Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa
File: 1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa (raw, json)
Hash identifier: 4EkSHJe3HHgvn/GmwogeggDvlFUsX8hwMgws3SiRAfs=
Subject key identifier: D4:74:35:9C:CE:8E:D9:2C:CE:37:3D:F3:CE:BC:F1:8F:E8:86:77:F9
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A048520FD6B572D26191A323EE7EA858A2
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa
Signing time: Fri 28 Aug 2026 12:22:12 +0000
ROA not before: Fri 28 Aug 2026 12:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 158.173.36.0/24 maxlen: 24
158.173.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:52:0f:d6:b5:72:d2:61:91:a3:23:ee:7e:a8:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 28 12:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d474359cce8ed92cce373df3cebcf18fe88677f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:7f:e6:b1:7d:56:1b:61:1e:d9:a8:37:cf:
de:d6:dd:56:54:f4:2a:c6:e8:9e:cd:06:07:82:92:
10:07:c7:6f:61:5f:03:f3:0a:d3:29:63:a5:d9:c5:
6b:55:48:19:e9:9a:b4:f3:10:be:e3:02:fc:c9:1b:
79:4c:db:92:f4:c6:bb:f5:d9:74:ac:8c:02:03:54:
05:7f:a1:ac:97:89:50:08:7d:8e:e3:4c:75:ac:22:
e2:ba:5c:a0:23:54:6c:df:0a:2b:7c:6f:98:e4:f5:
35:af:d6:02:eb:5e:67:35:4e:ef:82:3b:1c:3a:a7:
e5:d7:8e:0e:86:88:0d:86:b1:a5:ab:e3:d6:43:12:
a7:59:d0:95:2d:e3:02:3c:ee:8c:66:6e:7d:21:2e:
cf:8d:b6:8f:7c:a9:58:84:06:95:83:08:36:d7:42:
5f:45:57:88:f8:d9:6a:e2:47:ff:07:ea:fa:77:1c:
16:53:6d:da:45:25:62:32:0d:9e:72:3f:6c:12:c1:
e5:60:f7:b5:13:ac:ef:cc:8e:8f:ae:9a:12:e4:23:
0b:a6:0a:60:4f:09:4e:42:6a:3b:08:ee:aa:d6:43:
ff:0c:1d:80:64:bb:75:36:a0:21:75:f4:ae:af:a6:
9e:c8:bd:30:04:b5:52:58:f5:e4:a1:1a:96:59:fa:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:35:9C:CE:8E:D9:2C:CE:37:3D:F3:CE:BC:F1:8F:E8:86:77:F9
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/1HQ1nM6O2SzONz3zzrzxj-iGd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.36.0/24
158.173.118.0/24
Signature Algorithm: sha256WithRSAEncryption
53:62:83:a3:1f:dc:0d:3d:74:53:eb:e9:98:73:76:b5:e6:99:
30:51:4a:52:e0:27:34:10:63:ee:e2:d4:5c:02:d4:a1:09:fe:
60:8d:0f:b5:66:0e:c9:4e:dc:4c:b3:8d:c5:5f:a2:8a:ab:2f:
9b:b4:87:d7:13:0f:0e:bb:6f:6d:38:2b:cb:0d:fb:9f:39:22:
2e:bf:56:30:e3:bd:dc:72:d0:68:00:9b:6e:87:9c:52:7e:1f:
e5:81:00:8a:0a:e6:bd:e6:38:07:62:29:e4:18:23:47:50:f7:
82:4d:91:1e:f6:f4:ea:f4:2d:1c:10:a4:76:10:c0:2b:ba:35:
30:f5:64:2c:09:0f:85:e6:2b:a4:5a:77:95:92:7d:c3:cd:6b:
45:fb:62:14:15:49:17:65:53:36:98:bb:be:5a:f9:5c:95:fb:
68:98:87:42:73:e9:66:00:41:0a:3d:b1:60:62:41:90:79:67:
e8:3d:32:ec:d6:55:1b:e3:a0:28:58:0b:ed:94:29:55:63:15:
08:8f:7a:82:98:45:c9:94:13:58:3c:14:d2:f6:03:a9:e1:3d:
49:b5:12:37:d2:5e:ac:d4:f5:40:4a:35:7c:31:65:54:d1:ae:
06:8d:7e:71:25:55:40:b4:d8:30:9a:76:be:70:01:06:ba:25:
1d:8f:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:43 2026 by rpki-client