Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/HUcHAL73Sfwe-OwmRifjceYRsyc.roa
File: HUcHAL73Sfwe-OwmRifjceYRsyc.roa (raw, json)
Hash identifier: /2sMFxs6Y2Y4YXgzJKEXcAfuaIViiN3v3fDdI/L3mew=
Subject key identifier: 1D:47:07:00:BE:F7:49:FC:1E:F8:EC:26:46:27:E3:71:E6:11:B3:27
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01A0B14077CCF19ECE0B6C92C1488EDE8FEA
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/HUcHAL73Sfwe-OwmRifjceYRsyc.roa
Signing time: Thu 17 Sep 2026 21:23:07 +0000
ROA not before: Thu 17 Sep 2026 21:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 5.102.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:40:77:cc:f1:9e:ce:0b:6c:92:c1:48:8e:de:8f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Sep 17 21:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d470700bef749fc1ef8ec264627e371e611b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:43:60:61:df:cd:b9:06:ab:ba:a0:35:2d:
93:fa:27:1b:35:d2:fc:88:aa:7e:3c:85:81:c6:44:
93:d8:53:fc:bc:d2:7f:bb:2a:06:b8:50:d0:a7:0e:
ef:12:50:2d:73:46:1d:a9:94:13:fe:0b:be:5c:e0:
97:2d:d7:1d:b6:2a:7e:f1:38:05:cb:a6:ef:00:04:
d2:d2:3d:36:b7:ff:1e:42:24:2e:c6:20:ff:e2:25:
b5:86:86:99:e3:5c:29:4f:55:08:d3:09:c1:6d:b1:
ea:5d:d9:e5:93:5e:ae:cc:b4:11:d7:ec:ff:f4:58:
8f:e1:74:3b:06:be:37:4f:c9:66:29:f9:c8:02:0c:
70:58:d7:b9:95:00:60:5e:ec:36:cc:e9:f0:ff:55:
b3:9f:f5:a5:b7:ce:29:06:be:dc:b7:b8:b2:ac:f4:
35:3b:c6:5e:94:51:c9:bf:00:85:2a:1c:4f:06:3f:
2f:a6:b4:19:0a:88:18:bf:f3:ed:df:33:b2:a4:8d:
66:58:bf:eb:b3:5e:43:3f:b5:9a:d2:88:7c:b6:80:
dc:54:99:be:b5:bf:bd:c0:43:54:ef:8a:1b:a6:69:
c7:24:a7:7a:1e:ea:23:d1:37:ec:fb:57:53:6d:15:
32:86:3e:fe:00:bf:71:24:18:1e:a3:51:86:e4:1b:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:47:07:00:BE:F7:49:FC:1E:F8:EC:26:46:27:E3:71:E6:11:B3:27
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/HUcHAL73Sfwe-OwmRifjceYRsyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0a:c8:5e:7d:30:31:f9:94:a7:81:ec:08:5f:be:72:d8:2a:
b9:6c:9a:18:30:70:b3:a5:76:a5:7b:85:a8:73:78:a3:9e:cb:
92:93:b2:b7:84:a9:9f:38:85:35:94:06:24:f7:92:70:84:24:
fe:6d:d7:6c:5e:53:0c:bc:61:cd:57:89:db:46:0e:d3:f9:27:
82:51:16:e4:81:85:e2:16:ef:56:39:3c:81:83:c2:70:82:34:
c1:0e:80:38:66:0f:91:eb:ec:cd:1d:7e:82:ac:15:2e:cd:88:
f7:03:9c:e7:7f:94:1f:6e:7a:56:db:aa:2a:ad:46:ff:bf:61:
99:e5:dd:66:7b:cd:8c:1b:8c:ae:6c:d2:fa:b0:8d:d8:e3:93:
25:09:62:c6:c8:2c:d8:43:1b:ac:d4:cb:8a:2a:34:8d:fb:38:
13:2f:c5:be:db:97:4f:9b:81:66:41:3c:8a:db:8d:36:1d:34:
19:ad:73:80:ec:35:9b:be:cc:38:ec:a5:1c:e5:0a:9d:7f:83:
8a:39:db:30:2b:f6:1c:67:3c:6b:f0:36:22:28:5c:cd:8a:22:
74:1e:f3:47:cf:42:30:69:26:9a:5a:6e:97:ad:9a:2d:04:ab:
26:7e:6b:d5:d8:e2:48:50:11:53:54:12:6a:ab:39:27:17:38:
21:11:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:20 2026 by rpki-client