Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HfMlBJb1LZSu-vX_ufwoBDdwBnI.roa
File: HfMlBJb1LZSu-vX_ufwoBDdwBnI.roa (raw, json)
Hash identifier: 7W8uACQZ3ZU8s/a4aQYlIwKi8H6Lknsn0+MrPto2M78=
Subject key identifier: 1D:F3:25:04:96:F5:2D:94:AE:FA:F5:FF:B9:FC:28:04:37:70:06:72
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E48FB6C9539047C3E55EE083FD0A69E05
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HfMlBJb1LZSu-vX_ufwoBDdwBnI.roa
Signing time: Thu 21 May 2026 05:21:37 +0000
ROA not before: Thu 21 May 2026 05:21:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 194.231.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:48:fb:6c:95:39:04:7c:3e:55:ee:08:3f:d0:a6:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 21 05:21:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1df3250496f52d94aefaf5ffb9fc280437700672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:4c:ad:77:02:0a:76:8d:7e:e5:75:0f:6c:
fb:4e:b4:89:22:01:03:92:32:9e:85:5a:5a:52:9f:
96:9a:c2:f2:5f:be:2a:54:9b:69:2d:4f:f2:93:56:
33:14:64:4c:43:f6:38:40:9b:39:1c:bd:ed:50:50:
e8:58:43:b4:9e:41:5c:6a:eb:b2:d4:05:0d:0e:28:
db:08:65:e8:21:74:e0:59:0f:3d:36:db:95:a6:16:
21:68:fd:bb:8d:df:92:94:c8:19:1a:e6:b8:54:cc:
12:f6:06:a6:7b:ad:c6:a4:6d:6b:0c:99:38:d6:8c:
80:32:86:71:84:88:c1:dd:18:32:33:f8:e9:6c:cf:
e0:20:99:27:31:05:18:a3:ab:d9:a1:6e:f6:d8:56:
f6:96:92:13:ab:f6:1e:c3:07:6b:2a:fe:9c:60:4f:
8b:21:fd:c5:e1:53:4c:55:bc:57:b9:a0:33:81:f3:
88:2b:88:01:a7:b7:94:d6:98:6b:01:d4:84:9c:7d:
6b:0b:e6:77:04:9c:6c:c6:2b:ec:c4:72:6f:ab:67:
03:9e:a0:12:64:0f:8e:11:9c:c7:e4:6d:a9:77:8e:
4e:2d:ae:40:d1:b9:43:50:c5:75:0a:82:6a:31:70:
8c:83:78:e9:5b:6e:70:b3:ab:2f:91:2f:de:7e:4f:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:25:04:96:F5:2D:94:AE:FA:F5:FF:B9:FC:28:04:37:70:06:72
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HfMlBJb1LZSu-vX_ufwoBDdwBnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.192.0/23
Signature Algorithm: sha256WithRSAEncryption
be:a9:3a:d1:a0:d9:64:01:cb:8d:c8:8b:bd:b6:26:47:51:6d:
fc:35:c6:51:78:4e:b4:0e:88:16:3c:f0:ae:da:90:60:0b:92:
81:6b:0c:75:4a:20:72:21:08:46:7f:7a:cc:0c:3f:f0:49:80:
e9:66:68:8f:03:68:76:9f:1f:97:05:0d:0f:9f:2e:ad:e9:89:
e8:60:38:c8:60:06:a4:4e:bc:72:97:ef:a3:39:db:ae:bf:f2:
60:6e:cf:63:28:0f:54:33:ee:ed:26:28:93:07:1c:44:59:f1:
55:f2:58:bd:ea:39:98:49:b2:4b:51:32:38:f7:59:cc:0c:44:
66:68:b8:2a:91:02:44:9c:82:0e:52:10:dd:e7:26:cd:6c:d7:
d1:d5:00:53:96:1a:78:ac:f5:1f:1d:34:97:e5:51:bb:7b:fa:
91:e2:76:75:e8:2c:e6:6b:8b:59:fe:1e:d2:10:8c:f4:1f:da:
18:53:da:87:e1:8b:d7:fb:87:36:23:15:9b:06:d2:4a:9d:eb:
5a:93:0f:6c:ec:2e:4b:67:21:1e:09:cb:0e:06:e8:d0:3a:86:
9c:c6:f0:7f:21:6b:99:cc:49:60:e1:6b:33:03:85:b6:5d:35:
c7:5e:49:ec:0f:2b:87:f5:9b:3a:19:0b:1d:70:4d:1d:10:95:
bf:7e:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 06:53:42 2026 by rpki-client