Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/HA9fQi2jJQWYAT4PhJ4SR8YWRFA.roa
File: HA9fQi2jJQWYAT4PhJ4SR8YWRFA.roa (raw, json)
Hash identifier: YTaKMnbJaeX5irZuZgSZ2y5LKIaKgCeFZZQTADhLimQ=
Subject key identifier: 1C:0F:5F:42:2D:A3:25:05:98:01:3E:0F:84:9E:12:47:C6:16:44:50
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019EFF771C8288A2A10093CFF707E3FB9B38
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/HA9fQi2jJQWYAT4PhJ4SR8YWRFA.roa
Signing time: Thu 25 Jun 2026 15:47:36 +0000
ROA not before: Thu 25 Jun 2026 15:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219349
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:77:1c:82:88:a2:a1:00:93:cf:f7:07:e3:fb:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 25 15:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c0f5f422da3250598013e0f849e1247c6164450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:0d:a8:aa:46:12:08:a0:0e:37:6e:50:45:
38:d6:50:87:80:7c:f3:65:02:d4:1c:08:a0:c9:1a:
77:4d:68:36:77:f2:6b:ed:04:df:13:94:20:10:92:
ba:cb:d8:10:e9:72:28:71:cf:f1:c8:43:9e:bf:58:
e9:15:dd:ce:e1:a2:42:22:bc:f0:ea:70:fc:ab:e7:
15:dc:dd:02:1b:65:cb:9e:34:aa:67:9d:8d:99:ad:
54:91:87:c7:3f:f7:f8:f0:bd:03:9a:9f:e1:ad:57:
af:cb:eb:a0:ac:ac:c8:53:65:40:ac:cb:ce:31:0f:
3e:17:e6:39:51:d5:df:79:af:27:e4:ff:96:1e:e2:
cc:9b:2f:88:c2:b6:d2:95:4b:85:32:4f:e6:ad:59:
0b:80:00:90:99:99:11:81:f9:bd:bd:b3:84:24:c1:
c2:a0:23:f3:54:f2:b4:b9:98:0f:c2:c5:a7:80:13:
9c:c6:50:e1:71:e1:ee:e9:67:b8:82:b6:6b:24:75:
68:de:33:6a:5c:ad:3c:5f:2f:6c:04:ba:56:69:fc:
e4:d1:9c:31:b2:62:9e:b7:0b:d8:4a:24:89:3c:b3:
03:0a:55:97:fc:bb:9a:58:ae:a4:d4:0e:1d:07:b2:
97:f0:80:39:8c:1b:d8:e7:1f:00:5d:ee:e3:77:a6:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:5F:42:2D:A3:25:05:98:01:3E:0F:84:9E:12:47:C6:16:44:50
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/HA9fQi2jJQWYAT4PhJ4SR8YWRFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:af:10:e4:57:70:60:1f:24:04:09:a1:e8:c5:3e:1b:7e:3b:
82:27:d7:d6:f0:19:95:72:f8:a9:4e:00:fb:bf:65:f2:9c:af:
8d:20:d6:f8:36:07:d5:e9:48:1e:40:30:8d:9e:85:75:4c:51:
58:19:fd:25:d8:fb:9d:5d:ba:cd:74:2b:62:b1:f3:61:15:ba:
90:75:4d:10:84:61:ea:8d:d9:43:54:5c:b9:7a:c8:47:03:14:
db:09:18:38:24:22:a9:23:0d:18:49:da:f9:e7:f9:e5:80:1a:
cd:0f:46:3e:87:91:f8:19:4e:4f:79:5f:f1:98:fc:05:6e:52:
e3:0f:6e:b7:1e:dd:ad:68:bb:85:c9:e8:f4:c3:43:f5:9b:4d:
9a:c1:cc:34:89:53:c4:9b:c1:84:2a:bb:57:56:e8:48:5a:63:
7b:d2:d7:d6:39:7e:9d:d0:0c:40:2b:66:b6:85:d8:34:9a:9d:
ca:78:d2:d2:a2:43:dd:5e:d2:c0:3d:2e:ff:69:89:0c:0c:fe:
c8:73:25:b9:93:7f:41:15:3e:57:20:16:17:c3:3f:3f:ab:78:
25:6e:90:1c:3d:0f:97:25:47:ec:bc:f8:9e:25:10:be:c9:de:
a6:48:5e:e9:b2:16:6d:f9:e1:99:c9:2e:6c:bd:2c:6f:e1:d3:
98:11:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:17 2026 by rpki-client