Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/HhZ_QfAVVWEjTUgyEZALP1SKayk.roa
File: HhZ_QfAVVWEjTUgyEZALP1SKayk.roa (raw, json)
Hash identifier: pzcqmWDZa4DD01+YgVwG705sYe7vn0DSP8QcQqTdsWY=
Subject key identifier: 1E:16:7F:41:F0:15:55:61:23:4D:48:32:11:90:0B:3F:54:8A:6B:29
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689BD068DA136DFEFEBEBEDED014BB
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/HhZ_QfAVVWEjTUgyEZALP1SKayk.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213185
IP address blocks: 2a0d:1a40:7553::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9b:d0:68:da:13:6d:fe:fe:be:be:de:d0:14:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e167f41f0155561234d483211900b3f548a6b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:38:89:f9:0c:0a:98:51:0c:a9:34:23:e3:
a9:4b:da:d0:10:7b:a2:ed:47:0c:f8:1c:49:4b:0a:
be:7e:0c:d6:51:a8:a6:36:c4:3b:f3:32:ea:e5:94:
2c:26:ac:7b:93:7c:b0:07:21:1f:fe:c7:c1:5d:0a:
b7:12:91:a9:ac:bd:75:2c:57:19:a8:92:71:c6:94:
d6:31:d6:e2:dd:a9:00:79:7b:9f:62:42:25:22:a7:
ec:08:66:64:8d:a0:11:17:cd:a0:90:df:03:5f:e7:
46:c1:9d:c1:f5:d4:27:a4:94:8a:64:8b:2c:66:e2:
05:1f:70:19:e8:f9:b9:82:04:b1:e9:ca:48:3c:39:
62:c6:09:aa:eb:64:17:d8:d1:f9:70:e8:03:1f:3a:
61:0e:cb:f9:25:61:5f:53:a7:91:5f:aa:cf:85:aa:
8a:43:5c:24:f9:f7:e1:2b:a7:f8:fb:b1:82:51:63:
60:e9:a9:3a:1e:0d:8e:a1:02:ad:c5:2a:9d:49:7d:
94:37:3d:e2:3c:df:c4:a6:78:6a:97:95:d1:bf:40:
f7:8b:2d:91:a4:c4:f9:f4:94:80:91:dd:21:0a:c6:
57:f4:8f:bc:ed:67:33:f7:9a:34:6d:78:71:15:7d:
04:60:b2:96:57:74:da:59:c1:f2:4e:e2:11:34:03:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:7F:41:F0:15:55:61:23:4D:48:32:11:90:0B:3F:54:8A:6B:29
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/HhZ_QfAVVWEjTUgyEZALP1SKayk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7553::/48
Signature Algorithm: sha256WithRSAEncryption
95:df:07:31:02:8e:14:67:55:83:ef:bb:04:59:c6:34:fd:18:
50:c7:e9:84:9d:cf:92:92:61:5e:2e:5a:9d:41:13:bc:7a:fa:
a1:1c:e7:dc:e4:92:b7:d4:d8:85:3d:d9:8e:9a:43:80:8f:45:
3b:c4:e4:7d:0c:d8:a6:10:e2:c1:30:a3:d5:12:33:36:f6:02:
a4:f0:c8:45:f2:f3:ca:e8:0f:cf:16:dd:77:12:ab:f7:c4:7d:
5c:a9:6e:2b:57:8f:26:f6:5f:29:f5:2a:53:37:fe:ff:25:91:
27:63:1b:d3:a3:d2:75:2a:50:b0:a0:b4:9b:8b:43:4b:5d:93:
14:b0:b1:9c:16:fa:b3:23:c8:c1:3e:c1:5d:1a:5c:58:28:7f:
00:de:f6:05:f0:94:34:6b:b1:6c:0d:01:41:c7:e9:1a:cf:e9:
bd:ba:c3:72:16:a4:a4:3d:6a:03:0c:71:16:9a:67:96:16:14:
e2:11:1f:f6:ea:8d:1e:2f:13:a0:a5:df:25:6c:26:ec:10:b1:
74:76:fa:06:43:c5:29:e6:4a:9a:70:1f:d4:1d:fa:d8:d7:95:
94:a8:26:d5:61:99:1a:51:11:ee:05:9d:93:ad:ad:40:fd:d5:
ab:6a:3e:92:dd:ac:0a:7c:9e:ce:ee:45:42:bb:05:9f:a4:cb:
5f:ed:69:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaJvQaNoTbf7+vr7e0BS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZjUzMTRhZWVmNTEzMjMxOTRmZDg2Mjk4NThhZDIwZmI5
MmRmZTcwHhcNMjYwNzAyMTUxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTE2N2Y0MWYwMTU1NTYxMjM0ZDQ4MzIxMTkwMGIzZjU0OGE2YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7c4ifkMCphRDKk0I+OpS9rQEHui
7UcM+BxJSwq+fgzWUaimNsQ78zLq5ZQsJqx7k3ywByEf/sfBXQq3EpGprL11LFcZ
qJJxxpTWMdbi3akAeXufYkIlIqfsCGZkjaARF82gkN8DX+dGwZ3B9dQnpJSKZIss
ZuIFH3AZ6Pm5ggSx6cpIPDlixgmq62QX2NH5cOgDHzphDsv5JWFfU6eRX6rPhaqK
Q1wk+ffhK6f4+7GCUWNg6ak6Hg2OoQKtxSqdSX2UNz3iPN/Epnhql5XRv0D3iy2R
pMT59JSAkd0hCsZX9I+87Wcz95o0bXhxFX0EYLKWV3TaWcHyTuIRNANxsQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB4Wf0HwFVVhI01IMhGQCz9UimspMB8GA1UdIwQY
MBaAFO71MUru9RMjGU/YYphYrSD7kt/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvSGhaX1FmQVZWV0VqVFVneUVaQUxQMVNLYXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0aQHVT
MA0GCSqGSIb3DQEBCwUAA4IBAQCV3wcxAo4UZ1WD77sEWcY0/RhQx+mEnc+SkmFe
LlqdQRO8evqhHOfc5JK31NiFPdmOmkOAj0U7xOR9DNimEOLBMKPVEjM29gKk8MhF
8vPK6A/PFt13Eqv3xH1cqW4rV48m9l8p9SpTN/7/JZEnYxvTo9J1KlCwoLSbi0NL
XZMUsLGcFvqzI8jBPsFdGlxYKH8A3vYF8JQ0a7FsDQFBx+kaz+m9usNyFqSkPWoD
DHEWmmeWFhTiER/26o0eLxOgpd8lbCbsELF0dvoGQ8Up5kqacB/UHfrY15WUqCbV
YZkaURHuBZ2Tra1A/dWraj6S3awKfJ7O7kVCuwWfpMtf7WkU
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:59 2026 by rpki-client