Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/HWnuH-Gn5xUl5QhqL6zeVOdcK04.roa
File: HWnuH-Gn5xUl5QhqL6zeVOdcK04.roa (raw, json)
Hash identifier: 225qZobIl4s8wOpNa2LfC1cmoU+8O6pPdl1/SrqUvPM=
Subject key identifier: 1D:69:EE:1F:E1:A7:E7:15:25:E5:08:6A:2F:AC:DE:54:E7:5C:2B:4E
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019E37696EC69913A380BF13BF97316D322F
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/HWnuH-Gn5xUl5QhqL6zeVOdcK04.roa
Signing time: Sun 17 May 2026 19:28:36 +0000
ROA not before: Sun 17 May 2026 19:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.208.108.0/24 maxlen: 24
2a01:f140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:69:6e:c6:99:13:a3:80:bf:13:bf:97:31:6d:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: May 17 19:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d69ee1fe1a7e71525e5086a2facde54e75c2b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:fb:29:a3:95:0a:93:fd:c2:38:e4:13:b3:
e6:c3:42:1f:80:e0:a6:2e:35:27:db:53:eb:57:44:
96:81:66:9c:6e:59:00:4b:55:06:63:a6:31:f0:0b:
99:b7:1a:3d:73:9e:5d:b9:7b:30:01:05:d9:ea:a2:
f1:c2:3a:f1:b0:58:81:55:96:81:8d:0b:09:12:58:
db:4f:92:f7:13:48:8d:7e:9d:73:f1:06:7a:78:6a:
3d:6f:d0:a5:c0:02:90:88:d9:d6:3f:5e:3b:91:e1:
d1:18:d9:cb:cc:83:9a:ed:11:37:8b:45:cb:34:c7:
98:68:28:df:cf:69:6f:ff:bf:2a:c6:34:6a:9f:8a:
cf:95:f8:de:45:5b:73:1e:75:83:43:be:09:2d:11:
86:74:d2:24:11:00:49:5c:d9:de:06:92:e6:eb:9e:
60:c7:3b:c1:58:03:41:bd:6e:6e:51:0e:77:47:83:
3c:1a:71:72:bd:54:65:02:9b:2e:7c:af:17:9e:10:
8d:08:a6:ff:56:c2:05:d6:d6:75:b6:0f:1d:e7:28:
fe:92:56:ae:6e:03:59:63:19:e2:1d:94:1f:75:c7:
56:fb:67:81:6b:65:36:55:1b:ce:f0:34:ec:85:a9:
e9:6a:68:80:73:5e:02:32:5b:cb:98:68:35:9c:d0:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:69:EE:1F:E1:A7:E7:15:25:E5:08:6A:2F:AC:DE:54:E7:5C:2B:4E
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/HWnuH-Gn5xUl5QhqL6zeVOdcK04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.108.0/24
IPv6:
2a01:f140::/29
Signature Algorithm: sha256WithRSAEncryption
4f:57:83:64:0e:11:da:10:c9:c3:3e:3b:72:62:64:92:9c:56:
f0:7c:3e:ea:7f:05:b7:31:36:48:df:b4:3c:b8:13:44:ef:3e:
eb:a8:22:37:d4:7e:e1:c7:c6:4f:b2:44:00:10:c9:5d:35:58:
1f:2e:f0:ea:f1:5f:a7:72:e4:4d:35:18:0d:d4:d0:c7:23:be:
55:aa:a1:29:fa:e3:f7:97:a6:49:b0:7f:e1:03:05:ac:65:1d:
dd:e4:f1:19:d0:c6:2f:a3:24:8b:f8:e7:7b:31:cd:ef:90:17:
df:8f:55:7b:83:ae:1e:2f:8e:12:72:57:88:12:40:25:9a:02:
29:67:e1:9c:81:4e:85:33:de:41:9d:75:14:67:10:64:b0:a6:
9d:01:a8:a6:a0:c8:e8:7d:6a:91:fd:0e:6d:0a:99:a4:53:11:
be:5b:f6:6b:09:0e:d9:32:d1:c4:bc:d1:38:7b:f2:a6:72:e2:
2a:f3:f6:f5:72:e4:01:c5:1c:4b:9c:f8:52:24:e6:50:09:58:
cf:35:b6:dd:08:2f:df:8a:90:05:e8:d0:01:8a:c2:52:71:7b:
29:23:af:76:f0:34:8c:c0:f5:64:0d:b3:c5:4e:47:08:68:ae:
ea:8e:a3:a7:86:65:11:5f:3d:13:a5:97:e6:fb:79:d0:a3:19:
0c:e5:0d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:03:29 2026 by rpki-client