Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/hFmhAXLW2al7davgkTTSEcTlDtw.roa
File: hFmhAXLW2al7davgkTTSEcTlDtw.roa (raw, json)
Hash identifier: xWEaof6tinZxklJLqHnVmWR9YphgXKG0KjBxAmFOdco=
Subject key identifier: 84:59:A1:01:72:D6:D9:A9:7B:75:AB:E0:91:34:D2:11:C4:E5:0E:DC
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 01A17E58B6FD1AA143C032817DA91CD94BC3
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/hFmhAXLW2al7davgkTTSEcTlDtw.roa
Signing time: Tue 27 Oct 2026 17:11:45 +0000
ROA not before: Tue 27 Oct 2026 17:11:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a01:f440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:58:b6:fd:1a:a1:43:c0:32:81:7d:a9:1c:d9:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Oct 27 17:11:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8459a10172d6d9a97b75abe09134d211c4e50edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:28:03:64:40:b2:2e:53:77:d7:46:97:df:
a9:fa:2a:ba:a2:2d:c1:27:27:7c:44:b0:49:ad:29:
98:36:96:36:49:64:31:84:21:9b:24:d2:08:fe:b7:
21:a7:ea:db:94:6b:f8:7a:b0:46:74:fc:b3:31:41:
1b:cb:3a:57:38:15:88:94:9e:e8:99:02:8b:c3:f0:
04:d1:02:96:03:61:2d:b0:c8:14:36:d1:51:d7:c6:
58:cf:15:db:f9:aa:0d:e5:ef:57:aa:35:2e:74:ab:
b5:2d:c2:cf:05:fc:aa:77:34:1a:05:db:f5:47:57:
d7:12:06:ab:86:66:e9:9b:e4:bb:d3:9a:7c:1d:97:
9f:94:5c:cb:04:85:2c:66:dd:0e:e0:07:69:4f:b3:
a5:dc:de:c8:b9:3d:4d:ec:54:db:cf:02:cd:19:87:
0b:7b:00:9c:2a:21:99:68:2d:38:3b:f8:ba:1e:ab:
84:1f:3a:24:40:ed:66:b4:3a:b7:e2:37:88:5e:49:
ad:fd:70:ae:73:e2:16:35:4c:75:fa:2d:f5:b1:bb:
24:3f:bf:60:8c:48:be:6d:5d:a3:9f:81:95:f6:ec:
ae:6b:61:41:1d:85:0e:a6:4e:1d:62:eb:18:5e:91:
79:fd:a3:db:99:51:98:e5:ec:68:47:34:60:a1:54:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:A1:01:72:D6:D9:A9:7B:75:AB:E0:91:34:D2:11:C4:E5:0E:DC
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/hFmhAXLW2al7davgkTTSEcTlDtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f440::/29
Signature Algorithm: sha256WithRSAEncryption
64:4e:4d:c5:02:9f:fd:e1:e6:6c:d3:c4:34:a8:0b:ca:47:4a:
84:ef:45:f6:b1:09:e8:f5:44:cc:72:5b:b7:15:ca:f3:57:9b:
c6:d2:c9:cf:40:87:99:d7:7b:29:f2:d7:e2:02:08:ba:e0:e6:
e8:10:c7:4c:b8:9e:fb:4e:7b:46:b1:48:77:d9:ce:84:ed:39:
7d:be:c6:a1:81:26:6e:3d:85:51:9e:cd:e3:b6:f7:1e:26:54:
4d:a1:5f:34:ea:50:30:d7:16:8f:79:e0:9b:52:9d:51:e9:e6:
2a:62:b4:1f:79:f9:f9:2d:04:49:f3:8b:bc:48:f3:3a:17:b2:
0f:f8:35:e7:4b:72:50:00:ba:b9:4c:f2:e7:11:ef:c4:24:2d:
af:a4:85:79:38:24:b5:cf:f1:71:2e:7b:07:38:e5:29:6c:d3:
88:ab:79:04:38:ba:1d:a3:e9:a5:17:e6:6b:da:46:f0:b7:c2:
b2:9e:6d:57:b4:ad:de:1c:dd:e1:3c:9e:06:40:0e:0e:a3:14:
d4:ab:b3:eb:69:aa:31:2d:80:47:b0:8c:d2:6a:6a:04:73:8b:
73:6e:7d:16:76:80:2e:e5:f3:6c:20:cd:b4:84:b1:b3:d1:6c:
72:81:fd:f9:fd:4f:1e:e3:53:8d:13:8e:94:b2:63:ed:5f:c4:
a9:d3:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:22:34 2026 by rpki-client