Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HftwUF6cfQWicXWBndXwYg9Nv88.roa
File: HftwUF6cfQWicXWBndXwYg9Nv88.roa (raw, json)
Hash identifier: /RbAKLwMMd1l88k09Nna8p1U+iUYlNHezcPMsQPYGF4=
Subject key identifier: 1D:FB:70:50:5E:9C:7D:05:A2:71:75:81:9D:D5:F0:62:0F:4D:BF:CF
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A03CA086845D363F20DE581DF67768A0EA
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HftwUF6cfQWicXWBndXwYg9Nv88.roa
Signing time: Wed 26 Aug 2026 05:52:28 +0000
ROA not before: Wed 26 Aug 2026 05:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201337
IP address blocks: 84.236.137.0/24 maxlen: 24
178.156.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:a0:86:84:5d:36:3f:20:de:58:1d:f6:77:68:a0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Aug 26 05:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dfb70505e9c7d05a27175819dd5f0620f4dbfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:77:24:49:76:b1:80:0f:df:73:51:c4:1b:
fb:9c:4e:72:a4:42:a8:4d:e0:6b:b0:84:06:ed:b9:
5a:ff:40:37:25:88:6b:b7:c3:e6:2a:fa:5c:6a:a0:
f9:7f:ef:1f:5a:56:21:95:76:63:d1:7c:bc:0f:6a:
1a:9c:6a:70:a6:95:61:95:5d:a8:05:e6:a7:b5:e9:
73:b9:c7:43:1e:fc:82:e0:60:3d:9e:d1:21:d5:ed:
60:e2:4f:5e:69:84:26:87:48:68:d2:ca:79:9c:83:
ce:54:39:76:75:7b:2f:c2:7c:15:b0:d2:21:c4:c7:
58:52:af:d0:d3:61:8d:c6:b0:30:59:3e:1e:b1:a1:
47:5c:0e:84:b3:a6:24:d7:3e:3e:d4:4b:f5:cd:7e:
fa:60:bf:02:8c:d2:35:c2:a7:fb:66:f2:be:3d:32:
8f:1d:1b:b7:37:a9:0d:fd:06:05:06:51:e1:3b:4a:
83:58:2d:15:af:75:82:44:c5:3d:97:33:64:b4:d3:
bf:98:16:64:1f:d8:cc:0d:09:d2:a9:b9:35:2b:c3:
d4:18:21:7f:f1:f3:d4:11:a8:89:19:9e:59:be:f6:
66:a4:51:4a:1c:62:79:a8:6d:c2:2b:0e:a5:d3:45:
47:ea:88:79:45:48:82:2e:d2:8c:b0:06:a2:b6:5f:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FB:70:50:5E:9C:7D:05:A2:71:75:81:9D:D5:F0:62:0F:4D:BF:CF
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HftwUF6cfQWicXWBndXwYg9Nv88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.137.0/24
178.156.75.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5f:cd:a4:eb:86:66:3a:58:cb:a0:c7:b1:6a:2f:5e:fe:35:
43:9e:e8:7c:64:bf:9f:9e:82:f7:e4:43:b7:0f:03:71:4e:22:
c0:8f:8a:3a:89:fb:11:83:60:80:a7:2e:34:f3:1e:21:53:ca:
25:7e:78:46:92:37:cd:4d:7b:53:5b:90:c2:38:d2:a9:9c:32:
78:fc:0e:27:21:76:73:a6:6c:50:6d:14:ef:2c:70:56:6a:d6:
c2:af:a5:79:55:1b:e8:ae:f5:e8:c7:89:ea:c6:db:49:f5:8a:
67:7b:fa:7f:4c:88:83:28:2b:3f:e1:98:3e:14:2a:11:54:9d:
47:31:ce:1b:f4:63:58:17:36:83:4e:50:c1:dd:ec:f8:13:9e:
2c:b1:c0:99:14:c8:bb:14:9f:f2:3c:a2:2d:45:14:55:ac:52:
3d:43:4a:55:88:f2:61:78:3f:0b:27:f3:7f:37:93:03:11:b9:
15:c7:00:b1:6b:fb:0b:3a:63:4b:82:fb:40:4b:48:ee:f7:ed:
0c:8d:b0:e3:b8:a4:77:1a:94:a1:82:b0:07:46:8d:73:06:09:
45:34:69:8c:0c:80:7b:00:9a:77:ba:e5:25:6a:45:d6:6c:21:
49:67:19:37:1c:ef:8a:a6:27:fb:53:70:be:35:89:2a:ac:e0:
20:8e:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:34 2026 by rpki-client