Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HRM1s9SgvZathu2agrprhVUWRts.roa
File: HRM1s9SgvZathu2agrprhVUWRts.roa (raw, json)
Hash identifier: 7clgaQTtrxMjuVUu+JxpUVu7WEDf7lrVA+v31hUWVh8=
Subject key identifier: 1D:13:35:B3:D4:A0:BD:96:AD:86:ED:9A:82:BA:6B:85:55:16:46:DB
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019F3BFADC8137FCDD5952DC714E47D73244
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HRM1s9SgvZathu2agrprhVUWRts.roa
Signing time: Tue 07 Jul 2026 09:48:43 +0000
ROA not before: Tue 07 Jul 2026 09:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 85.239.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:fa:dc:81:37:fc:dd:59:52:dc:71:4e:47:d7:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 7 09:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d1335b3d4a0bd96ad86ed9a82ba6b85551646db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:63:4e:fb:d3:92:4c:8a:7e:d0:b4:50:9a:
0b:fb:0d:85:a7:b8:63:ca:8e:4e:13:b4:52:76:ca:
27:37:90:2d:a4:8d:cb:a9:53:e3:68:03:10:61:6e:
6a:95:2b:6b:ee:5d:52:b7:a5:2a:13:67:48:cf:e8:
3d:37:5d:b9:d1:74:a8:92:97:12:db:c7:38:62:75:
45:a7:bd:47:84:fa:f6:be:95:6e:7c:99:bd:fb:9a:
ca:b5:56:96:42:0e:04:be:1c:7f:2e:54:1c:ce:fc:
37:2f:56:7e:fd:1a:d2:ee:86:ea:4c:4b:9a:25:a2:
6f:ca:d8:65:b2:cb:0b:85:49:e4:9e:6d:d3:cb:a7:
4b:64:34:37:6a:d4:17:27:8c:bd:12:fe:6f:57:ac:
26:db:71:c6:6f:98:0f:e3:19:6c:6e:66:d1:43:b8:
07:17:f4:ff:01:f4:99:c9:5a:56:01:11:44:39:bf:
4c:e4:b8:48:bb:e2:2b:df:73:aa:bc:65:d0:2d:a9:
c1:04:22:a4:9e:36:8a:2a:94:94:cd:e4:f8:7b:6d:
1f:2d:18:bd:2b:c9:ea:99:c2:ee:a6:06:39:8a:01:
25:60:f2:95:c6:88:5c:99:b7:4c:08:cd:b2:1e:e5:
b7:7a:4f:ae:b7:dc:d7:47:59:23:06:69:8d:b5:9d:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:35:B3:D4:A0:BD:96:AD:86:ED:9A:82:BA:6B:85:55:16:46:DB
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HRM1s9SgvZathu2agrprhVUWRts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
44:10:68:65:02:eb:05:c3:4b:8d:a3:82:36:53:9b:63:ae:68:
8a:76:88:06:f9:87:e8:b0:b1:b0:17:4c:27:12:b3:0f:ce:cd:
13:a0:48:1e:b5:e6:76:67:0a:8d:fa:a6:29:34:0d:1b:2a:6d:
30:c8:d2:b8:83:4e:eb:ff:c5:45:00:28:18:f3:59:1f:37:7b:
0b:58:d0:82:b0:eb:f2:c5:eb:7c:19:e7:83:b5:e9:a7:d9:cb:
ff:cf:1a:e4:9c:d7:2e:84:45:21:ff:05:5e:a2:80:36:36:8d:
15:9a:81:81:49:67:4f:cb:2e:2b:33:a9:64:6e:2e:e5:27:9a:
90:e8:0c:1d:15:f5:e1:2e:44:5c:3e:2f:81:64:27:d3:06:d4:
b0:95:f3:60:7c:1e:d3:31:d1:bb:f4:ea:8a:68:90:65:27:c0:
f2:7f:73:1d:4b:82:26:51:41:40:14:f0:89:cd:b8:e6:e3:f0:
c5:a1:dc:9c:b3:a1:37:eb:92:7e:ca:cd:09:44:09:21:70:de:
a5:5a:cd:53:c6:24:fe:56:dc:8b:02:c3:74:0f:1d:17:8b:9d:
19:3a:2b:c0:7a:34:56:59:72:3b:9b:79:9d:f5:21:0f:ff:20:
bd:9d:81:d1:52:41:9f:80:83:5f:55:c6:f8:c4:da:88:9f:af:
e2:15:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:02 2026 by rpki-client