Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/htyK6r4pNgyVoeQazwGCxgC9tbM.roa
File: htyK6r4pNgyVoeQazwGCxgC9tbM.roa (raw, json)
Hash identifier: QXYvxmiUvnp+vhqeoWe30SBII6nWkPeAV3pyDYs4rRs=
Subject key identifier: 86:DC:8A:EA:BE:29:36:0C:95:A1:E4:1A:CF:01:82:C6:00:BD:B5:B3
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01A13F8E185328C3C1205DCB303EB9F97DC0
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/htyK6r4pNgyVoeQazwGCxgC9tbM.roa
Signing time: Thu 15 Oct 2026 12:33:59 +0000
ROA not before: Thu 15 Oct 2026 12:33:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51561
IP address blocks: 194.15.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:8e:18:53:28:c3:c1:20:5d:cb:30:3e:b9:f9:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 15 12:33:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86dc8aeabe29360c95a1e41acf0182c600bdb5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:16:25:b1:d1:86:c0:6a:06:d7:99:2b:ee:
ab:50:4e:00:77:66:f6:c2:b7:12:39:47:e3:34:c9:
a2:bc:12:93:7e:f0:69:46:b1:9b:16:23:e4:06:8a:
d2:b0:55:2e:97:3b:bf:bc:aa:92:d9:61:63:bd:81:
62:47:83:77:91:62:53:19:20:0c:85:56:cc:1a:d7:
90:b1:f3:10:73:c0:f7:9f:de:1b:1e:69:ee:65:3a:
9f:ff:ff:59:43:a3:c7:c6:f2:96:66:64:19:3d:7a:
f1:88:cd:21:f5:a5:6a:e9:bb:d4:f1:69:ea:36:25:
eb:40:b4:e5:4d:7a:2d:ab:ce:5e:99:b6:91:ab:a5:
3f:71:3e:66:03:06:41:58:36:8b:c2:29:37:d3:25:
4d:44:5e:fb:3c:f9:39:1c:2d:47:64:14:7a:d1:a7:
3b:9a:23:36:0e:7c:52:9c:dc:1a:6b:d2:4b:fc:c3:
8c:f2:07:b1:dd:ff:92:87:3c:46:50:19:cb:d1:1f:
83:5a:3e:17:72:07:72:a7:fe:bf:ea:7e:bb:e2:8b:
82:9a:ae:a5:e8:78:a6:ec:e9:34:26:da:b7:2a:d3:
55:1a:17:86:50:22:59:fe:69:c3:87:19:f0:14:d0:
04:a5:b9:b3:e7:02:f3:a3:29:40:9c:84:65:ad:e3:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DC:8A:EA:BE:29:36:0C:95:A1:E4:1A:CF:01:82:C6:00:BD:B5:B3
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/htyK6r4pNgyVoeQazwGCxgC9tbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0f:af:9d:3c:62:b7:c2:8e:ea:83:7c:dc:46:cd:76:04:da:
33:f2:f5:8d:e1:cb:d9:0c:fe:56:79:03:1c:e3:e4:50:38:19:
ea:16:90:ee:ae:ad:cd:21:38:30:6d:44:af:d9:c7:d7:2f:07:
e4:6d:6e:22:a1:41:8d:2a:68:1a:b8:de:b2:ad:e4:c0:ca:25:
40:f1:8d:b0:ce:67:a2:97:1c:52:ad:5e:9b:e2:d1:ce:6f:f0:
78:fb:11:ae:1b:f6:f0:5d:79:0e:f2:70:ef:ec:c4:eb:e1:d8:
fb:2a:12:78:f1:49:d4:1f:cb:4c:f6:3e:47:30:5b:70:d5:0b:
b0:30:16:62:dd:b6:30:1d:a4:50:fb:7d:f7:73:17:3c:2f:af:
cf:38:ab:6f:f1:3f:b5:11:5b:f6:93:f9:a4:1b:93:f6:0e:3c:
72:db:15:68:f5:0d:d6:a9:49:00:23:7a:60:b8:d4:29:4b:73:
8a:e6:91:67:00:d6:14:bc:ca:66:cc:56:65:53:52:d8:ec:07:
94:6d:c7:55:07:07:5e:f0:38:b1:1a:c5:b2:12:30:fa:90:64:
ce:97:6c:30:0b:dd:12:c8:9f:0d:6c:42:01:24:b6:71:13:25:
25:b2:9f:57:4a:07:81:7a:61:87:43:23:9f:87:bf:83:f6:d1:
9c:2b:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:11 2026 by rpki-client