Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/HhvDcRGxYktP-ooZD2Di0b_W1uE.roa
File: HhvDcRGxYktP-ooZD2Di0b_W1uE.roa (raw, json)
Hash identifier: fg1gEV9lRdq6PNRyrfFXchNYcjeZSbgEM15KK+dTco0=
Subject key identifier: 1E:1B:C3:71:11:B1:62:4B:4F:FA:8A:19:0F:60:E2:D1:BF:D6:D6:E1
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019D489E9624632C904C2DE8FC24A4CA7D37
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/HhvDcRGxYktP-ooZD2Di0b_W1uE.roa
Signing time: Wed 01 Apr 2026 10:37:25 +0000
ROA not before: Wed 01 Apr 2026 10:37:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200506
IP address blocks: 14.102.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:9e:96:24:63:2c:90:4c:2d:e8:fc:24:a4:ca:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Apr 1 10:37:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e1bc37111b1624b4ffa8a190f60e2d1bfd6d6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:f0:42:19:09:84:b3:1e:16:bf:73:ea:8c:
0f:83:d8:d5:ec:8e:c9:be:14:71:81:d4:6e:d8:35:
32:7e:d6:e6:0d:21:f5:05:a2:2c:37:e2:85:f6:99:
62:6f:6e:12:ed:fa:12:7a:36:8d:20:dd:19:04:aa:
a1:2a:38:10:cc:e0:68:6e:81:3e:eb:eb:37:be:ec:
be:80:03:23:dc:38:d4:d5:bb:52:50:0a:3f:d2:ff:
e9:87:19:1e:05:f6:4e:50:b7:3d:77:c5:d9:be:0b:
5b:0e:cf:de:54:21:87:b9:62:a7:c2:10:ed:cb:57:
b2:e0:02:8a:7b:db:51:65:07:d6:0c:68:36:34:08:
9b:26:e5:4d:bf:1e:c0:6d:96:ba:40:43:bf:6a:e6:
97:63:75:65:0f:13:40:62:83:f3:fa:2e:0c:66:74:
d9:2e:4a:b9:0b:b3:a3:72:56:f5:c1:55:b4:9c:bc:
6d:18:6f:3f:42:ca:3b:60:35:f7:d9:bb:ed:51:e4:
78:9b:08:db:5e:83:fe:1f:04:dc:ca:29:dd:bc:12:
19:a0:bf:be:ad:90:0c:5d:09:ab:37:3e:a3:1c:96:
ff:6c:a4:4b:b9:66:5f:3e:bc:96:4b:ff:42:40:0b:
77:57:7d:6a:35:f0:1a:f6:e2:4b:07:5f:33:f2:15:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1B:C3:71:11:B1:62:4B:4F:FA:8A:19:0F:60:E2:D1:BF:D6:D6:E1
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/HhvDcRGxYktP-ooZD2Di0b_W1uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:18:8c:54:62:bf:f2:9d:9d:8c:29:ae:73:0b:3e:33:a3:e7:
e7:de:1d:e9:4e:82:f1:a9:c1:43:d5:8d:73:56:50:f6:b0:be:
f4:40:08:64:14:f6:22:07:a0:ee:48:c8:3c:68:0d:db:54:33:
47:f9:9c:bf:fc:44:08:8d:81:ea:70:88:e1:69:af:f3:60:97:
63:c0:e6:cd:61:f4:c0:15:60:ee:f7:88:e6:02:8d:d4:1a:1f:
b6:83:09:ef:48:14:b9:34:f9:8c:de:50:88:1b:a3:37:77:fe:
17:5d:6c:ad:45:b4:2c:f3:d3:f3:4a:c2:78:6d:31:fe:1f:ad:
d4:00:22:8f:62:1c:0e:c4:29:4f:7f:f8:9b:06:b1:70:0a:f9:
cb:da:fe:73:b3:f8:2c:ca:f7:b7:40:f9:7d:c0:28:30:1a:2f:
3d:b4:77:00:2e:f2:0e:57:ad:78:19:08:b7:7b:05:9b:20:e0:
ac:1b:95:3f:3a:31:dc:85:c7:fb:94:f7:a5:17:ae:34:49:0c:
bd:b6:34:b1:72:6a:92:f0:34:63:71:ae:f9:9e:d0:af:f1:56:
62:cf:de:40:f7:1c:70:b9:51:eb:14:d2:20:87:1f:0b:69:c6:
f5:97:24:36:ad:8c:9a:3d:f8:10:7c:39:4c:38:05:e0:b4:3c:
a9:b2:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:00 2026 by rpki-client