Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/HMXQRJYEwWMFjXi4_zNifQwmzd8.roa
File: HMXQRJYEwWMFjXi4_zNifQwmzd8.roa (raw, json)
Hash identifier: D7J443X7Zh+r0dIaKPIBQn29cDjE1qybG77af4zAfkY=
Subject key identifier: 1C:C5:D0:44:96:04:C1:63:05:8D:78:B8:FF:33:62:7D:0C:26:CD:DF
Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial: 019CA7EFF538D77B0F47140434E680609E0B
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/HMXQRJYEwWMFjXi4_zNifQwmzd8.roa
Signing time: Sun 01 Mar 2026 05:47:26 +0000
ROA not before: Sun 01 Mar 2026 05:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 185.136.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:ef:f5:38:d7:7b:0f:47:14:04:34:e6:80:60:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Validity
Not Before: Mar 1 05:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cc5d0449604c163058d78b8ff33627d0c26cddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:71:cf:fd:ca:56:ba:f3:ee:b9:37:42:31:
ba:58:30:20:7e:36:db:79:2d:f9:02:f9:a4:44:17:
7a:95:d1:10:70:0b:ac:15:1a:de:05:75:9b:15:52:
22:eb:ef:40:da:97:4b:80:1f:28:f5:6a:e8:61:5f:
27:6f:02:56:7c:ef:ca:d8:2a:d8:0d:61:e4:83:ba:
4d:03:4d:57:70:da:01:de:56:f4:2b:9e:af:39:f7:
1b:e6:be:e1:47:1c:86:6e:d7:9e:39:0a:9f:28:ea:
3d:ba:bf:46:25:3b:1d:1b:3e:f9:7b:e9:f0:8d:0c:
f5:a0:c0:b2:1f:c4:34:8d:ce:bd:4b:4e:c2:64:58:
1a:20:4d:b8:2e:84:8f:af:c2:36:aa:f3:6e:09:42:
0c:3e:81:9e:06:69:a2:a3:91:f4:19:c8:52:f7:e8:
0d:fb:74:2b:65:f0:5c:bb:3a:6a:44:59:49:28:63:
07:f7:b9:07:27:e7:c9:8a:f5:fd:2b:80:88:53:6e:
2d:46:cb:24:31:2c:86:05:b9:47:05:a2:a1:c9:a1:
a2:c9:a6:ae:da:38:e5:6d:3f:de:52:7e:0f:fa:46:
df:8c:4a:68:67:aa:c3:49:06:b4:35:89:d3:4b:14:
75:37:04:93:5c:22:b6:36:e1:af:03:fe:d3:47:70:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:D0:44:96:04:C1:63:05:8D:78:B8:FF:33:62:7D:0C:26:CD:DF
X509v3 Authority Key Identifier:
keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/HMXQRJYEwWMFjXi4_zNifQwmzd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1a:89:02:fb:64:71:c1:2a:14:b3:2b:4a:91:0a:43:fd:84:
1c:e9:fb:77:81:0b:b3:b4:e5:8f:56:b0:1d:25:18:0c:d5:4b:
d8:40:a5:34:b3:78:ed:04:7c:46:c5:a4:77:3b:ac:76:8e:25:
43:90:a1:94:09:0f:ad:ff:cf:1f:f3:d9:f2:33:41:fd:ca:0c:
fd:79:78:d1:c7:08:5d:19:d3:d4:b4:7d:a1:25:d9:c0:20:d4:
4f:a9:6f:65:85:c0:a2:47:d1:eb:1a:76:78:e8:e3:06:51:d9:
6d:46:43:75:f0:e7:29:27:4c:b9:af:fa:20:50:05:3a:fa:55:
8b:f6:d8:8e:8f:10:17:a8:66:e5:58:21:67:27:0c:bb:79:39:
8f:4e:ef:69:46:d6:57:2d:f6:8a:4a:ce:34:4c:e6:18:63:c2:
f4:9e:e5:ac:6d:29:db:f9:7e:6b:5f:39:f7:08:d4:c2:1a:78:
5f:3c:cd:00:2f:6b:4d:97:df:0b:1a:b5:4a:7b:ef:85:57:47:
d5:d0:60:a1:9a:66:78:38:ed:83:99:26:0c:b5:0f:40:6a:ff:
83:39:48:bb:98:8d:72:95:aa:a9:94:0e:c3:dc:35:93:af:4f:
d8:77:35:98:a7:b0:5b:e1:11:dd:24:1c:93:2e:58:df:41:81:
83:4c:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:40 2026 by rpki-client