Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hOOiPqgeFlJ-n-2_E98IIadm79g.roa
File: hOOiPqgeFlJ-n-2_E98IIadm79g.roa (raw, json)
Hash identifier: AuUumD0BYX171bp9v1JT3pDYyfKlYLCzMQNjoiXwoJ4=
Subject key identifier: 84:E3:A2:3E:A8:1E:16:52:7E:9F:ED:BF:13:DF:08:21:A7:66:EF:D8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1602B29EB5A8454298413A310EC12F10F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hOOiPqgeFlJ-n-2_E98IIadm79g.roa
Signing time: Wed 21 Oct 2026 20:33:23 +0000
ROA not before: Wed 21 Oct 2026 20:33:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 91.200.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:2b:29:eb:5a:84:54:29:84:13:a3:10:ec:12:f1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 21 20:33:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84e3a23ea81e16527e9fedbf13df0821a766efd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:f4:b9:34:71:74:93:42:b4:da:68:20:5a:
10:8e:08:66:e3:e2:75:4a:41:1f:f0:68:9b:0e:a8:
cd:fe:aa:ca:3a:dd:97:b2:78:eb:44:63:ce:2f:64:
8b:b8:44:22:bc:8f:77:3c:8f:cd:5b:08:86:b6:cd:
77:78:04:e7:fb:24:a2:92:c6:7b:69:c0:3d:34:13:
97:4d:25:ec:18:50:fb:5c:24:59:23:9f:5d:1d:7b:
1b:24:0b:21:82:63:f7:d4:5f:0c:b9:17:f9:5f:bd:
14:b7:85:df:ce:79:42:58:94:9a:a5:eb:21:50:95:
5d:41:b4:34:df:8f:49:4e:f3:ff:63:7a:4e:e8:01:
cc:be:5e:d8:27:58:76:95:39:5f:be:a2:f5:18:73:
72:66:c3:e5:69:98:5b:fa:b3:74:dd:fe:0b:5f:71:
86:4a:51:25:20:1a:75:99:b0:57:4a:05:21:77:54:
e9:48:4a:30:97:75:6d:9f:72:54:a2:d0:d0:f0:be:
95:90:40:be:2d:8c:a4:29:5c:84:c5:88:d0:b0:2b:
2c:44:80:3b:c2:8e:ea:9a:9c:94:2b:c5:ce:93:e3:
ad:59:4f:85:06:86:cb:f2:e7:d0:79:6a:56:ee:6c:
54:6d:9a:1f:9f:ba:17:8e:ec:a9:c5:b5:d7:2d:b6:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:A2:3E:A8:1E:16:52:7E:9F:ED:BF:13:DF:08:21:A7:66:EF:D8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hOOiPqgeFlJ-n-2_E98IIadm79g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.145.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f9:84:03:08:a2:93:49:8c:90:6e:77:52:18:91:3e:e5:0c:
e2:5d:52:65:28:28:65:4e:45:a6:30:b6:18:f4:82:a4:54:86:
70:f3:e8:93:81:90:35:cd:e5:80:9b:fd:fb:27:bd:e9:07:fd:
90:ad:3d:1c:a6:1b:4c:7f:e9:c7:51:3e:bd:60:ff:83:2d:e4:
31:8d:fc:e8:eb:13:7d:f6:77:b6:8d:77:66:79:45:d7:8e:28:
64:40:71:dc:bf:3c:2d:68:44:99:54:5f:1d:30:e1:89:a1:49:
54:8f:8b:f7:87:d9:38:08:07:99:5b:e8:84:96:b3:36:2e:ec:
5d:59:95:d9:90:94:5f:97:c1:b5:df:96:f7:7c:7e:99:a4:2e:
ba:cc:91:28:78:af:97:0f:0b:9e:6a:32:29:ea:fe:e3:ca:0b:
c7:b3:af:f1:a9:8c:16:fd:e8:d2:96:ab:78:e3:8a:2c:fe:70:
35:16:e9:17:e0:3c:31:69:69:e2:9b:39:d2:2b:7c:69:4c:1b:
ea:02:6d:b8:9f:06:33:b4:bb:c7:ec:3b:e3:c2:2e:4b:be:98:
21:f8:eb:6d:29:0e:bb:a4:b9:07:41:be:a2:0b:a5:d3:bb:d6:
55:5b:97:db:4c:db:7c:a6:53:2b:f4:df:4b:ab:c9:41:34:34:
e9:4c:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:38 2026 by rpki-client