Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/H9-avlPsvO0tuUhFGptHZ-83z3w.roa
File: H9-avlPsvO0tuUhFGptHZ-83z3w.roa (raw, json)
Hash identifier: 15whqzy+8m93rcipGKKPzNIA4dZ3wP4dQ7/likEvjrc=
Subject key identifier: 1F:DF:9A:BE:53:EC:BC:ED:2D:B9:48:45:1A:9B:47:67:EF:37:CF:7C
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F69907AD517753EAC4A58B8DBB200246
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/H9-avlPsvO0tuUhFGptHZ-83z3w.roa
Signing time: Thu 01 Oct 2026 08:33:39 +0000
ROA not before: Thu 01 Oct 2026 08:33:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197889
IP address blocks: 195.184.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:99:07:ad:51:77:53:ea:c4:a5:8b:8d:bb:20:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:33:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fdf9abe53ecbced2db948451a9b4767ef37cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:0a:49:10:d7:a0:27:24:a2:d7:25:8c:9e:
3d:9d:c0:5b:bd:92:51:1f:b4:c5:e0:9e:a9:70:f6:
2a:e2:2a:9e:d1:96:95:cf:36:a3:6f:04:16:b3:54:
76:64:36:5a:b7:d5:80:bd:22:26:86:06:71:41:75:
b6:bd:57:14:16:87:ac:fb:d7:05:57:53:e8:e5:d9:
22:93:94:08:24:cc:c2:36:f8:86:90:ea:a3:ae:cb:
15:2d:6c:24:db:91:48:09:ae:5c:51:d2:c2:ca:11:
ce:e3:2c:af:7d:52:6d:38:56:39:b0:0d:ed:68:78:
91:90:7d:b1:a0:aa:d1:7e:e4:8d:7b:47:96:e2:99:
0a:e3:5e:18:05:a4:2f:ca:2f:06:c7:a3:06:ac:e2:
5a:cd:58:c9:de:55:10:0f:08:83:11:bf:fc:d9:4c:
a0:49:72:35:38:ff:1a:79:44:25:44:97:73:8f:f1:
a0:2e:80:70:30:eb:46:df:67:12:86:6d:ac:c5:97:
bd:95:de:e1:94:9c:a0:1d:97:47:35:e2:c5:0b:6f:
52:00:ad:4e:64:c5:e3:e3:db:10:63:2e:29:0f:d3:
f3:0f:8d:80:d6:e1:02:31:64:ea:a4:ff:9e:52:56:
16:1f:81:60:1e:ba:23:fb:e8:56:6a:e1:ca:38:28:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:9A:BE:53:EC:BC:ED:2D:B9:48:45:1A:9B:47:67:EF:37:CF:7C
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/H9-avlPsvO0tuUhFGptHZ-83z3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3b:47:50:ca:29:96:fd:49:13:b4:9d:71:3e:3a:32:c9:e1:
c2:ee:96:1a:1a:ec:75:63:0e:be:13:bd:94:2c:f9:6c:f6:2d:
cc:4e:fb:fc:49:c1:b1:d7:68:0a:72:4e:19:80:37:10:14:05:
3c:1b:d3:8e:69:86:0d:94:25:4f:d3:43:f2:c7:ff:3b:fa:9b:
b1:5b:aa:76:96:7f:3a:aa:5f:3f:37:8c:b4:ce:0a:21:53:60:
7c:2f:26:8f:0b:66:06:3a:c3:c2:9d:76:89:f9:50:05:fe:0e:
ed:9a:f2:f6:32:5e:c3:f1:d5:19:00:5a:f7:98:9b:e1:dd:90:
f9:a4:64:df:f4:04:6d:64:b9:7c:de:e8:d6:4f:36:af:06:bd:
e2:b7:ae:be:38:ca:c2:cc:82:90:c0:eb:bd:ea:c8:00:f2:7f:
ac:ab:c5:b8:50:64:f5:3f:14:b5:3f:d1:09:a6:af:e8:dc:9a:
9c:f0:ba:3b:b0:89:2e:2e:53:bb:f9:d7:3d:b5:c3:60:72:0f:
01:ac:f7:14:aa:4c:44:c9:a9:62:94:60:bc:30:65:c4:51:fd:
99:38:9f:9f:34:09:81:21:14:93:78:dc:26:e5:73:00:04:f6:
2c:52:f9:b2:6d:f1:da:13:11:3d:27:88:c8:a7:c1:b2:d6:d1:
61:52:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:26 2026 by rpki-client