Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/HHKPepyJHyyJmRpg5BdW85bx7Rg.roa
File: HHKPepyJHyyJmRpg5BdW85bx7Rg.roa (raw, json)
Hash identifier: leRatzJU0XPm4R4WH9CK8QwowVlDLVOizoSP6t+BnUo=
Subject key identifier: 1C:72:8F:7A:9C:89:1F:2C:89:99:1A:60:E4:17:56:F3:96:F1:ED:18
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 019FA2AADC0D5CFCE73BE41AAFD99422B505
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/HHKPepyJHyyJmRpg5BdW85bx7Rg.roa
Signing time: Mon 27 Jul 2026 08:22:14 +0000
ROA not before: Mon 27 Jul 2026 08:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12843
IP address blocks: 2a04:b640:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:aa:dc:0d:5c:fc:e7:3b:e4:1a:af:d9:94:22:b5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Jul 27 08:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c728f7a9c891f2c89991a60e41756f396f1ed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:b7:4f:a4:98:d7:f9:c4:f9:e3:92:77:80:
8d:66:30:57:ef:6b:12:40:6a:31:4d:05:e9:71:85:
f7:29:5e:ab:7f:e9:8c:c8:ee:45:5f:cd:3e:a6:fc:
46:75:e5:ce:d9:a2:2a:34:08:82:df:a0:8a:f2:6d:
4e:3a:f9:dd:58:1a:0b:de:b3:f5:9c:f3:1a:19:2c:
35:5c:57:11:45:91:1c:cc:a6:fe:54:0f:2c:91:bb:
2f:09:46:c9:2c:d3:6c:ba:0e:40:cb:4c:86:f4:ea:
92:fe:bc:51:47:ec:df:f6:40:7b:6b:88:6e:84:01:
bc:39:d6:61:e9:05:29:dc:b6:4a:7c:0b:4d:9a:36:
f8:52:df:d1:df:42:27:4f:ad:89:78:2c:48:76:86:
0d:bd:bb:b2:31:27:f3:54:8d:6c:83:74:cb:ce:b7:
13:6b:f3:16:12:6c:04:b0:ad:75:c4:f4:e7:19:9a:
66:83:84:b7:23:11:d0:0b:0c:6a:09:e2:b4:be:0c:
ae:d4:bc:1e:da:fd:f2:ba:6b:bb:9d:42:ce:6b:6c:
9e:f5:f6:aa:67:26:05:8d:b0:d2:5c:f5:b4:50:97:
de:aa:73:e6:36:b6:02:33:0a:c7:32:1d:e8:6d:5f:
d2:d6:d7:27:1c:02:8f:4d:11:16:a2:2a:51:77:35:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:8F:7A:9C:89:1F:2C:89:99:1A:60:E4:17:56:F3:96:F1:ED:18
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/HHKPepyJHyyJmRpg5BdW85bx7Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b640:3::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ae:32:2a:f9:60:7b:53:da:38:7b:dd:21:e1:f8:94:f4:4f:
48:ce:06:03:71:67:a1:b5:35:69:6e:6d:43:e3:41:2d:45:2e:
13:c0:e8:01:66:25:2f:07:6b:ac:09:03:22:36:ea:2f:80:ee:
af:9a:b2:4f:b4:93:f2:17:09:04:f2:46:9a:f2:c6:7c:58:af:
c6:b9:1f:f4:4a:87:5d:47:a1:ca:64:53:5b:04:c1:35:34:69:
fe:5e:f7:98:a4:ec:23:ea:3b:3a:2e:d2:30:5e:22:02:0b:c1:
d3:c9:03:bb:2d:5c:46:a7:d3:b4:34:f6:22:41:95:d5:67:8f:
d5:d1:d3:19:88:6f:76:58:75:3e:83:9b:47:2e:6d:a3:17:fe:
73:3b:58:03:95:2d:fa:f2:14:0f:65:8c:7b:bc:b8:1d:9d:15:
7d:38:4b:7a:e9:7a:6f:4b:bb:78:2b:63:23:78:60:8d:e0:e0:
f1:9a:df:2d:dd:bd:e0:ad:21:44:f6:9e:1a:7d:bd:0a:0b:6e:
e7:0e:fb:12:6e:f5:85:95:1d:29:cd:05:c9:2c:7e:c7:f1:ab:
84:c3:ab:b1:e9:e2:e3:4c:87:ff:00:6c:a8:f3:22:7c:a5:b1:
44:cb:c9:98:6f:d7:f6:02:86:bd:d6:01:bb:9f:1e:9d:a5:61:
7b:a6:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:24:12 2026 by rpki-client