Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/h7ZJeLoEm9cr-52_Jk_N2cwTcZM.roa
File: h7ZJeLoEm9cr-52_Jk_N2cwTcZM.roa (raw, json)
Hash identifier: L7GcpfDwgBpBvxZVg3DcuUlcPwm/rgquHuzGIa1/ZhU=
Subject key identifier: 87:B6:49:78:BA:04:9B:D7:2B:FB:9D:BF:26:4F:CD:D9:CC:13:71:93
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01A1BD0957FF6BABFF46E5AD90D3F71A96CF
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/h7ZJeLoEm9cr-52_Jk_N2cwTcZM.roa
Signing time: Sun 08 Nov 2026 21:21:08 +0000
ROA not before: Sun 08 Nov 2026 21:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210699
IP address blocks: 45.152.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:09:57:ff:6b:ab:ff:46:e5:ad:90:d3:f7:1a:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Nov 8 21:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87b64978ba049bd72bfb9dbf264fcdd9cc137193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:a2:57:0f:ac:2c:ce:5c:db:c8:ad:2e:3b:
2c:19:cb:b1:f3:54:57:29:62:cb:2a:38:a6:47:88:
94:bf:32:31:c4:f5:db:5f:51:90:5d:80:ad:43:ac:
9d:6e:48:fe:6a:e3:8a:98:21:9f:7f:8e:af:c8:ce:
90:13:f6:c2:a6:3a:c6:a3:e9:db:43:03:f4:82:69:
4e:3d:ab:c4:92:ee:11:84:51:76:6e:e5:de:ab:7e:
d3:e6:38:62:54:72:e4:80:b7:cc:31:07:8c:f9:53:
bf:74:66:9d:a4:a1:a6:90:33:81:b4:9f:62:6b:33:
ee:3a:ab:ca:26:a0:9f:2d:0b:92:44:5b:39:fd:71:
be:72:b4:db:af:ec:a6:55:c4:26:9b:ec:e4:b6:b7:
7e:e1:54:b5:81:20:9b:bc:b1:e8:88:a4:56:ea:4c:
5f:3f:79:50:c9:5f:ac:cf:67:75:e5:a3:ca:07:a3:
ef:31:f1:4b:e4:85:98:83:38:98:71:4b:26:b2:91:
01:d7:d1:70:aa:bd:5e:28:c3:1c:c0:50:99:69:64:
50:9d:28:42:54:8a:d7:77:fe:ce:16:2e:c1:b8:4f:
6a:81:af:e2:d9:76:16:40:fc:47:00:94:4a:1c:e3:
ad:4e:e5:56:df:16:0b:0b:36:31:7f:ed:5a:c3:56:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:49:78:BA:04:9B:D7:2B:FB:9D:BF:26:4F:CD:D9:CC:13:71:93
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/h7ZJeLoEm9cr-52_Jk_N2cwTcZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4e:c9:62:fd:06:3e:37:a7:53:11:7b:b1:42:cb:ef:0a:a5:
89:ac:22:03:81:0b:be:40:28:67:18:2f:ba:c7:66:9c:4f:c6:
7d:31:c4:92:10:45:aa:25:19:ce:59:07:94:e4:da:46:47:06:
c8:e4:93:6c:68:e8:c2:8c:90:87:96:15:e6:a3:ce:5a:ce:f6:
6d:49:dd:76:3f:d8:06:d6:79:2f:e8:89:67:03:4d:93:12:1b:
05:3c:0b:41:9d:6c:3c:20:1c:87:ec:6c:cb:6b:3a:6c:a0:b3:
43:73:60:83:85:f1:55:6a:06:56:4e:4b:e3:5a:38:92:84:fb:
3e:f6:f5:a3:9a:0d:3e:0a:39:d6:f1:6e:89:04:48:09:7f:1c:
e8:fb:f9:2f:02:69:2a:38:82:3b:c8:bb:01:a6:11:1a:14:e2:
84:4f:5a:7e:a1:77:d2:59:09:98:36:23:12:fc:0c:02:cd:3c:
6c:95:20:d1:92:fe:75:bf:41:11:f1:40:83:84:ae:67:c1:84:
da:8b:2f:15:00:ab:38:7c:50:75:e3:e4:31:e2:e1:be:e1:41:
dd:07:56:ac:68:2e:60:35:fc:e2:41:a8:3f:ee:03:c4:41:63:
87:f3:5a:22:55:11:ff:ec:12:04:90:05:e7:84:7d:f8:e4:a7:
2e:46:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:34:01 2026 by rpki-client