX70j1YJrz3ReJWO/lfYuKvlW5ZyhVZirs=
Subject key identifier: 1E:28:8F:40:96:30:1C:06:92:60:05:66:F2:E4:F3:7B:CB:C2:13:DA
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 019EC5F7CBE98038A930B33A15583D391C2E
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/HiiPQJYwHAaSYAVm8uTze8vCE9o.roa
Signing time: Sun 14 Jun 2026 11:50:11 +0000
ROA not before: Sun 14 Jun 2026 11:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 89.221.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:f7:cb:e9:80:38:a9:30:b3:3a:15:58:3d:39:1c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jun 14 11:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e288f4096301c0692600566f2e4f37bcbc213da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:87:42:ee:a9:fb:38:77:df:99:13:1c:3b:
88:52:8b:b7:8e:c8:82:4d:d0:d0:94:92:2c:75:f6:
4e:f7:ee:53:35:39:b3:e3:fb:05:e5:06:96:40:92:
b3:41:fe:d2:7b:91:74:62:6c:4f:f9:9f:21:d0:65:
d3:c2:de:63:03:9b:b0:4e:80:6e:44:ed:0b:24:ad:
18:33:9e:6f:c5:10:24:a0:ff:23:61:75:61:d6:05:
30:e6:5f:d9:dc:69:4b:25:c2:88:f2:f2:5c:d0:38:
22:a6:3d:f6:8e:05:55:75:e2:dc:b1:ff:3d:ad:45:
cf:94:8f:36:67:39:ff:d4:79:8e:fe:59:ed:d7:a0:
d2:03:89:ad:a5:6d:73:2c:b9:3f:87:e9:79:c5:9d:
40:f1:f8:56:f4:63:59:48:51:63:07:37:4e:a2:11:
86:a2:d0:d7:b4:89:15:12:0d:15:d1:3a:f3:71:c2:
eb:49:5f:e4:b5:d0:15:76:ad:f7:e7:9c:31:95:9d:
09:b8:ff:0c:b3:67:a4:fd:61:3d:a8:29:a8:b5:17:
6f:2d:c0:e3:7e:a3:22:61:ef:69:c2:f8:1a:eb:e6:
22:4d:64:ca:83:94:93:0a:2e:b7:f5:08:64:46:65:
9f:c8:2f:5b:78:c0:de:8f:9b:db:e2:1c:02:a4:48:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:28:8F:40:96:30:1C:06:92:60:05:66:F2:E4:F3:7B:CB:C2:13:DA
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/HiiPQJYwHAaSYAVm8uTze8vCE9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.84.0/22
Signature Algorithm: sha256WithRSAEncryption
72:38:d8:53:01:ea:65:60:3f:95:2f:0d:60:47:db:71:9a:78:
5b:34:33:76:61:60:d7:f2:3a:41:7a:0b:76:bc:55:8d:59:8e:
98:62:31:8f:bb:f9:7b:da:9a:ef:42:9d:22:15:24:bf:1a:f5:
e4:43:26:62:05:bc:95:14:77:65:40:d6:e5:70:5e:74:80:8d:
28:44:fd:d6:75:64:0d:45:4a:f6:1a:6c:45:43:18:50:ec:69:
f2:43:c7:96:34:b8:f3:0d:11:ba:ff:d0:46:b4:33:d3:b3:27:
d8:f9:ea:7f:40:a2:3d:89:fc:97:fc:17:ec:49:20:e2:d1:29:
48:64:69:7d:54:f3:e7:a7:03:89:6b:91:7f:fc:d2:74:73:88:
e7:4f:2a:62:f9:29:31:af:09:2c:1f:a6:19:1a:95:26:57:25:
51:bc:7a:88:75:ab:d2:28:0b:52:05:06:a6:26:dc:07:74:2c:
4c:b1:c3:ff:12:65:24:cf:51:fd:92:cb:c8:cd:1a:8b:47:05:
f5:95:a6:22:10:d9:61:cb:e4:0a:c6:df:ea:c6:8e:9e:b4:70:
28:6e:0a:d2:c5:87:c4:05:3c:77:d1:01:5f:a1:bd:73:f4:12:
d1:40:18:79:aa:12:70:54:eb:e0:8b:b8:d3:77:6f:81:00:2e:
93:29:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:56 2026 by rpki-client