Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HtbQaYbodSFfyA3CI0VydKXDbFY.roa
File: HtbQaYbodSFfyA3CI0VydKXDbFY.roa (raw, json)
Hash identifier: fMcJhVmkAPdBRS5emsuVehlkVX5PBYvYaJ12Y45PExA=
Subject key identifier: 1E:D6:D0:69:86:E8:75:21:5F:C8:0D:C2:23:45:72:74:A5:C3:6C:56
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A15404BD4F641B963B3967CB3B71FE8AC2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HtbQaYbodSFfyA3CI0VydKXDbFY.roa
Signing time: Mon 19 Oct 2026 11:55:58 +0000
ROA not before: Mon 19 Oct 2026 11:55:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213409
IP address blocks: 5.175.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:04:bd:4f:64:1b:96:3b:39:67:cb:3b:71:fe:8a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 19 11:55:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ed6d06986e875215fc80dc223457274a5c36c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:15:8f:e4:3d:8e:db:3c:53:5e:02:62:6f:
7d:79:c1:1c:40:51:3e:6c:2c:8f:59:59:8b:38:f9:
5e:66:25:b0:bc:9c:d2:18:3f:35:b3:a3:5d:68:31:
df:65:e7:80:89:7b:72:1c:72:77:27:c3:5d:8d:dc:
18:77:18:35:7a:c2:00:4e:61:d8:97:ff:26:28:d4:
db:d5:6d:03:42:f2:a7:e3:f6:ba:56:d9:0c:4b:58:
7c:c2:44:75:2e:f3:b5:7c:f3:fb:4c:14:a7:8a:03:
53:8c:9e:6e:ec:29:64:60:cb:6c:df:d3:6a:3e:7f:
00:ee:be:7a:1c:12:44:97:3d:a8:79:62:b7:0e:76:
f6:e4:3b:3b:97:b2:b5:00:d5:f0:ba:28:4f:cb:c5:
2d:a5:97:85:fc:61:6e:21:dd:82:33:73:3a:9e:90:
52:b0:a6:fa:40:26:e4:74:1d:31:45:a1:9b:95:07:
af:41:a4:8a:ce:19:5e:33:a8:92:de:6f:72:ab:cf:
96:72:30:9d:07:0e:4c:60:18:16:b1:48:ba:78:43:
9a:e5:c5:7c:9f:ca:a6:7e:c7:24:8e:20:6d:81:18:
d9:0f:a0:39:96:d5:90:9a:fc:22:81:88:a9:ab:34:
56:b2:8f:58:08:69:25:15:c9:84:45:f8:b4:34:74:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D6:D0:69:86:E8:75:21:5F:C8:0D:C2:23:45:72:74:A5:C3:6C:56
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HtbQaYbodSFfyA3CI0VydKXDbFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.204.0/24
Signature Algorithm: sha256WithRSAEncryption
01:be:df:2f:06:5b:28:a5:00:64:70:37:8d:20:b4:a8:bc:77:
eb:4b:ea:33:80:44:49:27:a3:02:09:f1:c9:de:74:ec:c4:c1:
17:07:48:0c:fb:bf:99:6a:8a:a1:e4:0a:48:51:7c:5c:2a:8a:
d0:f1:4c:17:8d:75:b9:ae:f5:b3:d5:8a:0f:d3:70:12:f7:f5:
eb:58:96:76:ce:ef:a3:3d:1c:3e:12:e2:ef:b2:0a:73:96:6d:
dd:78:90:6c:32:c4:38:13:00:88:79:19:17:e7:12:dd:f8:34:
be:49:6b:01:a5:9c:9b:41:b0:ad:a1:75:0a:5a:0c:a7:2e:a8:
91:bb:5c:ab:8c:5b:2f:e4:95:64:07:df:2d:6a:60:ba:4d:bd:
4d:2b:62:58:3b:bc:16:c4:4a:4e:b5:fc:9a:f7:78:1e:67:a8:
7b:c1:1e:8b:3d:88:c4:be:63:52:5b:70:01:b8:16:54:b3:ab:
3e:89:90:cf:d3:d2:84:9d:14:44:7e:4f:52:ec:98:15:11:53:
43:f4:2c:86:9b:b8:58:b9:54:98:5a:8a:13:39:13:a4:f6:0d:
ce:92:bc:20:3d:02:57:62:39:9c:c0:9d:e3:a5:5f:53:cc:69:
74:20:03:a0:fd:c4:42:4d:3a:c1:f7:40:72:e8:51:60:72:74:
89:3d:7e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:58 2026 by rpki-client