Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/Hs0IPvXPiiu5SRQabWCm2vLaUng.roa
File: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (raw, json)
Hash identifier: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=
Subject key identifier: 1E:CD:08:3E:F5:CF:8A:2B:B9:49:14:1A:6D:60:A6:DA:F2:DA:52:78
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 019E77B3B6B4C4E1BD722516F9CCBD0FC6A5
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/Hs0IPvXPiiu5SRQabWCm2vLaUng.roa
Signing time: Sat 30 May 2026 07:05:26 +0000
ROA not before: Sat 30 May 2026 07:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 81.31.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:77:b3:b6:b4:c4:e1:bd:72:25:16:f9:cc:bd:0f:c6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: May 30 07:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ecd083ef5cf8a2bb949141a6d60a6daf2da5278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:28:6d:8f:92:78:97:91:91:ed:76:7d:55:
33:02:fe:52:ed:25:79:99:82:15:65:6c:60:79:18:
32:f5:e8:5a:b1:c6:4b:6e:4d:cc:72:b6:ba:21:14:
c8:c3:db:ac:36:e1:54:d8:1d:85:bd:d7:ad:6f:b7:
cc:cb:ee:bd:e3:a5:74:bc:3c:9b:d3:4e:6b:b1:42:
c0:3b:e9:c5:9f:94:d5:47:bd:f6:e7:d4:64:7d:23:
ed:f2:4f:a3:7b:1f:a1:85:79:4c:9c:33:f3:98:dd:
33:60:a4:67:fb:de:2a:d5:e3:da:eb:d0:8f:12:13:
f7:88:d0:f6:e7:69:93:b1:6d:c0:64:c3:91:5f:81:
70:4b:dd:1b:c7:88:7f:80:00:58:59:20:46:9d:83:
b6:1a:9b:df:98:45:09:12:09:b1:14:d0:b2:6b:c6:
85:71:7a:03:45:8a:94:21:7f:c2:71:41:a2:d7:c6:
7d:c9:46:f1:6e:ff:2e:cf:7f:10:3b:73:30:15:67:
40:af:0c:0a:0f:f6:0c:31:8e:16:8a:f8:9d:d3:3d:
8f:59:e0:2a:3a:b6:3e:d8:25:b2:97:f1:45:f9:1a:
e3:ce:4a:05:27:fa:aa:77:13:6b:86:d6:86:45:e8:
0b:66:3e:db:b7:04:f6:e2:38:5c:20:92:d1:a2:27:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:08:3E:F5:CF:8A:2B:B9:49:14:1A:6D:60:A6:DA:F2:DA:52:78
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/Hs0IPvXPiiu5SRQabWCm2vLaUng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
12:a1:6c:ea:c7:5f:de:dd:b7:e1:9f:7d:ec:5e:5b:c6:8d:4b:
26:22:a2:9c:c0:93:33:4f:f5:05:cb:fb:ee:fa:b3:6c:48:85:
8d:1f:ef:84:8b:62:b1:cb:64:1f:df:50:bd:74:6c:02:8d:a9:
ac:c5:18:c5:0e:0a:6b:4c:ab:e4:b5:8f:d6:df:f2:be:9c:fa:
18:74:82:00:be:99:28:ac:74:fb:fd:2a:aa:01:0e:90:c8:53:
28:04:60:a9:27:9a:ad:fb:02:9c:b6:94:b5:57:32:f9:d8:d5:
87:4c:49:b9:f6:89:15:87:aa:b0:9d:56:0d:4d:d0:08:95:09:
82:44:30:e1:65:7f:16:5d:ca:dd:ce:f0:41:63:67:65:02:f6:
be:d2:82:bf:b4:3b:56:81:83:34:3f:e3:f1:71:45:3a:cf:3c:
aa:30:f4:36:8b:9e:5a:69:eb:f7:62:0e:2c:9b:c3:96:8f:57:
a2:a1:02:c3:2c:17:60:25:17:e9:44:75:48:97:b8:9a:44:7f:
af:9e:ac:04:68:21:10:83:31:54:b7:d0:a9:62:3d:74:1e:8b:
1d:f4:bf:87:7e:f9:5f:39:41:de:46:7f:85:ee:51:eb:5a:06:
93:18:ef:7f:5f:25:eb:9b:cb:73:a2:00:0d:51:28:24:9c:b9:
6f:01:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:19 2026 by rpki-client