Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hvGDueYyFx34DMzmCElvEDekIck.roa
File: hvGDueYyFx34DMzmCElvEDekIck.roa (raw, json)
Hash identifier: 6utWPDjKwjZFur+34tWw8xMxGbkhviibOK6LIvEdfaY=
Subject key identifier: 86:F1:83:B9:E6:32:17:1D:F8:0C:CC:E6:08:49:6F:10:37:A4:21:C9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A05E6609F793A670804EB34B346FF3AC11
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hvGDueYyFx34DMzmCElvEDekIck.roa
Signing time: Tue 01 Sep 2026 19:15:40 +0000
ROA not before: Tue 01 Sep 2026 19:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 80.244.12.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
2a10:3c83::/32 maxlen: 32
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:66:09:f7:93:a6:70:80:4e:b3:4b:34:6f:f3:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 1 19:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86f183b9e632171df80ccce608496f1037a421c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:a6:fa:04:e3:f9:5b:0e:c3:c5:c9:6f:56:
19:d0:da:51:48:ab:06:6a:61:b6:64:a3:19:0e:11:
da:e2:a6:0e:e1:68:de:0b:91:8e:d7:2f:ec:60:72:
33:a0:4e:4f:a1:c3:8f:61:d9:f6:b0:28:24:72:e3:
24:57:56:0e:8b:04:d1:60:6f:62:69:4f:95:a5:f3:
fa:70:69:98:cf:f3:5b:9f:dd:17:05:c0:a7:0f:c3:
a7:47:17:8f:ad:78:c1:9a:88:10:73:a8:a0:b7:bb:
ee:d1:82:8f:45:84:25:54:3b:43:d0:38:d7:b9:47:
4b:68:3a:46:63:fc:8c:0e:c4:0c:af:c7:43:a3:0a:
b9:a8:88:09:f1:13:f8:3a:58:28:94:6c:21:00:29:
19:97:56:61:99:e1:78:a3:eb:f7:b6:84:a6:8b:2d:
e7:78:e5:98:52:4c:18:80:6c:cc:9a:af:34:0a:90:
0f:c2:31:de:1a:52:c1:41:98:ed:9e:de:d6:3e:2f:
9f:39:9f:b7:38:f2:6b:d0:b8:c0:e1:c8:5e:37:7b:
d7:f2:2c:a8:c3:d0:48:82:3f:91:a8:b1:42:4c:5d:
82:33:eb:c5:53:f0:eb:6b:04:6b:cf:09:fc:04:1c:
d2:c8:e2:05:bc:22:01:9c:18:a1:7b:ca:15:45:46:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:83:B9:E6:32:17:1D:F8:0C:CC:E6:08:49:6F:10:37:A4:21:C9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hvGDueYyFx34DMzmCElvEDekIck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.12.0/24
160.19.94.0/24
IPv6:
2a10:3c83::/32
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:36:e9:75:07:ed:80:58:ea:5b:0f:f7:47:2b:9f:75:88:53:
29:d7:c5:7f:25:5a:8c:1b:c2:43:25:2e:e3:f1:28:3f:f9:96:
e5:3f:a8:39:a4:0e:79:a9:6c:15:c9:96:4b:fb:ce:2e:30:95:
61:ff:f2:78:56:5a:24:0c:89:c2:c8:07:d6:d7:29:72:57:3b:
bf:35:35:c5:9c:a8:4a:4f:28:75:5b:ef:1a:7b:7c:00:ec:ed:
1c:46:8d:a8:54:88:8e:ed:f6:1d:df:52:ca:62:5c:1e:a7:be:
f7:0e:03:b9:b5:3f:dd:50:30:a5:87:74:84:49:22:7f:02:39:
fb:cd:10:76:fc:07:02:c6:15:22:4e:e1:d0:b4:13:b5:25:e7:
d3:59:70:f2:c1:3f:88:93:96:d1:10:62:3c:59:02:f7:c1:ac:
7c:d0:8e:e2:f3:3a:98:00:16:75:8c:89:8d:c5:18:ce:fb:88:
b3:d4:50:dd:5c:7d:6e:4e:76:0a:a8:5a:18:ac:fa:02:a0:90:
4e:1b:e6:16:4c:a8:87:1f:59:5e:db:d9:e2:83:11:58:6d:11:
9e:f3:ba:43:36:4f:bb:3e:55:65:75:92:80:a4:70:1a:67:ba:
40:9b:31:c3:9d:79:2f:5b:c3:30:7e:6c:a8:d0:b2:b9:9b:78:
67:a8:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:31:44 2026 by rpki-client