Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/HRHfBeVR8FCErSeg_f0jsh6Y810.roa
File: HRHfBeVR8FCErSeg_f0jsh6Y810.roa (raw, json)
Hash identifier: 5Uj4MHwwi5BQxM2HtVlQdjayICr5xhiFmlHmBSv92Ek=
Subject key identifier: 1D:11:DF:05:E5:51:F0:50:84:AD:27:A0:FD:FD:23:B2:1E:98:F3:5D
Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial: 019E82634F87B10F8DD1D0DE0885839609EF
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/HRHfBeVR8FCErSeg_f0jsh6Y810.roa
Signing time: Mon 01 Jun 2026 08:53:26 +0000
ROA not before: Mon 01 Jun 2026 08:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42708
IP address blocks: 91.209.29.0/24 maxlen: 24
185.55.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:63:4f:87:b1:0f:8d:d1:d0:de:08:85:83:96:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Validity
Not Before: Jun 1 08:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d11df05e551f05084ad27a0fdfd23b21e98f35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:f1:d1:ff:7d:b2:be:02:a9:49:8e:c9:3b:
2b:47:8e:a0:db:1e:94:c8:3c:29:43:6f:37:bb:2a:
e9:5b:90:1f:69:35:5a:52:45:3a:8f:c4:ef:a0:dc:
1e:40:94:52:5b:44:0b:cb:a1:08:8b:17:ee:cf:ec:
ea:28:c3:22:68:38:7e:27:b0:0b:3b:9c:db:d7:2e:
72:12:24:da:26:21:95:00:8e:39:0c:55:52:3c:c8:
e3:e9:73:90:75:36:44:38:fd:a5:20:45:34:5e:89:
ef:1b:d8:16:a1:80:84:de:d2:ab:6c:b3:be:9c:7c:
4e:0e:18:b9:dc:df:2e:99:93:85:fa:b6:29:a7:32:
3f:4e:78:56:c5:94:4f:55:6f:7c:5d:de:e6:e6:26:
40:c5:4b:72:c7:77:c1:1b:53:f7:1c:b2:0e:6a:1b:
bf:0e:29:d4:55:38:ab:d3:92:17:ec:cb:68:13:66:
f2:e8:ca:d7:10:de:9d:8d:d7:38:79:c8:39:19:8a:
29:e2:03:2f:92:57:8b:38:9e:0f:e1:2a:63:1b:cc:
8f:dc:10:ca:b0:e5:30:52:ac:84:89:d9:6c:da:f3:
cd:41:f4:8e:98:61:16:81:b9:89:e2:6d:de:8e:8f:
89:a9:be:34:5b:71:17:3a:af:1b:e8:74:0a:aa:3a:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:DF:05:E5:51:F0:50:84:AD:27:A0:FD:FD:23:B2:1E:98:F3:5D
X509v3 Authority Key Identifier:
keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/HRHfBeVR8FCErSeg_f0jsh6Y810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.29.0/24
185.55.176.0/22
Signature Algorithm: sha256WithRSAEncryption
15:7d:da:49:57:30:e8:5a:69:32:2c:bf:57:23:b5:08:e8:47:
a3:70:34:63:15:52:8d:3f:0b:fe:d4:79:1f:bc:b5:de:73:fa:
b5:c2:4a:48:3c:a7:f6:5a:c3:05:ed:38:8b:99:df:76:86:e0:
be:b0:bc:be:17:50:b7:95:b2:db:6a:4c:4a:7c:eb:63:5a:82:
35:36:12:18:4a:8f:ca:eb:85:13:26:43:21:a0:8f:fa:06:88:
60:ca:6e:0d:a9:a1:86:6d:fc:c5:a6:0a:a4:1a:68:c1:32:11:
fe:f8:a6:3f:dc:bc:07:af:90:a1:7e:f2:af:46:51:9f:0f:04:
e1:0d:02:87:ac:3a:b8:6f:f2:c3:e2:38:80:8b:5f:30:14:f5:
c0:a8:16:6e:cd:54:97:42:4f:c8:32:40:1e:b9:52:c2:a9:68:
aa:ca:04:50:a1:8b:a2:d4:94:34:ef:71:93:48:73:76:a4:68:
20:1d:f5:a5:81:19:dc:13:89:6a:1c:53:97:d9:42:da:48:f8:
90:66:34:83:d4:47:6b:c6:7d:18:fa:94:91:d7:4c:17:f4:42:
70:9d:64:41:35:54:81:28:3f:ae:cb:07:97:02:7f:c0:59:70:
80:41:b1:de:4a:07:ed:cb:04:42:9d:3b:78:e7:b0:fa:af:e3:
87:7e:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:19:44 2026 by rpki-client