Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa
File: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (raw, json)
Hash identifier: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=
Subject key identifier: 1D:10:5C:CA:5D:D7:A6:0F:59:A3:3C:F7:7C:7D:C2:E7:AC:52:C1:D5
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 019F2368676C1815898A6F2E1DE31778BD76
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208042
IP address blocks: 185.243.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:6c:18:15:89:8a:6f:2e:1d:e3:17:78:bd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d105cca5dd7a60f59a33cf77c7dc2e7ac52c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:f0:35:d0:cd:6f:33:31:5c:0d:36:37:4c:
ad:02:52:73:9b:11:75:b7:db:b7:da:85:ff:83:7e:
ff:0a:ea:74:2b:c7:48:39:59:4c:ce:72:cf:ad:89:
ed:db:77:12:8e:47:a2:50:95:b6:69:24:b7:07:65:
13:81:dc:52:33:d0:51:2b:9d:3c:71:c3:6d:55:ff:
dd:8a:b0:9e:2c:c2:fe:9c:67:31:63:23:ee:00:1a:
73:40:2f:87:82:ec:69:34:e7:80:2d:1a:ea:04:90:
1c:fc:01:d6:7e:f3:b1:03:b0:13:8e:68:3a:0f:49:
98:0e:cd:74:0e:0c:f2:4f:ca:06:ec:01:d0:c4:5c:
d1:fa:92:3a:5a:a2:28:a4:ca:31:7a:d1:0e:fb:39:
8c:e6:5d:19:05:90:56:db:74:21:16:3e:0d:82:54:
7f:34:c0:c2:2a:93:64:6e:8c:70:61:79:eb:d6:f6:
f7:30:99:3a:50:59:33:cd:36:1b:bc:d0:bf:bf:80:
b3:0e:0d:95:50:c6:03:ad:3e:36:6c:3b:4c:f5:85:
7f:60:c7:f0:b4:09:2a:22:ea:1e:9f:ab:af:c8:9c:
b3:65:c9:78:6b:b2:3d:7d:4d:44:f5:ac:77:93:29:
73:97:0c:0f:e3:7e:b8:49:77:64:f4:a3:34:e6:b8:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:5C:CA:5D:D7:A6:0F:59:A3:3C:F7:7C:7D:C2:E7:AC:52:C1:D5
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:32:6a:3a:3b:4f:8e:6e:cf:27:15:83:2e:2f:a5:85:ef:f2:
0a:a0:c0:f6:72:86:f4:3f:6b:73:15:de:8a:78:10:f8:03:30:
c1:65:73:de:0e:6b:5f:1e:75:60:a5:e5:87:c6:b6:b2:26:5f:
0a:18:49:66:51:ce:8b:9a:c4:0e:17:9a:f0:63:40:86:ea:ae:
c5:73:3a:73:a3:3d:af:44:36:70:48:ea:15:81:5f:0f:b5:2d:
e8:88:7c:2e:9b:b7:40:53:34:02:75:e0:f6:ce:9e:08:e5:6b:
8d:49:f8:95:b2:d3:18:b4:b7:73:ea:75:df:d7:a8:4e:66:8c:
3a:05:1f:e7:b2:b1:1d:02:41:d4:dd:a9:be:e9:d1:0f:39:42:
50:4d:60:25:1c:f6:39:ba:81:c4:f9:77:de:06:fe:b4:c7:d4:
c1:5e:62:d6:86:48:b3:fc:74:35:46:89:14:1d:5b:29:e5:4f:
3e:26:3a:40:13:d4:63:49:1e:7a:77:c7:60:d9:e1:ff:b3:f9:
b7:37:ea:eb:f6:0b:7a:e8:ac:08:d1:43:45:6d:f0:a6:a6:27:
a1:0d:0f:4c:ad:bc:e4:6e:f7:af:31:fe:ec:22:8e:e6:d0:7b:
1c:14:f6:e2:96:bf:4f:79:4b:f6:4b:4d:7d:db:84:66:9d:16:
1a:bd:32:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaGdsGBWJim8uHeMXeL12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOWM0NjAwMjFmMDY4ZWEyZWRiZTVmZjUwZmI5ZTBjOWFl
YmJkNzEwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDEwNWNjYTVkZDdhNjBmNTlhMzNjZjc3YzdkYzJlN2FjNTJjMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLjwNdDNbzMxXA02N0ytAlJzmxF1
t9u32oX/g37/Cup0K8dIOVlMznLPrYnt23cSjkeiUJW2aSS3B2UTgdxSM9BRK508
ccNtVf/dirCeLML+nGcxYyPuABpzQC+HguxpNOeALRrqBJAc/AHWfvOxA7ATjmg6
D0mYDs10DgzyT8oG7AHQxFzR+pI6WqIopMoxetEO+zmM5l0ZBZBW23QhFj4NglR/
NMDCKpNkboxwYXnr1vb3MJk6UFkzzTYbvNC/v4CzDg2VUMYDrT42bDtM9YV/YMfw
tAkqIuoen6uvyJyzZcl4a7I9fU1E9ax3kylzlwwP4364SXdk9KM05rgVsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0QXMpd16YPWaM893x9wuesUsHVMB8GA1UdIwQY
MBaAFG2cRgAh8GjqLtvl/1D7ngya671xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlp4R0FDSHdhT291Mi1YX1VQdWVESnJydlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt
YzMxYmRlNTEwMDg1LzEvSFJCY3lsM1hwZzlab3p6M2ZIM0M1NnhTd2RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1
LzEvYlp4R0FDSHdhT291Mi1YX1VQdWVESnJydlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufPbMA0G
CSqGSIb3DQEBCwUAA4IBAQB9Mmo6O0+Obs8nFYMuL6WF7/IKoMD2cob0P2tzFd6K
eBD4AzDBZXPeDmtfHnVgpeWHxrayJl8KGElmUc6LmsQOF5rwY0CG6q7Fczpzoz2v
RDZwSOoVgV8PtS3oiHwum7dAUzQCdeD2zp4I5WuNSfiVstMYtLdz6nXf16hOZow6
BR/nsrEdAkHU3am+6dEPOUJQTWAlHPY5uoHE+XfeBv60x9TBXmLWhkiz/HQ1RokU
HVsp5U8+JjpAE9RjSR56d8dg2eH/s/m3N+rr9gt66KwI0UNFbfCmpiehDQ9Mrbzk
bvevMf7sIo7m0HscFPbilr9PeUv2S01924RmnRYavTJb
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:47:59 2026 by rpki-client