Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/HKypfy3IA6pT4YvglTXUHyxkgEU.roa
File: HKypfy3IA6pT4YvglTXUHyxkgEU.roa (raw, json)
Hash identifier: cXv0mcWnIjWaVmbKqMVEqAqm1B/9CYm+PJ2wFnGs8o8=
Subject key identifier: 1C:AC:A9:7F:2D:C8:03:AA:53:E1:8B:E0:95:35:D4:1F:2C:64:80:45
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A15B089F7DC5ED5AE967FED057EA02D69A
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/HKypfy3IA6pT4YvglTXUHyxkgEU.roa
Signing time: Tue 20 Oct 2026 20:37:34 +0000
ROA not before: Tue 20 Oct 2026 20:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 79.110.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:08:9f:7d:c5:ed:5a:e9:67:fe:d0:57:ea:02:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 20 20:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1caca97f2dc803aa53e18be09535d41f2c648045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:8b:cc:da:89:37:0e:1a:6e:09:23:eb:7d:
15:ea:0a:19:97:ef:7d:ee:39:9b:9f:f3:cb:34:4a:
5c:14:73:61:07:d7:c7:d9:67:1d:28:b1:4c:1d:ee:
70:73:28:ed:8e:a7:7c:c5:60:38:9c:63:3a:88:9d:
b4:ee:fa:c6:14:4a:6f:d3:35:09:9d:23:9d:c8:b3:
25:7a:03:bc:46:22:fe:76:5a:d7:c9:24:81:32:f0:
8a:4a:1a:e3:21:04:d4:69:b7:69:ed:7f:7f:e1:be:
f7:2b:0d:36:b9:da:6a:2a:53:a8:a2:cb:9d:06:0e:
27:e9:11:fc:3d:bd:29:9e:6c:49:77:92:3b:36:14:
98:01:d3:1d:24:01:37:ea:c7:48:25:00:58:15:6d:
7c:4a:44:e1:b7:44:65:92:a2:e2:a6:54:cc:b9:60:
42:41:87:16:e2:19:a8:1c:ca:b7:d5:25:79:24:ff:
f9:8f:e4:dc:3d:b1:f9:69:66:32:61:f6:29:d4:d7:
7f:8a:a4:2e:2b:b1:8d:d9:20:37:b9:b5:c0:df:73:
0a:b2:3d:6d:e9:ac:aa:80:85:b5:3d:67:28:72:6d:
f9:19:69:d1:13:ed:4e:5a:ef:80:91:f0:cd:eb:a3:
ae:f5:a9:9d:e8:71:27:b5:47:33:39:ed:13:8a:2d:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:A9:7F:2D:C8:03:AA:53:E1:8B:E0:95:35:D4:1F:2C:64:80:45
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/HKypfy3IA6pT4YvglTXUHyxkgEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.1.0/24
Signature Algorithm: sha256WithRSAEncryption
22:71:4f:95:94:6f:ec:e6:77:12:11:38:3e:69:66:a7:41:38:
f3:43:05:0b:85:f2:ce:39:79:bb:30:b8:47:68:42:66:3b:6b:
70:f8:17:0e:a3:aa:67:19:5e:bf:41:2e:84:0d:68:41:49:f5:
3a:71:51:37:cd:b4:9d:a0:0d:ab:c8:10:18:73:79:46:5b:12:
25:04:42:86:65:de:1a:44:a8:03:94:a4:1d:b6:c9:b0:77:a7:
3b:b9:13:99:db:0e:0b:33:b4:e3:fa:40:2a:5b:05:5a:58:4d:
4e:32:8b:03:df:21:bb:49:f8:ce:ba:9b:f3:1e:ea:21:c8:60:
c5:7b:f4:af:0f:9e:6d:c8:cd:47:4f:4f:74:b1:f4:3c:d6:30:
a8:c9:49:98:be:84:f3:04:5d:21:e2:c2:fb:27:2f:79:8f:c7:
10:21:cd:03:8b:21:81:ed:db:a7:0f:5c:a2:90:1a:62:88:90:
b1:d6:89:71:b7:83:cd:1f:3b:cb:e3:66:9e:f8:37:5a:c8:e6:
d0:d3:3a:85:a9:64:19:f5:10:61:72:21:17:7a:87:55:d1:c2:
f3:72:f2:1f:ca:97:12:4d:f6:6b:02:60:85:f3:81:50:29:62:
c1:76:65:f5:0d:a2:a7:f0:bd:d8:77:26:39:2f:b6:ba:bc:f7:
35:8c:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:43:44 2026 by rpki-client