Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa
File: HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa (raw, json)
Hash identifier: LZrOQ/KPSOzENF2jkc9vB3eqHtccVFGCJ8IUIaKPVcQ=
Subject key identifier: 1D:98:D0:F1:D7:DA:D2:15:9C:07:E3:67:A5:69:D8:03:36:B1:07:E2
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A13BC5AEB0591CD01971E29BDC952940DD
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa
Signing time: Wed 14 Oct 2026 18:56:13 +0000
ROA not before: Wed 14 Oct 2026 18:56:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:1040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c5:ae:b0:59:1c:d0:19:71:e2:9b:dc:95:29:40:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 14 18:56:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d98d0f1d7dad2159c07e367a569d80336b107e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:db:ab:cf:cc:8f:7d:86:bc:e0:91:d4:4a:
35:a1:fd:14:87:49:ce:6f:21:cf:73:ba:76:7b:82:
a1:79:3b:f2:79:d6:fb:77:5e:59:57:4c:00:fb:c7:
df:22:5f:35:e4:39:77:ed:ad:30:7b:fd:e9:cc:84:
7b:f8:fa:52:e1:88:08:5e:86:d7:00:4d:b8:39:aa:
47:ee:b4:6c:c8:a4:5f:8a:35:2d:8c:c6:c3:87:e1:
fc:17:ee:7c:30:82:5d:12:b3:cf:9e:0a:ad:8b:3c:
dd:10:b5:bd:a0:d7:a7:64:2d:81:50:67:66:34:b6:
38:34:ec:0a:72:94:18:85:77:b1:80:3b:bd:d0:81:
6e:ec:93:58:24:39:8b:82:f8:7b:cd:ec:af:bb:0a:
51:fc:79:dc:2c:bf:17:a8:09:87:c4:6c:85:d0:30:
29:5f:4a:d1:3e:83:14:6c:4d:a1:a3:ee:78:c3:ff:
bf:e5:b6:81:71:e5:be:b2:3e:e1:c4:d2:f8:53:6b:
65:90:bd:5c:f0:33:bd:f5:97:7a:96:f9:c3:9b:72:
3e:54:22:b3:14:e3:66:ff:7b:bd:4a:9f:bd:14:3b:
66:8f:00:3b:30:eb:51:b3:3d:99:38:4e:1b:66:ed:
78:e1:1a:71:bc:10:46:89:7a:fe:82:9e:e8:17:9e:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:98:D0:F1:D7:DA:D2:15:9C:07:E3:67:A5:69:D8:03:36:B1:07:E2
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
93:8b:33:7f:ce:31:c5:76:15:f7:86:7b:be:be:ac:13:66:2a:
be:df:f8:a0:9a:35:7e:c4:e2:72:1d:4f:8c:dd:c2:04:bc:c4:
0f:81:af:ad:b5:65:8b:b3:da:3b:6e:9d:99:df:b8:46:5b:ad:
13:ea:f3:a2:82:93:9a:f7:fa:7e:4e:3e:a0:c1:9d:dc:aa:05:
63:97:dc:d0:36:69:49:b3:0d:30:43:3a:58:14:6f:32:f2:40:
5f:9b:1f:c6:41:16:69:54:4a:17:d7:66:d2:36:c0:ad:8f:16:
91:54:4d:ca:ed:4e:4b:dc:34:3e:ce:c1:12:4e:d4:37:81:62:
a0:a7:08:d7:9a:1d:ad:70:93:c8:d6:33:02:01:22:96:ef:5d:
54:30:0d:7d:ad:f3:80:81:b0:37:93:54:da:f1:89:e4:9c:c1:
9d:eb:b4:7c:9f:33:88:4a:e7:c7:f9:17:9e:28:9f:12:0e:2b:
c9:7f:3b:6a:8d:00:18:62:2f:e0:2d:11:d9:c8:12:66:64:ea:
c3:f7:b3:12:06:80:16:1b:88:e8:6e:42:d4:16:ff:b0:8c:32:
21:e8:59:f0:61:46:96:c9:bb:37:a2:df:2c:c1:8d:f0:44:b4:
02:04:3e:53:7d:33:fa:e7:79:bf:ac:53:13:34:b0:de:58:24:
72:66:9a:d1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7xa6wWRzQGXHim9yVKUDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjYxMDE0MTg1NjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDk4ZDBmMWQ3ZGFkMjE1OWMwN2UzNjdhNTY5ZDgwMzM2YjEwN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Hbq8/Mj32GvOCR1Eo1of0Uh0nO
byHPc7p2e4KheTvyedb7d15ZV0wA+8ffIl815Dl37a0we/3pzIR7+PpS4YgIXobX
AE24OapH7rRsyKRfijUtjMbDh+H8F+58MIJdErPPngqtizzdELW9oNenZC2BUGdm
NLY4NOwKcpQYhXexgDu90IFu7JNYJDmLgvh7zeyvuwpR/HncLL8XqAmHxGyF0DAp
X0rRPoMUbE2ho+54w/+/5baBceW+sj7hxNL4U2tlkL1c8DO99Zd6lvnDm3I+VCKz
FONm/3u9Sp+9FDtmjwA7MOtRsz2ZOE4bZu144RpxvBBGiXr+gp7oF540FwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB2Y0PHX2tIVnAfjZ6Vp2AM2sQfiMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvSFpqUThkZmEwaFdjQi1ObnBXbllBemF4Qi1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQQQDAN
BgkqhkiG9w0BAQsFAAOCAQEAk4szf84xxXYV94Z7vr6sE2Yqvt/4oJo1fsTich1P
jN3CBLzED4GvrbVli7PaO26dmd+4RlutE+rzooKTmvf6fk4+oMGd3KoFY5fc0DZp
SbMNMEM6WBRvMvJAX5sfxkEWaVRKF9dm0jbArY8WkVRNyu1OS9w0Ps7BEk7UN4Fi
oKcI15odrXCTyNYzAgEilu9dVDANfa3zgIGwN5NU2vGJ5JzBneu0fJ8ziErnx/kX
niifEg4ryX87ao0AGGIv4C0R2cgSZmTqw/ezEgaAFhuI6G5C1Bb/sIwyIehZ8GFG
lsm7N6LfLMGN8ES0AgQ+U30z+ud5v6xTEzSw3lgkcmaa0Q==
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:00:34 2026 by rpki-client