Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HeQKx2NwOf4KgARpjlfRxVgGzoI.roa
File: HeQKx2NwOf4KgARpjlfRxVgGzoI.roa (raw, json)
Hash identifier: gjpgtc7NFu4/B/3MnIUAOBWezAJd4bJAJa/a+sgf8hU=
Subject key identifier: 1D:E4:0A:C7:63:70:39:FE:0A:80:04:69:8E:57:D1:C5:58:06:CE:82
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E84ED2CB534F89BED07B4F3884F9991F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HeQKx2NwOf4KgARpjlfRxVgGzoI.roa
Signing time: Mon 28 Sep 2026 13:57:54 +0000
ROA not before: Mon 28 Sep 2026 13:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59729
IP address blocks: 45.152.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:4e:d2:cb:53:4f:89:be:d0:7b:4f:38:84:f9:99:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 28 13:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1de40ac7637039fe0a8004698e57d1c55806ce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:44:ca:46:71:ae:1a:1e:a8:20:68:d6:84:
9e:01:08:60:57:f3:99:01:68:4b:31:ca:65:a6:de:
a6:5f:63:6f:b1:79:46:8f:6e:9f:07:22:50:77:1e:
d5:d7:c9:89:2c:58:3e:80:d5:94:35:10:0a:b9:82:
4e:4d:2c:d5:3a:d3:29:e0:d9:92:74:d5:57:71:71:
fd:67:f5:6e:71:e1:ea:6d:84:12:5b:f3:7b:98:c4:
78:8f:c5:b5:b3:20:46:94:12:bd:d6:a5:c8:4d:bc:
12:85:63:9d:2c:2c:ae:80:6f:85:6d:f2:75:60:51:
04:48:3e:32:51:58:1b:bc:5b:58:ea:3b:32:e2:20:
51:0b:d1:1b:48:41:ef:cf:b4:a3:b5:cd:4c:c8:21:
e9:0f:c6:6a:02:66:99:25:fb:ad:78:dd:af:e9:89:
d0:d8:41:da:fd:d8:60:6e:45:80:26:f7:42:55:47:
92:04:6f:1c:ce:8e:5f:ea:fa:b5:4e:cb:22:71:76:
75:9d:b1:38:b2:d0:73:0d:63:70:4e:65:b1:0a:59:
23:58:4d:31:22:16:f6:7b:79:07:ad:03:86:0d:be:
83:f1:66:09:05:b7:74:06:25:3e:c2:73:74:e1:e8:
84:cd:36:15:bb:31:9b:9c:9a:52:11:df:7a:d4:ff:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:0A:C7:63:70:39:FE:0A:80:04:69:8E:57:D1:C5:58:06:CE:82
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HeQKx2NwOf4KgARpjlfRxVgGzoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.139.0/24
Signature Algorithm: sha256WithRSAEncryption
76:62:54:07:e1:97:99:a3:29:20:7b:4f:f4:ac:bc:1f:f5:4f:
26:33:f7:82:61:51:c1:cb:2b:13:1b:e7:6f:8f:a8:8b:34:28:
48:53:ec:fb:0f:57:01:9c:27:a0:d2:61:cf:7c:c1:10:01:a4:
0a:d4:65:c9:e6:e5:33:95:fb:ce:87:69:97:8e:0e:52:fc:3a:
7f:b1:39:34:9a:19:d2:14:61:c0:7c:8d:ef:ee:4d:29:00:1e:
4b:c9:80:c1:63:1b:c8:68:13:14:b2:ef:50:e6:e9:a8:46:c1:
a8:8e:33:c6:b2:82:d0:ef:ce:5b:b8:b1:83:31:2d:2e:e6:07:
e8:50:cb:e3:37:70:02:3f:58:8b:d7:dc:eb:25:03:09:d6:70:
d4:37:8c:9d:88:2a:3e:85:b1:52:49:62:c1:4f:bc:07:8c:52:
6b:88:96:77:ce:1a:39:c8:b2:af:e6:ff:b9:e5:3b:8b:13:9f:
b5:9e:bb:a6:70:4a:b9:dc:23:a7:a6:3a:4d:c5:81:5b:e5:59:
a2:b1:68:72:65:83:e8:e2:27:37:2b:63:2a:22:0e:30:b3:e2:
59:be:8b:0b:8a:0a:74:b3:70:ee:99:5c:da:e3:05:73:de:fe:
f4:f6:e4:0f:61:be:5c:ee:9b:0b:c2:7b:4d:bd:94:3f:6f:d3:
5e:63:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:47 2026 by rpki-client