Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HFR1I8GGuoJFF4Anv7n4GCiteWc.roa
File: HFR1I8GGuoJFF4Anv7n4GCiteWc.roa (raw, json)
Hash identifier: QVXAQlhcm7pT2v1f35Cgj7Cke2ZtiFsKWOhKtYRMLBM=
Subject key identifier: 1C:54:75:23:C1:86:BA:82:45:17:80:27:BF:B9:F8:18:28:AD:79:67
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01A12FDD5D498122A814480C0DE2777FF90E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HFR1I8GGuoJFF4Anv7n4GCiteWc.roa
Signing time: Mon 12 Oct 2026 11:26:38 +0000
ROA not before: Mon 12 Oct 2026 11:26:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49127
IP address blocks: 45.67.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:dd:5d:49:81:22:a8:14:48:0c:0d:e2:77:7f:f9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 12 11:26:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c547523c186ba8245178027bfb9f81828ad7967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:55:ee:23:83:97:68:26:52:d3:73:ad:76:
a9:e0:17:2c:4d:a4:fb:3d:12:60:ac:92:fd:ce:bb:
ba:0b:86:ce:7b:3e:62:be:f6:f9:27:11:9b:d0:62:
af:a6:ad:a2:28:52:77:3b:03:6a:93:b3:06:06:d0:
62:cd:e0:7b:4b:40:a0:0d:cd:0a:2c:98:d3:50:b5:
9a:42:a7:14:0f:ae:21:c3:48:40:24:66:f5:24:5e:
be:52:8d:d0:b4:b3:3d:1d:ab:be:f1:bf:a2:60:ee:
9e:65:11:12:02:68:df:de:64:99:9c:e7:d0:8e:7e:
86:70:c8:ba:00:2e:9b:4a:6c:e9:53:4f:24:f9:1c:
21:c5:7b:0f:c9:03:75:fe:45:84:9e:e5:38:94:f8:
20:62:ee:ab:73:1a:e4:88:43:67:77:93:61:bb:2c:
8e:02:7a:b3:06:ad:02:d2:0f:26:de:9c:be:b1:39:
97:a0:7f:ac:86:59:b8:a1:6a:e7:5d:8a:3e:7d:d7:
28:e0:a8:51:1f:19:27:8e:d7:18:96:8b:cf:36:5f:
8e:c4:2a:08:33:32:ef:c9:d6:a6:a7:31:e4:ce:ae:
1a:f1:f6:65:38:68:d0:04:39:d2:54:2c:aa:16:ec:
5c:f3:5b:89:dd:8a:74:56:26:30:b6:f2:9f:72:64:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:75:23:C1:86:BA:82:45:17:80:27:BF:B9:F8:18:28:AD:79:67
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HFR1I8GGuoJFF4Anv7n4GCiteWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f3:d1:5c:ea:ce:de:8f:37:32:49:1e:cc:61:e9:fb:6b:7a:
7e:b9:4b:7b:2f:17:b7:d0:3a:2b:fd:6e:79:87:a5:0a:e6:d5:
54:43:5d:ad:e8:5c:a3:f0:74:88:28:af:f6:2f:35:98:7d:cf:
3c:c3:a0:bc:d8:4e:da:30:44:2b:e5:0a:b9:81:fc:7c:1b:cf:
88:aa:a2:60:66:b3:16:dc:f4:a0:cd:55:b3:88:20:d5:31:c1:
e8:5e:bc:b0:e4:85:45:fd:9d:6a:41:a6:00:06:02:8e:d1:82:
40:9a:7a:3d:1f:99:12:a3:4d:e8:75:64:7a:cf:9e:2e:a5:cf:
a7:11:c9:f9:c4:2d:4d:14:b0:d4:f6:2b:e1:9e:c5:7f:92:39:
fd:21:97:c9:ca:07:45:b6:35:93:aa:a2:e2:ba:da:82:83:7b:
73:e0:5d:04:1a:d5:89:d8:92:13:10:a2:28:52:92:24:77:0a:
96:19:e8:2a:31:38:72:81:18:ba:2f:72:bf:50:b4:69:69:5d:
f5:68:68:b4:47:2c:85:83:5a:57:94:d7:d8:7f:0a:4f:ab:a7:
91:36:5e:a7:9b:16:ec:10:dc:59:2f:e3:31:0d:f6:e3:5e:33:
e1:41:fc:c4:a9:24:a9:de:f5:c2:8d:00:3c:c7:a3:95:ee:1c:
ca:57:c9:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEv3V1JgSKoFEgMDeJ3f/kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjYxMDEyMTEyNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzU0NzUyM2MxODZiYTgyNDUxNzgwMjdiZmI5ZjgxODI4YWQ3OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnslV7iODl2gmUtNzrXap4BcsTaT7
PRJgrJL9zru6C4bOez5ivvb5JxGb0GKvpq2iKFJ3OwNqk7MGBtBizeB7S0CgDc0K
LJjTULWaQqcUD64hw0hAJGb1JF6+Uo3QtLM9Hau+8b+iYO6eZRESAmjf3mSZnOfQ
jn6GcMi6AC6bSmzpU08k+RwhxXsPyQN1/kWEnuU4lPggYu6rcxrkiENnd5NhuyyO
AnqzBq0C0g8m3py+sTmXoH+shlm4oWrnXYo+fdco4KhRHxknjtcYlovPNl+OxCoI
MzLvydampzHkzq4a8fZlOGjQBDnSVCyqFuxc81uJ3Yp0ViYwtvKfcmRQrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxUdSPBhrqCRReAJ7+5+BgorXlnMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvSEZSMUk4R0d1b0pGRjRBbnY3bjRHQ2l0ZVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUOIMA0G
CSqGSIb3DQEBCwUAA4IBAQBe89Fc6s7ejzcySR7MYen7a3p+uUt7Lxe30Dor/W55
h6UK5tVUQ12t6Fyj8HSIKK/2LzWYfc88w6C82E7aMEQr5Qq5gfx8G8+IqqJgZrMW
3PSgzVWziCDVMcHoXryw5IVF/Z1qQaYABgKO0YJAmno9H5kSo03odWR6z54upc+n
Ecn5xC1NFLDU9ivhnsV/kjn9IZfJygdFtjWTqqLiutqCg3tz4F0EGtWJ2JITEKIo
UpIkdwqWGegqMThygRi6L3K/ULRpaV31aGi0RyyFg1pXlNfYfwpPq6eRNl6nmxbs
ENxZL+MxDfbjXjPhQfzEqSSp3vXCjQA8x6OV7hzKV8kZ
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:46:17 2026 by rpki-client