Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/HAQauZi2r0xo6WbkGze7VYOk6WE.roa
File: HAQauZi2r0xo6WbkGze7VYOk6WE.roa (raw, json)
Hash identifier: TfXurk3yd6vWAtbwVUa2cyEeQAUfrtCQBzclnt5Wkx0=
Subject key identifier: 1C:04:1A:B9:98:B6:AF:4C:68:E9:66:E4:1B:37:BB:55:83:A4:E9:61
Certificate issuer: /CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Certificate serial: 019D7740F9D453D19D5495041F8B746F132E
Authority key identifier: B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/HAQauZi2r0xo6WbkGze7VYOk6WE.roa
Signing time: Fri 10 Apr 2026 11:57:20 +0000
ROA not before: Fri 10 Apr 2026 11:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199596
IP address blocks: 208.88.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:40:f9:d4:53:d1:9d:54:95:04:1f:8b:74:6f:13:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Validity
Not Before: Apr 10 11:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c041ab998b6af4c68e966e41b37bb5583a4e961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:ec:97:bb:2b:57:41:93:4e:23:f1:12:de:
28:44:95:13:75:4e:95:d4:14:e8:e8:7c:ce:f8:91:
f1:3a:66:a4:d0:da:0c:d0:dd:f0:5a:6c:84:92:3c:
29:d5:8b:39:3b:28:58:f2:97:b5:cb:71:a5:fb:33:
8c:35:c3:cd:7e:d0:02:90:05:cf:f3:a1:56:ed:c6:
d0:d8:7e:4d:b3:84:45:52:ea:0b:32:45:65:a1:9a:
c2:ab:a3:bd:31:83:ef:29:6e:3c:f4:5b:5b:bf:8f:
5c:9a:4d:2f:bc:b8:fc:23:f8:f0:8c:f3:31:98:77:
fd:cf:11:ca:7d:95:0d:ae:6e:5c:60:37:e2:03:02:
a1:56:0c:67:f8:e9:ff:12:e6:1f:8b:89:37:74:1f:
38:79:8d:44:d1:00:26:45:0d:86:c8:31:73:83:8f:
93:23:69:f8:18:d9:40:21:e8:3b:8c:ee:62:5f:1c:
c9:0d:ce:16:13:18:44:2d:58:c1:2a:da:74:42:bf:
97:5f:a4:9b:58:83:38:b5:d2:e6:87:1e:16:a2:19:
31:8c:ea:b1:1e:30:10:96:64:21:f9:5a:cc:26:74:
99:c1:dd:ec:9b:7c:31:8c:60:99:98:d1:a1:cb:73:
33:aa:0d:c8:59:d4:98:7b:82:c0:4f:4d:8d:ba:8b:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:1A:B9:98:B6:AF:4C:68:E9:66:E4:1B:37:BB:55:83:A4:E9:61
X509v3 Authority Key Identifier:
keyid:B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/HAQauZi2r0xo6WbkGze7VYOk6WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.88.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:0c:17:db:58:20:67:89:a0:b1:ca:f7:60:fe:ee:2a:19:c7:
a9:16:4e:af:df:4f:be:06:bf:ac:2b:0a:c4:a6:4e:57:cc:a1:
c3:d0:bd:c0:37:de:bd:d0:be:9f:b7:5f:f1:1f:bc:77:9f:8f:
09:40:a1:14:1d:54:37:ba:1c:b3:99:8e:19:72:1d:24:9a:34:
1e:85:b8:c1:62:9d:b8:3e:97:0a:8d:8f:cb:01:7d:98:8c:ce:
e1:0e:39:44:83:50:ca:eb:f6:b5:2c:03:0b:07:04:99:98:d3:
f0:49:5e:84:94:b2:d3:99:c1:e0:49:ec:52:a3:fa:40:8c:0a:
ce:fa:6f:44:54:d4:fe:7d:07:55:94:d4:cc:6d:20:67:72:43:
96:c8:7d:86:4d:00:53:d2:6f:90:45:b2:dc:9c:84:75:5e:47:
d3:b6:0c:c9:9f:63:ce:fe:0e:c0:2e:66:e4:4b:7f:dd:c2:d1:
ee:38:fe:0a:af:c3:f7:5e:04:11:e0:28:db:4e:7d:70:8d:bc:
50:e8:4f:54:54:40:ec:64:40:bd:15:6e:3d:34:5e:1c:91:08:
d5:0f:0f:da:e1:07:ba:0b:b6:2d:d0:66:07:b8:9b:c1:4c:ab:
ca:1a:00:fb:2f:3a:bd:3a:91:d8:af:ab:e4:c9:26:ba:8a:4a:
25:f0:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:26:58 2026 by rpki-client