Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HY6YYWIaQKXxDbcRZa-aIZvftQs.roa
File: HY6YYWIaQKXxDbcRZa-aIZvftQs.roa (raw, json)
Hash identifier: xXgj0G8qWZvzl8awryFEVoXSTUJD9rFKMknK0sCiX/o=
Subject key identifier: 1D:8E:98:61:62:1A:40:A5:F1:0D:B7:11:65:AF:9A:21:9B:DF:B5:0B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A07F9190F2A52A4F1C18B5254E0951CA2B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HY6YYWIaQKXxDbcRZa-aIZvftQs.roa
Signing time: Tue 08 Sep 2026 05:50:41 +0000
ROA not before: Tue 08 Sep 2026 05:50:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.230.153.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
5.231.255.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:91:90:f2:a5:2a:4f:1c:18:b5:25:4e:09:51:ca:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 8 05:50:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d8e9861621a40a5f10db71165af9a219bdfb50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:44:d9:6b:3b:06:32:8e:46:67:00:61:5f:
73:c3:80:4a:f0:1b:22:dc:d5:78:08:fd:10:80:22:
f6:09:11:44:f9:c3:2b:c0:ca:11:ca:9c:bc:77:18:
ba:01:2a:1d:cf:39:2a:f9:cd:b8:fb:ba:4e:39:0e:
ed:ab:a1:5f:f5:c6:86:3e:61:8f:5b:ba:23:2f:0e:
1b:f5:c5:e5:ba:0f:6f:a4:97:2d:a6:e0:16:a4:c4:
00:63:9c:d0:3f:45:82:2d:80:b1:e7:9d:e3:39:fd:
1a:39:99:9a:92:a9:76:f4:16:21:94:93:81:35:25:
d9:6f:24:17:cc:62:25:f1:23:6f:9e:5a:66:47:5d:
3f:67:c7:c2:33:f5:15:29:8f:c2:04:06:f8:bf:4e:
ea:8a:08:79:10:4a:76:bb:fc:b4:a2:8a:25:90:90:
9a:53:6e:35:e6:00:7d:64:17:de:5d:08:4a:1f:99:
d6:a6:18:a2:fb:c7:e9:5a:d2:dc:fa:e1:d3:36:6b:
9c:41:09:65:e5:42:d1:dc:6c:d3:e1:5c:27:ff:37:
0e:f6:7b:a9:20:b7:d1:79:e8:89:13:24:9d:d9:99:
44:15:5b:a6:b6:e5:94:8e:c0:4d:df:6d:2a:b7:4a:
15:6b:c9:b6:17:d5:22:0f:fe:6f:e2:40:b9:e5:fa:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:98:61:62:1A:40:A5:F1:0D:B7:11:65:AF:9A:21:9B:DF:B5:0B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HY6YYWIaQKXxDbcRZa-aIZvftQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.230.153.0/24
5.231.207.0/24
5.231.255.0/24
89.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:5a:9b:be:d5:d7:77:8a:c7:a9:b7:96:44:41:ed:18:59:79:
f0:48:f0:ac:14:ea:3a:e3:28:40:49:11:9a:67:15:5d:24:40:
a6:9e:6f:ea:c1:75:dd:d6:3e:d5:1c:3d:66:e9:16:d9:a8:d5:
b2:27:85:b7:b8:a1:5c:36:f1:16:aa:41:17:d2:7b:b2:c7:a7:
d2:19:3d:41:37:03:1b:fa:ad:2f:53:86:7d:bf:01:2c:28:79:
55:68:79:15:db:12:93:30:0d:39:61:99:16:cf:df:bc:8f:8a:
1a:f3:97:1f:d0:ac:75:e8:7b:60:8e:6d:d6:c6:3d:d1:af:fd:
5d:56:91:96:7e:b0:02:5e:9e:f7:20:84:65:ee:be:3d:c4:3c:
e5:3d:81:79:a0:7b:82:5e:04:1c:6e:06:68:7a:19:99:1e:03:
9d:e2:ae:11:cf:f6:67:03:2b:de:1b:55:1a:51:bc:55:30:2b:
f4:48:8e:19:c0:fe:09:57:a5:29:65:4e:ec:3f:88:83:64:96:
3f:20:d2:35:ed:38:a4:b8:4d:4d:cc:98:4f:bf:8f:4e:42:25:
c3:bf:1d:06:d8:35:26:9d:d3:2c:b7:7b:1c:e6:76:90:9d:e7:
f2:65:8a:78:7d:a8:e3:4b:3e:07:83:23:e2:c0:fb:86:e0:07:
8f:78:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:29:56 2026 by rpki-client