Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HUyFgCKsUA5Agv5QEUxG_wFuzrY.roa
File: HUyFgCKsUA5Agv5QEUxG_wFuzrY.roa (raw, json)
Hash identifier: CFqS4Iq2gaQCUzDZG+owqDmYID+ZYrlBT52Vf4JjLXs=
Subject key identifier: 1D:4C:85:80:22:AC:50:0E:40:82:FE:50:11:4C:46:FF:01:6E:CE:B6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A12433C81840AA1D9C4B2704C2659B8828
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HUyFgCKsUA5Agv5QEUxG_wFuzrY.roa
Signing time: Sat 10 Oct 2026 05:05:35 +0000
ROA not before: Sat 10 Oct 2026 05:05:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218687
IP address blocks: 94.156.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:33:c8:18:40:aa:1d:9c:4b:27:04:c2:65:9b:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 05:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d4c858022ac500e4082fe50114c46ff016eceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:01:74:b8:bc:d9:c2:81:8f:c9:ca:7d:6f:
d1:28:f0:83:e9:32:89:ab:d6:ce:cb:21:32:22:a3:
c7:d8:9b:11:86:ec:c2:69:89:e4:76:5a:3d:d4:3e:
21:36:7c:db:2d:26:5c:e6:c7:41:ad:da:93:4b:1b:
7d:fa:d7:8e:21:fc:2b:d4:22:b5:93:b6:ad:52:45:
0a:3f:5f:24:6f:a6:52:b3:84:ed:88:60:f9:44:3a:
d6:16:c9:59:2a:e8:de:d9:a4:61:6b:f3:f3:da:7a:
4c:a4:63:f3:62:c1:4a:8b:27:b2:3b:be:35:cc:87:
a2:cb:d6:16:96:67:2d:e7:bd:24:b5:59:48:9a:6d:
c5:8c:50:83:89:3d:9b:50:aa:47:38:6f:45:2e:57:
a1:e0:3a:e2:6c:a0:a4:be:5c:3d:28:57:e6:22:31:
1e:68:14:43:7c:c9:99:76:a9:63:95:2d:d2:c8:26:
9f:5b:62:69:46:48:f9:07:39:db:3c:e9:0d:00:94:
d5:70:78:27:1a:b3:59:8e:e3:37:7e:db:27:e2:3c:
f8:ce:a7:f0:9d:f5:7b:16:63:23:cc:5b:c9:12:32:
ed:70:95:14:2d:8a:a3:10:9d:48:32:57:02:da:92:
19:bc:50:59:7c:44:c0:c7:3e:4a:a4:83:ad:5b:45:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:85:80:22:AC:50:0E:40:82:FE:50:11:4C:46:FF:01:6E:CE:B6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HUyFgCKsUA5Agv5QEUxG_wFuzrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
37:60:ef:ff:37:f6:81:42:46:e7:3b:01:34:0d:54:ed:03:ff:
eb:a1:f5:d2:6d:f8:bf:9a:53:9b:b6:d0:fd:05:95:97:b9:63:
d4:af:19:f4:81:7b:6f:4f:5a:6f:93:f2:a5:9e:4e:af:83:da:
6b:fb:21:7b:cd:c7:25:e1:28:06:a3:71:87:27:2d:7a:ab:66:
48:a0:17:4a:21:d7:6a:18:b2:75:8a:79:a3:25:d5:34:a3:ff:
8b:ef:cd:a9:d0:93:5f:c4:b5:9b:2c:52:44:3d:79:1f:5e:2c:
7f:05:96:0c:15:56:1e:12:e4:bd:d6:f5:7b:ea:c0:1e:d3:d0:
a0:5e:e7:ad:5c:b2:e3:15:ca:f9:29:bd:3b:02:7f:a1:47:fa:
de:59:8d:a9:14:d1:4f:26:8e:c7:1f:bd:2c:b5:c2:fb:0f:06:
99:73:54:e2:e7:4a:4a:b8:b3:b3:95:0e:92:fb:e3:ae:ca:9b:
74:61:93:82:20:5a:e1:7e:59:af:f0:78:0e:79:63:42:10:f9:
c9:1f:40:98:90:fb:d7:7c:23:45:b1:7c:c9:da:2c:3c:72:19:
48:8c:4f:c9:2d:3b:cd:a4:14:aa:4f:15:d3:6d:71:5d:61:f7:
2b:89:d3:fd:b4:c0:3b:dc:c0:c0:02:eb:a6:0e:0b:6d:fd:f4:
7b:05:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:32:19 2026 by rpki-client