Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/HdV5DSl350h-lbh-TN4zh4FfqZg.roa
File: HdV5DSl350h-lbh-TN4zh4FfqZg.roa (raw, json)
Hash identifier: Tf/ZSSv57NTvJyODzYy+ZLfHUFt2upVkz6yStWywhz8=
Subject key identifier: 1D:D5:79:0D:29:77:E7:48:7E:95:B8:7E:4C:DE:33:87:81:5F:A9:98
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019EBBDAC9C7BC687B852459B365165D0A93
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/HdV5DSl350h-lbh-TN4zh4FfqZg.roa
Signing time: Fri 12 Jun 2026 12:42:18 +0000
ROA not before: Fri 12 Jun 2026 12:42:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54309
IP address blocks: 185.194.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:da:c9:c7:bc:68:7b:85:24:59:b3:65:16:5d:0a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jun 12 12:42:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dd5790d2977e7487e95b87e4cde3387815fa998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:a6:34:1c:61:25:7e:3a:7c:38:ef:62:f7:
02:6c:a8:0c:37:f2:14:3b:68:42:94:c8:1b:ad:86:
13:25:8d:f5:94:89:2f:e8:4d:22:28:11:7c:f2:0c:
78:28:8f:0f:36:0b:85:70:0d:8e:05:34:51:64:29:
53:88:f1:d6:a4:74:aa:fc:c5:50:d3:41:39:0a:e7:
e1:5f:bd:2b:1d:c7:8b:4a:2a:45:93:47:10:3c:15:
f9:10:d0:72:65:bf:bc:d4:08:a1:f4:4c:9d:c4:8a:
62:7d:8b:d0:6a:98:77:06:cc:43:45:cd:fe:79:65:
f1:fb:82:59:ac:1d:40:e6:e7:da:58:6d:03:19:3d:
93:83:be:08:39:25:19:1b:36:b2:0b:b1:6b:59:2d:
f4:17:2c:78:11:96:96:31:09:b5:75:93:22:c4:d1:
53:91:3a:7b:71:26:3e:5e:28:f0:8f:16:fb:46:ef:
f2:6c:88:b0:7e:cc:c3:6c:0a:06:db:34:93:ac:8d:
59:cc:45:ad:41:b2:69:ad:15:7d:e3:7c:fc:bf:3c:
57:e6:ee:04:a5:db:32:eb:72:6f:ea:1a:f8:45:c3:
f2:11:c8:50:a4:95:a1:dd:86:18:bf:1e:53:c1:b7:
27:4d:9f:2e:09:61:d5:34:a2:af:a7:0e:68:63:36:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D5:79:0D:29:77:E7:48:7E:95:B8:7E:4C:DE:33:87:81:5F:A9:98
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/HdV5DSl350h-lbh-TN4zh4FfqZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.112.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ca:6d:67:60:27:d2:93:13:3d:a1:ad:05:a8:5f:8d:8a:f2:
16:1b:76:2d:8c:49:15:d3:ba:cb:2d:8c:4e:ee:03:1f:b1:34:
37:06:2b:c2:9c:50:2d:58:75:11:ad:e6:c4:a3:32:dc:4e:31:
b1:a9:98:a9:dd:9d:62:6b:3f:c6:d4:cb:55:ef:39:22:fc:28:
b4:26:5d:21:b4:b8:3e:14:57:68:8d:e2:cf:11:1d:fe:5e:3a:
a1:87:bc:19:bf:31:bd:b6:4a:20:3f:d6:75:fa:97:13:51:0a:
cc:e3:30:31:1a:39:01:80:a2:67:5c:d6:5c:ce:4f:45:03:b0:
b0:39:76:fb:0e:6a:c6:e6:8b:82:b1:07:1e:56:0a:41:fd:0c:
b5:70:c7:91:cf:3b:06:4b:22:ec:bc:75:76:53:b0:f4:01:45:
51:a1:7e:a9:a9:97:07:41:58:52:03:eb:a8:90:14:19:db:36:
80:e6:ef:e1:8c:a9:cf:f5:c9:e7:d8:3c:80:fa:e2:2e:79:80:
f3:db:a1:41:cf:9c:b6:d8:82:e4:f7:88:af:a9:4e:ff:ab:50:
b1:57:73:d3:ca:9b:93:39:35:6a:6c:52:5e:da:df:75:16:ea:
9f:c1:54:17:1d:86:c8:53:f5:c7:fa:dd:24:a8:35:ef:84:0d:
c3:51:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:54 2026 by rpki-client