Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HQvvNJN_EgfaaH4G3cei8_3bPIU.roa
File: HQvvNJN_EgfaaH4G3cei8_3bPIU.roa (raw, json)
Hash identifier: K8tanbFLHpS9tx1DxA71Dww9Q5SzcDkaEIlM6Ba3MsE=
Subject key identifier: 1D:0B:EF:34:93:7F:12:07:DA:68:7E:06:DD:C7:A2:F3:FD:DB:3C:85
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A15F15C108D63B11015F8C46965A127312
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HQvvNJN_EgfaaH4G3cei8_3bPIU.roa
Signing time: Wed 21 Oct 2026 15:30:23 +0000
ROA not before: Wed 21 Oct 2026 15:30:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 178.239.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:15:c1:08:d6:3b:11:01:5f:8c:46:96:5a:12:73:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 21 15:30:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d0bef34937f1207da687e06ddc7a2f3fddb3c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:0b:38:d5:3e:36:cb:94:8e:c0:24:64:06:
7a:28:66:3c:e0:02:27:3d:58:9e:6a:14:b3:ff:ee:
e0:45:d8:54:b0:42:29:f9:8b:1b:9e:b4:4e:10:bb:
e5:ac:ff:d9:56:e1:a7:43:7a:84:70:d0:89:1d:47:
2c:10:97:27:c7:2b:22:d3:d5:df:71:5f:d2:40:b8:
c5:4f:d9:9d:d1:09:b5:4b:c1:f5:5e:55:43:34:28:
55:bd:0f:7a:fc:34:aa:34:f0:21:76:72:b6:52:1d:
31:82:39:30:87:e2:74:18:d4:5c:a3:78:8c:5f:7d:
bb:e0:a9:15:40:61:a7:10:79:06:4f:07:18:14:d7:
2e:58:db:24:cb:93:d6:cd:c5:d3:3f:f0:0b:77:0b:
58:8c:8e:15:a9:6d:f7:2a:56:28:d5:80:64:a0:f5:
52:7c:6e:57:64:7a:07:08:1e:a2:98:0f:9a:17:c9:
60:b7:4a:13:67:01:52:65:a5:1f:9c:52:ca:46:4e:
06:b9:e3:b3:b1:db:6a:4e:06:d8:bf:86:69:73:2d:
dd:e5:ff:43:40:ee:42:c0:4f:82:16:4f:2a:f2:51:
aa:9c:c0:61:08:e8:d6:f4:90:35:8f:d3:df:36:e8:
55:4a:45:1d:b1:06:a5:b3:c5:da:df:62:0e:bb:10:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0B:EF:34:93:7F:12:07:DA:68:7E:06:DD:C7:A2:F3:FD:DB:3C:85
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HQvvNJN_EgfaaH4G3cei8_3bPIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ef:c1:6c:f9:e8:1c:30:4d:12:64:99:b6:1e:73:28:87:68:
aa:11:45:53:2f:e6:7d:a6:9f:36:b4:fe:26:cf:7d:bb:b0:85:
26:11:6a:3c:41:f0:3b:fc:35:a5:2a:2b:bd:12:3e:b1:33:93:
8e:e9:ff:9f:d7:8e:a6:81:e0:47:4d:ea:a7:cf:ee:65:1b:9b:
11:d5:4a:c3:06:05:0d:b3:45:4f:67:f5:81:c6:42:26:f8:ff:
46:0b:53:da:40:31:c9:47:0a:8d:e1:4d:e5:63:61:46:42:cf:
9a:af:4b:88:6f:61:15:ef:26:ab:fa:c5:93:ec:4d:ec:a9:16:
c8:59:3a:9c:54:e6:0b:da:4a:4f:b6:5b:c1:8b:15:f2:20:85:
1c:9b:17:a7:90:96:e7:55:97:db:01:a4:4b:f6:53:31:9c:a2:
ba:5b:b5:fc:f3:27:bf:b7:65:be:a5:14:96:55:bb:39:42:2f:
41:0d:25:61:a6:e9:44:ae:31:bd:aa:50:18:a7:ca:6c:a3:0c:
8a:e5:b5:8c:1f:78:f2:e6:9b:19:78:4c:6a:f0:d6:a3:36:48:
cc:8b:11:e7:a3:ae:7a:6a:30:7b:5f:1b:13:70:25:f0:de:fb:
ef:fa:2a:c9:86:be:d3:6f:d0:30:36:d4:74:3f:8a:ce:7a:e3:
05:27:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:14:25 2026 by rpki-client