Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/H0RPmVXlcxe-IVdUUrNXNtTUheg.roa
File: H0RPmVXlcxe-IVdUUrNXNtTUheg.roa (raw, json)
Hash identifier: M64izzkP81Y7dPbzZhl9oE1cVoL20KWzwc9PENpb7b0=
Subject key identifier: 1F:44:4F:99:55:E5:73:17:BE:21:57:54:52:B3:57:36:D4:D4:85:E8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F5F690072A791857FB4FF72FFC0F6C310
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/H0RPmVXlcxe-IVdUUrNXNtTUheg.roa
Signing time: Tue 14 Jul 2026 06:55:44 +0000
ROA not before: Tue 14 Jul 2026 06:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149573
IP address blocks: 188.255.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 08:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:69:00:72:a7:91:85:7f:b4:ff:72:ff:c0:f6:c3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 14 06:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f444f9955e57317be21575452b35736d4d485e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:93:80:f9:9b:11:98:76:4c:56:24:00:9b:
c6:f2:e2:2b:d1:4d:7d:5c:f1:26:ce:ad:bc:08:cc:
bd:cc:ff:10:df:65:05:96:72:05:e0:5c:8c:2a:e2:
c3:a7:0d:66:2c:c7:6a:e3:ae:f2:d3:f5:ab:bd:4c:
df:a2:3a:ae:b9:f0:49:f8:24:ae:3b:1c:06:01:34:
fd:3c:56:eb:ad:ef:27:16:f5:78:e3:63:a2:55:b6:
00:e0:e5:02:2f:fd:28:e1:22:68:ee:bd:f7:b1:13:
fc:60:93:55:7c:28:f1:26:09:b3:77:07:3b:00:d1:
78:c9:25:dc:ba:35:9a:d8:5f:9e:32:28:15:39:3d:
89:49:1b:a7:51:65:1d:cd:64:80:27:03:af:d3:e9:
e5:72:5d:bc:ed:e0:be:89:f6:15:6b:f0:94:e6:e7:
1c:65:b7:81:d0:76:75:85:c4:58:1c:3d:1e:2f:f4:
ed:cb:9b:aa:d1:76:b7:96:9b:0e:6e:0d:35:4c:11:
f4:03:a1:a2:b8:1e:b8:dc:f8:92:96:1f:8b:3a:87:
cf:b4:20:78:b6:2a:93:04:60:30:38:44:dc:91:77:
f4:3d:62:c4:b7:18:65:e0:20:45:5c:50:4c:fd:2d:
3a:4a:2f:98:00:47:85:dd:13:07:12:ee:21:30:c5:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:4F:99:55:E5:73:17:BE:21:57:54:52:B3:57:36:D4:D4:85:E8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/H0RPmVXlcxe-IVdUUrNXNtTUheg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a1:e4:fe:d2:ae:74:87:a8:8f:3c:ed:8d:5c:13:52:36:3d:
a1:c7:c5:c5:8c:db:d8:c2:e8:c6:d7:63:6b:26:3e:8f:cb:8f:
11:68:ed:d2:ea:63:0f:f4:54:21:45:34:9f:9d:a1:5f:72:f6:
a8:9c:7a:56:8e:a8:43:8c:5e:da:83:86:31:f1:20:c5:94:ff:
1f:31:23:53:35:39:9a:6a:18:cb:fe:4a:98:60:b4:d1:04:77:
09:a8:54:10:ef:fa:5d:67:7f:b0:7a:ef:30:06:66:6a:97:50:
0f:05:34:e7:e0:5a:5b:e1:d9:0f:d7:96:e1:01:2d:15:ed:cd:
81:52:d8:b3:4a:c2:41:75:6d:a7:5a:09:b7:81:8a:fb:90:27:
2f:4c:3f:f3:6e:c2:e8:b0:48:b9:41:b0:57:af:50:e0:a0:f1:
2c:fe:a8:d0:4b:a8:d1:cc:20:d8:5d:14:f2:c1:43:ec:62:0d:
fc:97:80:a7:e8:a3:b0:77:5a:a1:2b:bf:f0:a7:3f:d6:51:82:
48:94:8f:bc:1d:a1:a5:5c:b2:81:43:16:b4:cd:bf:5e:22:1b:
c3:90:ca:a8:27:04:0f:b4:39:b5:6a:9a:04:a6:57:2c:d4:f4:
59:53:ed:ec:03:3f:fc:64:83:4b:f1:6c:b0:5a:48:b8:44:2e:
39:15:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:19 2026 by rpki-client