Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa
File: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (raw, json)
Hash identifier: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=
Subject key identifier: F8:79:D6:64:E4:9F:63:37:CC:A6:47:47:40:A8:0A:35:9D:77:AC:F2
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 019E8D5966A16FD0968EFA46D4CC0CFED9BF
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa
Signing time: Wed 03 Jun 2026 11:58:26 +0000
ROA not before: Wed 03 Jun 2026 11:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 195.63.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:59:66:a1:6f:d0:96:8e:fa:46:d4:cc:0c:fe:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Jun 3 11:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f879d664e49f6337cca6474740a80a359d77acf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:67:f1:04:ed:99:de:77:b7:52:04:1f:a7:
92:09:f3:62:8e:7a:c0:4d:58:b7:df:e3:df:eb:e8:
f2:b0:be:fe:a1:43:b1:10:53:2d:e0:e8:c7:7a:1d:
35:ec:a1:9a:81:20:74:93:3b:02:71:15:23:de:54:
56:37:ea:06:9d:cf:e4:f7:aa:dd:69:3e:cc:24:8a:
49:13:e4:2a:be:19:12:cc:1c:65:b3:af:bd:88:c4:
7c:be:b3:ee:b8:0e:cf:8e:bf:cd:24:77:25:6d:8d:
f1:dc:3f:12:c3:c0:89:9d:5f:d4:b7:fa:82:2d:62:
3f:49:e6:71:4d:c9:7e:24:b9:4b:76:aa:78:3e:6c:
69:ff:9c:3f:ff:4f:3b:24:9a:76:77:a4:dc:df:ae:
f3:56:34:9b:7b:87:48:4e:c2:c7:d7:b2:bc:e9:1c:
c4:3a:1c:75:de:3b:8c:e3:5f:48:ab:83:2c:c7:9a:
9c:25:d4:14:b3:fa:0d:42:11:c0:9c:be:26:6b:19:
56:1d:81:7d:4b:60:c5:88:83:57:41:20:32:a5:14:
70:59:7e:2a:a9:19:21:f5:ee:54:69:28:17:dd:86:
ee:97:dc:b4:71:96:49:cd:f8:68:66:dd:ca:ac:b0:
b1:18:a0:4b:6a:f8:d4:1f:20:82:96:0f:22:22:80:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:79:D6:64:E4:9F:63:37:CC:A6:47:47:40:A8:0A:35:9D:77:AC:F2
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.63.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:cc:79:68:64:88:50:eb:ff:ec:31:f6:8b:5d:62:08:3b:22:
3b:af:12:51:ec:4b:c1:e8:ff:c6:78:1b:66:e2:4d:9e:7c:a4:
dc:8d:74:e3:26:4c:27:d1:32:40:26:d1:1a:4e:5c:94:37:7a:
f9:74:8d:0b:c8:53:28:9e:0b:5f:f7:40:b2:af:70:18:56:8a:
c0:6a:5c:bd:c8:89:ca:28:ac:3f:a1:d7:25:c6:2e:9a:df:26:
5c:be:ec:3f:0f:dd:2e:0e:c1:f8:3a:73:c6:b4:11:7f:46:c6:
ad:f4:f8:57:81:38:ac:79:6f:68:64:20:1a:14:6c:24:17:bb:
71:e0:72:38:cc:9b:ac:4e:36:f2:a8:86:e4:b4:58:30:ee:35:
4a:30:f7:a1:e2:d3:b7:b4:f5:38:21:ee:63:5e:1c:a1:91:9f:
07:ea:65:0a:52:0b:31:a5:34:24:b6:bf:1c:5b:1a:f4:e4:51:
dc:77:db:3b:52:85:f2:74:f4:9a:4e:c3:c4:df:a0:ee:ae:4a:
53:04:5b:d9:d6:10:ab:f6:65:3e:91:14:58:6b:ce:25:73:59:
76:3b:4e:cc:f0:38:8f:ed:72:6c:e2:30:81:1a:8f:7d:c2:cb:
61:5a:86:48:a0:5e:a1:0b:6a:1a:8f:3a:21:56:c5:4b:28:74:
c9:fd:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:40:02 2026 by rpki-client