Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HlGsuRh_J-Icq2wvy8wQNhqSTQc.roa
File: HlGsuRh_J-Icq2wvy8wQNhqSTQc.roa (raw, json)
Hash identifier: ANQmFuWag7qpbLdd7ndx/kToDgi3pgJJA7mWUxUmKIg=
Subject key identifier: 1E:51:AC:B9:18:7F:27:E2:1C:AB:6C:2F:CB:CC:10:36:1A:92:4D:07
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F4638F05CDB4E467B83AAB264BEFA0AD8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HlGsuRh_J-Icq2wvy8wQNhqSTQc.roa
Signing time: Thu 09 Jul 2026 09:32:44 +0000
ROA not before: Thu 09 Jul 2026 09:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a0f:140::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:38:f0:5c:db:4e:46:7b:83:aa:b2:64:be:fa:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 9 09:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e51acb9187f27e21cab6c2fcbcc10361a924d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:e6:a4:54:3a:9f:2e:08:dd:1f:25:fe:91:
9d:d0:50:e9:2d:b1:f4:9f:79:17:47:59:8c:ac:14:
07:6e:73:ea:ae:c1:39:95:ef:3c:51:7b:a7:e5:83:
a9:5f:ba:2d:ef:42:3a:7a:2d:6c:6e:0c:a3:e9:af:
6f:b8:22:8a:a6:1e:94:20:a7:bf:0a:ba:0f:db:4e:
f9:43:59:e8:31:e5:dd:50:9e:80:8f:69:e2:38:73:
be:0f:b5:ee:8f:eb:f8:f5:94:86:87:9a:82:db:8e:
ba:32:5b:a5:15:60:cc:8e:c9:88:30:1b:d9:e5:a4:
30:e5:7f:5c:14:b8:36:dc:0a:bd:c4:27:ce:a2:c5:
49:55:46:c7:1b:7c:f9:0f:c8:e3:11:e6:0a:67:e2:
2d:c3:4c:b8:2e:86:4c:53:88:2a:05:55:ed:02:0b:
ab:22:cd:f4:fd:9f:09:4b:6d:13:a9:69:f0:d6:8d:
51:5b:b5:c8:44:2e:0c:d7:16:e9:e6:9e:c2:1d:0f:
c5:ee:19:72:1d:0d:76:7a:1d:0b:6d:c7:e3:08:30:
40:ef:1c:00:8b:b1:d5:99:4d:f3:a7:48:e7:58:c3:
8b:01:d5:42:1a:e7:c1:ec:eb:95:c4:1c:23:8c:e0:
bc:fa:15:15:de:e2:ae:9c:a7:ac:cf:c5:5a:c9:df:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:AC:B9:18:7F:27:E2:1C:AB:6C:2F:CB:CC:10:36:1A:92:4D:07
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HlGsuRh_J-Icq2wvy8wQNhqSTQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:140::/29
2a11:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
02:15:9e:39:9c:0f:4b:9c:46:08:67:f4:d9:2f:f8:14:70:73:
7d:04:6e:34:f1:95:de:09:7b:78:79:85:5a:db:42:50:3b:19:
52:4b:92:76:48:1b:3c:93:b2:ab:19:69:ff:46:7d:52:2a:c7:
ec:f6:c5:96:3d:ae:b5:7e:9a:c1:3f:4d:8a:a8:ff:03:78:38:
07:fb:1e:f7:cb:e9:f0:db:f1:e7:ee:15:0f:0b:31:1d:49:c9:
be:42:da:a3:31:45:1a:0a:55:76:bb:89:ce:a0:c4:6b:f2:7e:
6b:95:2c:d9:f4:46:4a:30:8e:c9:e9:2a:cd:08:55:92:cd:67:
52:e3:25:ba:51:12:11:23:a4:61:d4:54:c1:f2:75:36:56:74:
cf:27:bf:b2:42:8b:3f:89:e9:b2:fe:91:4b:00:02:37:4a:ae:
37:c0:f6:42:93:ce:4e:85:1b:5c:51:df:fd:7a:8c:20:19:df:
a3:c8:0c:36:ef:20:09:66:cc:f1:d4:ff:bd:d4:68:e2:04:24:
36:b1:5a:af:26:a5:10:e6:01:31:eb:72:6c:56:e0:b3:44:cd:
97:c2:a1:29:31:41:7c:09:0b:dc:3a:96:8a:c0:e4:08:33:e4:
7a:c7:97:71:58:b5:02:cf:da:10:6c:bd:18:4f:f7:1a:82:e8:
c7:15:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:43 2026 by rpki-client