Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/HdF1Etsw4pdlSu1K8vrei4yVmKw.roa
File: HdF1Etsw4pdlSu1K8vrei4yVmKw.roa (raw, json)
Hash identifier: uoyjLiPTlTI461zU8sJL8PSon9F9MLbPvGcIZXxD+zQ=
Subject key identifier: 1D:D1:75:12:DB:30:E2:97:65:4A:ED:4A:F2:FA:DE:8B:8C:95:98:AC
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23687C77969C6B8AD3E5313A5C202C0B
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/HdF1Etsw4pdlSu1K8vrei4yVmKw.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5378
IP address blocks: 2a01:840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:77:96:9c:6b:8a:d3:e5:31:3a:5c:20:2c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dd17512db30e297654aed4af2fade8b8c9598ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:ba:5c:d6:ec:01:58:e6:8b:c6:cd:eb:97:
12:48:70:1b:7a:88:25:b4:10:f5:7a:55:97:80:ed:
ca:06:1a:94:b4:37:7b:f7:82:1f:55:91:21:bf:2e:
1f:13:05:90:fd:6f:3c:ee:ee:27:86:e6:a8:68:cc:
f3:57:c8:d9:da:b3:d8:27:c9:70:70:b5:e7:2b:76:
5a:ce:1e:ca:6a:e0:f5:a6:33:fe:99:46:e2:5b:5c:
a3:7c:aa:d7:b4:c9:97:14:92:01:eb:bd:44:f9:95:
da:b8:ad:74:98:74:52:4b:26:a4:96:30:e3:8c:96:
c4:3b:b7:9f:34:d2:b7:7f:04:6b:c4:ad:7e:8e:08:
c5:f8:3e:c1:44:da:98:bd:a8:e8:7c:9a:37:c9:3b:
1f:c0:42:bd:4d:f5:40:bb:df:01:d7:86:32:2b:8b:
5b:f9:a8:2f:ce:22:19:db:3f:1a:3c:d4:a0:a8:4d:
52:05:54:94:2d:96:e6:70:23:4b:cf:3e:76:2e:b4:
ef:6d:dd:00:00:62:4a:f0:48:d7:fa:ec:f2:03:b6:
06:25:d1:32:a9:8c:d7:92:fa:e8:83:f2:7b:5c:45:
e3:76:a9:2c:8a:c4:93:bd:ad:2a:b0:0a:9a:9e:28:
f9:37:72:f7:10:35:7b:7e:72:96:16:16:82:ce:81:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:75:12:DB:30:E2:97:65:4A:ED:4A:F2:FA:DE:8B:8C:95:98:AC
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/HdF1Etsw4pdlSu1K8vrei4yVmKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:840::/32
Signature Algorithm: sha256WithRSAEncryption
18:3b:3c:bf:0e:76:d4:34:c9:26:f9:b4:35:e5:51:be:06:2a:
1f:7c:0b:f3:e6:50:05:ad:32:88:ca:62:2a:14:a7:fb:aa:4b:
d4:48:af:dd:0d:e0:de:db:63:33:1d:41:90:dc:49:90:c3:3b:
89:c6:f2:70:eb:50:9f:2c:e6:95:40:08:d3:5e:5d:23:42:de:
37:01:6e:79:fd:84:46:2d:0c:18:45:a5:2e:6b:d1:5b:37:e7:
7f:c3:30:fc:03:f2:4f:43:bf:39:70:c2:3a:e0:48:b6:98:c5:
2f:7f:f3:e4:aa:c8:d0:b2:b0:ab:4e:b2:ca:41:d9:38:a2:a9:
9e:0a:ad:a6:45:24:94:4b:50:77:84:42:52:0b:e7:80:f2:fa:
a1:30:3e:54:c3:f5:5b:95:0c:65:46:df:b0:9d:b2:cc:47:bb:
01:60:72:77:50:ef:95:3c:4d:5a:b6:4c:f1:37:bd:e5:41:17:
ce:86:1b:f0:45:47:df:e8:80:73:e7:85:f1:14:25:dc:64:12:
60:7a:ed:bb:74:af:e7:c5:b1:fa:98:9d:1f:4c:8b:20:c1:49:
a7:6e:81:c2:8d:d6:05:b9:3f:07:1c:6f:55:6e:1a:9e:11:73:
cf:62:74:c7:96:83:a7:65:96:32:1b:03:69:a4:09:ff:7b:18:
55:ad:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:17 2026 by rpki-client