Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa
File: v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa (raw, json)
Hash identifier: tBQwZZG9DL7zjt0yr5VRGUWvKlkN9L/sX8V6/7cxKZ8=
Subject key identifier: BF:4F:87:EA:47:BB:84:C4:6E:42:E5:70:FE:8A:36:42:D5:20:48:D1
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019FAC809095CB884CAE31A8FCDD1CC86C6C
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa
Signing time: Wed 29 Jul 2026 06:12:14 +0000
ROA not before: Wed 29 Jul 2026 06:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198077
IP address blocks: 89.18.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:80:90:95:cb:88:4c:ae:31:a8:fc:dd:1c:c8:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jul 29 06:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf4f87ea47bb84c46e42e570fe8a3642d52048d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:c7:72:e7:87:89:ab:f4:bd:e2:ad:fc:4d:
4f:74:35:7e:9c:71:02:d8:cb:1c:6b:31:51:58:2c:
55:71:7d:19:98:a2:b4:d2:f9:ae:3d:c6:16:08:6a:
aa:d1:8e:a5:30:78:2a:61:f5:0d:4e:7e:ca:e5:61:
ff:51:23:e0:2e:99:36:53:1f:c5:1d:44:a7:d1:91:
a1:52:6d:27:10:d0:70:2b:b2:04:3a:83:97:c5:e4:
db:7b:10:c9:f2:f3:7e:a8:c1:34:14:72:2e:63:87:
ab:9c:1c:a9:32:95:48:93:7a:c9:2e:a7:dc:d6:6f:
1b:88:c1:62:7f:87:3a:b0:40:7d:87:c5:64:c3:fd:
42:0f:68:8b:ed:2d:17:4b:27:48:d9:b1:58:e2:fc:
e0:ab:ae:30:26:df:be:fc:ba:75:38:1f:c6:6b:37:
53:24:13:15:c1:8b:8d:a4:bc:e7:b1:58:dc:25:79:
39:a6:d8:2e:ff:37:53:60:7e:dd:ed:da:b7:e2:26:
87:97:24:30:66:1d:1c:e4:f0:20:26:49:a2:f1:fb:
e1:e8:6a:43:29:9b:c8:d6:73:b0:dc:bb:f8:53:43:
22:e0:99:28:cb:3b:0d:82:6d:59:af:86:bd:4d:5f:
eb:98:14:7b:90:08:0b:dd:57:e1:1f:88:f6:4c:18:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:87:EA:47:BB:84:C4:6E:42:E5:70:FE:8A:36:42:D5:20:48:D1
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.60.0/22
Signature Algorithm: sha256WithRSAEncryption
13:d0:df:f7:f3:2a:92:4d:49:5b:7c:96:c0:5d:31:da:53:35:
26:26:de:3b:41:59:2d:fc:6b:fd:6a:b7:ef:96:15:d7:19:97:
ae:6f:b2:aa:82:0e:b2:8d:df:c5:a9:d2:23:d2:33:88:73:d8:
52:0d:b5:ce:1a:4a:f3:6b:fb:73:00:2a:1a:64:a8:d1:12:30:
ad:a4:b1:91:0a:3e:d5:33:f6:9b:b0:93:b9:b4:37:89:37:13:
db:65:be:ad:9f:ef:9a:3e:8c:88:58:a3:a3:51:b6:fb:49:99:
6d:a9:8a:cb:0e:aa:1e:f5:4c:76:bd:5e:07:d8:86:a2:16:18:
8f:0f:eb:33:63:b8:7f:57:6b:d3:8b:d8:40:37:77:d9:f5:84:
6e:62:87:f3:94:3b:14:59:31:dd:eb:0b:8c:a4:c6:a1:dd:50:
71:08:b3:0f:47:ac:40:99:ab:62:b1:8b:c3:39:f4:8b:38:9a:
74:b5:92:8e:e9:96:be:ce:d1:e0:67:d5:e1:34:c1:f3:c8:8e:
9c:87:58:01:1d:d2:ba:ce:af:b6:26:c6:30:59:f5:20:99:89:
3e:2d:d6:fc:48:0e:68:ab:3d:bd:b9:b7:17:51:65:e4:d2:fa:
bf:f1:27:b7:83:25:3c:12:a6:18:7b:1c:d9:19:25:1e:a1:0d:
0b:35:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:15:11 2026 by rpki-client