Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/HffM29R42fpCfN2qzwUjeJ-H-S0.roa
File: HffM29R42fpCfN2qzwUjeJ-H-S0.roa (raw, json)
Hash identifier: PTCqTbI3aQtr5zYX+8hriBPXqPfTgAil3GxXOXcU5Nk=
Subject key identifier: 1D:F7:CC:DB:D4:78:D9:FA:42:7C:DD:AA:CF:05:23:78:9F:87:F9:2D
Certificate issuer: /CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
Certificate serial: 019FF663EC4D084AD0DD1F999A511E4136D4
Authority key identifier: 39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/HffM29R42fpCfN2qzwUjeJ-H-S0.roa
Signing time: Wed 12 Aug 2026 14:32:51 +0000
ROA not before: Wed 12 Aug 2026 14:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219307
IP address blocks: 2a0c:b300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:63:ec:4d:08:4a:d0:dd:1f:99:9a:51:1e:41:36:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
Validity
Not Before: Aug 12 14:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1df7ccdbd478d9fa427cddaacf0523789f87f92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:55:f0:7f:d0:eb:74:d6:c0:3a:ed:45:fb:
ea:94:9d:31:ce:14:fb:0c:ff:50:24:03:b4:2e:ee:
98:74:40:11:0c:20:79:93:17:5a:f4:1e:a5:6b:a1:
4c:fa:f5:5c:8e:c3:70:9f:8e:7b:c1:2f:b8:cc:2f:
15:41:e6:4a:6c:3e:8d:a1:ac:c6:e0:8c:d9:17:0a:
d8:d2:12:d1:ab:fa:1c:fb:22:9e:08:c2:11:ae:4f:
9f:07:21:27:66:d8:4b:8e:eb:43:af:c9:77:35:33:
9c:ee:1e:3c:21:92:0c:8e:72:d4:5b:c3:9c:f5:50:
24:d4:2f:11:b3:29:59:f1:20:8b:85:18:e8:aa:7f:
09:19:d1:18:7d:17:a9:4e:95:4a:b4:61:ef:ce:8f:
d2:a5:21:60:c8:0e:af:f1:7e:8a:0c:bf:f3:ef:19:
0d:b6:0c:88:3e:a7:09:2c:c1:cc:02:13:6c:f5:fb:
80:03:93:6f:2d:c4:d6:da:13:74:a1:b7:f8:a2:5a:
42:ac:52:04:ba:3d:50:8e:61:9e:79:dd:46:3e:ea:
2b:75:53:f6:b2:05:50:76:6d:92:37:47:31:fa:8e:
b9:48:7b:78:06:98:ed:3b:11:49:83:8a:f8:cb:4e:
12:d8:20:12:53:5a:ad:d9:20:b7:a7:05:4e:b0:b1:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F7:CC:DB:D4:78:D9:FA:42:7C:DD:AA:CF:05:23:78:9F:87:F9:2D
X509v3 Authority Key Identifier:
keyid:39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/HffM29R42fpCfN2qzwUjeJ-H-S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b300::/32
Signature Algorithm: sha256WithRSAEncryption
1f:0a:2a:61:c8:52:1a:53:28:19:71:f0:99:60:aa:99:fb:af:
e7:59:48:ec:c6:85:87:29:14:33:99:f6:2a:bb:fd:29:0c:5d:
ca:30:60:97:5a:00:08:69:74:d4:ba:e8:a4:ea:ed:05:be:79:
aa:c2:70:8d:22:e3:04:cd:16:bd:7c:c8:38:b8:ec:ce:0d:72:
0d:4f:c0:fb:37:87:7c:e3:09:00:ab:73:98:01:d0:9f:f4:7a:
6e:09:42:c3:df:65:53:9b:a0:cb:2b:15:19:44:fb:d9:25:cf:
b2:a9:d8:c8:b5:70:ee:0c:c1:a3:db:f4:77:c5:ca:66:42:d5:
aa:9b:b1:cf:d5:80:8c:92:b2:38:9e:a1:e8:6f:4d:1c:c8:6c:
06:b2:cc:c2:0e:15:c9:e8:9a:38:ac:49:57:23:54:d2:b9:e6:
3a:01:07:0b:4b:0f:fa:2b:e7:a1:75:f4:0f:ed:b0:8f:6c:58:
7b:6f:85:06:5f:26:b1:61:9e:28:b1:f1:b4:a2:96:85:88:28:
99:fd:c2:7f:8a:d5:99:01:ce:53:ad:a0:c9:99:f3:25:f4:25:
d9:3e:4e:aa:22:06:16:f2:03:0b:4f:3c:6d:91:ee:cd:0a:7c:
26:8b:96:0e:a9:72:e5:85:8c:6b:f2:16:1c:10:58:64:51:fc:
e2:2b:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:23 2026 by rpki-client