Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HWpYDApff3k2KEfFbMy35MMuv4M.roa
File: HWpYDApff3k2KEfFbMy35MMuv4M.roa (raw, json)
Hash identifier: qlv+//vmjODoIkWw/oYwGeUJhFssZ+5Jl63LBdj2p+0=
Subject key identifier: 1D:6A:58:0C:0A:5F:7F:79:36:28:47:C5:6C:CC:B7:E4:C3:2E:BF:83
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019FFCC970C305D2F39A6334ACD52F210E6F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HWpYDApff3k2KEfFbMy35MMuv4M.roa
Signing time: Thu 13 Aug 2026 20:21:27 +0000
ROA not before: Thu 13 Aug 2026 20:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:b9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:c9:70:c3:05:d2:f3:9a:63:34:ac:d5:2f:21:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 13 20:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d6a580c0a5f7f79362847c56cccb7e4c32ebf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:ac:d1:5b:f0:d7:fd:88:b2:85:99:ee:e9:
9a:f8:14:bb:80:f9:2c:68:3d:38:a1:ee:14:d0:ed:
e3:1f:65:79:62:82:5c:01:ea:20:bc:ea:a7:11:67:
33:74:4d:03:d9:2e:7e:bb:fb:69:75:60:4d:cf:e3:
f7:25:e2:46:f3:00:be:b7:b2:08:71:13:f4:eb:ba:
76:de:be:25:d9:aa:95:53:ed:80:b3:0b:47:82:a0:
3c:a2:f0:98:6c:fb:ba:bf:33:5a:c9:2c:f2:b2:55:
8b:41:3d:8d:01:8b:38:b3:99:f3:41:b5:4a:43:a3:
94:8e:80:77:86:9f:db:ce:d8:18:09:d0:b6:95:af:
f4:01:4f:c2:07:f8:8a:f1:67:3b:fd:fc:29:a7:ae:
ce:30:47:ea:06:41:a3:1c:d9:fb:74:c1:3b:50:b5:
47:3e:00:18:b6:4c:eb:81:39:bc:34:cd:bb:b5:55:
31:a5:7a:a1:58:e8:b9:93:4b:e3:69:1c:b0:5d:fb:
66:df:8c:78:03:03:b3:39:d0:05:49:d8:45:7a:55:
44:21:2e:bc:f8:a0:3b:ba:d3:1e:2f:18:36:b9:c8:
2c:09:72:c9:d2:a6:66:31:7c:9e:15:cc:4c:00:f4:
74:af:9d:aa:b2:da:21:61:9f:d0:77:8b:bc:c2:76:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:58:0C:0A:5F:7F:79:36:28:47:C5:6C:CC:B7:E4:C3:2E:BF:83
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HWpYDApff3k2KEfFbMy35MMuv4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b9c0::/29
Signature Algorithm: sha256WithRSAEncryption
b5:71:ef:c8:a4:18:ca:90:c5:bf:a6:3c:57:11:ac:62:61:5e:
a1:f7:54:74:75:1c:18:21:00:f4:80:4f:82:f9:16:82:0a:9d:
c2:aa:e7:dc:85:1b:f7:a1:7d:30:c9:a1:d5:7a:9e:23:22:92:
c5:b3:7a:72:9f:21:50:1e:c1:55:49:66:8b:f1:1d:44:82:2c:
7d:fc:85:d5:f4:0b:2c:0e:e9:cd:24:a0:7e:6d:e0:30:20:68:
5a:64:08:33:2d:80:19:fb:85:bd:e7:3c:ec:72:36:b2:9c:b9:
e5:e3:be:2d:5b:d0:75:f8:57:96:75:aa:cc:cc:29:9e:18:7c:
ca:55:36:08:96:4a:ab:b9:e0:f0:5c:f7:47:58:8d:c5:d5:b6:
84:2b:f0:51:82:e6:a5:63:00:e9:cd:8b:88:21:82:4d:67:a5:
10:6d:d3:2e:e4:41:84:ab:f0:9e:4c:7f:c7:0d:e8:49:1b:73:
7d:db:c4:6c:8a:3b:32:6d:24:f9:2f:a8:17:98:91:52:c3:47:
18:32:91:af:1d:f8:27:21:93:80:ce:e4:2b:61:cd:aa:4c:6a:
7d:94:47:7b:06:2b:01:81:2b:24:ef:5a:14:ca:1f:13:8a:bc:
ca:ce:a0:62:e6:f9:f8:f4:db:be:2b:3b:57:1a:37:60:26:09:
3d:88:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 21:30:57 2026 by rpki-client