Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa
File: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (raw, json)
Hash identifier: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=
Subject key identifier: 1E:D1:F4:32:78:A9:B1:35:44:DC:5F:BD:14:DB:62:BB:FD:8B:37:04
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019CCC161D126B5C97CF965077D78D247B38
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa
Signing time: Sun 08 Mar 2026 06:15:27 +0000
ROA not before: Sun 08 Mar 2026 06:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 193.202.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cc:16:1d:12:6b:5c:97:cf:96:50:77:d7:8d:24:7b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 8 06:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ed1f43278a9b13544dc5fbd14db62bbfd8b3704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:58:1a:76:18:8b:1c:5b:4f:a9:b8:73:34:
67:47:76:02:51:2d:c5:b2:73:11:3e:79:24:e0:86:
d0:c7:a5:18:23:d9:24:41:0f:46:06:df:42:82:d0:
44:c5:cb:e9:e2:ef:b5:e6:6b:81:44:9c:e4:82:ea:
55:ba:98:74:d7:4d:23:31:0f:b5:8a:12:08:98:1c:
68:df:9b:3c:ed:f4:ef:19:32:b9:4c:ac:7a:ed:8e:
3b:1d:14:b1:42:b5:07:99:ca:67:b3:77:f4:a4:34:
c4:87:fe:c0:47:ec:d3:3c:cd:5e:89:f8:e9:16:74:
ec:60:5e:d6:e2:25:d5:02:8e:23:59:6d:6e:23:38:
ac:66:47:b8:10:bb:46:fd:4a:d2:72:7e:d4:1a:ce:
0e:c3:62:af:23:56:1b:41:e8:63:90:56:26:8a:4b:
82:3d:83:14:10:b3:cd:ad:ed:7d:7e:44:b9:2c:dd:
f5:2e:1a:28:48:ec:56:b8:e2:4f:09:18:e2:33:6b:
0b:4e:22:f3:03:1b:33:2d:f5:e8:8f:fe:6a:be:79:
ed:2e:86:ce:34:27:ea:6b:7a:b8:97:23:ed:a2:20:
f7:64:31:63:ea:90:27:cd:25:76:7e:3a:2f:22:b5:
cf:aa:51:70:ed:54:7e:e9:fa:da:bd:aa:36:94:12:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:F4:32:78:A9:B1:35:44:DC:5F:BD:14:DB:62:BB:FD:8B:37:04
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1d:a3:5e:f5:f5:4d:50:21:29:e7:ad:fb:57:e1:82:bb:f1:
a5:37:42:11:92:d9:01:e2:93:24:f7:76:3d:ed:37:69:58:db:
28:be:50:54:b6:dd:04:b1:d1:48:06:be:7f:7d:7f:3d:87:71:
21:d0:76:5f:be:7d:35:20:c2:66:e4:47:64:9d:a5:de:38:b1:
44:57:41:81:4e:e8:9b:7c:92:f0:b6:cf:ac:51:a9:08:1d:f8:
ac:d0:1e:31:cb:5c:f1:36:39:2b:a6:bf:5f:f2:7d:76:f2:8a:
c4:ae:24:10:e1:c1:87:ff:e9:41:be:c3:ad:ae:92:e3:3d:19:
ad:77:29:03:3f:70:2a:61:25:00:24:14:c3:9f:cb:b0:65:4b:
c9:83:9b:d0:98:e5:52:9a:c5:e4:64:88:5e:23:36:2e:ad:eb:
36:5f:6b:64:a9:72:fb:b5:28:77:8e:32:97:eb:9c:5f:b0:82:
06:a1:b9:f5:44:52:4f:35:f1:2a:db:31:8b:59:d8:b2:12:bf:
47:ed:f0:a4:23:13:1f:ed:82:58:b4:3e:ca:c3:52:60:c2:aa:
27:37:28:97:4b:42:31:f0:1e:84:8c:99:73:df:25:1b:61:8a:
90:95:ae:bf:73:6d:39:f9:aa:89:1c:c7:43:62:d8:89:8a:1b:
63:30:63:8e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZzMFh0Sa1yXz5ZQd9eNJHs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjYwMzA4MDYxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWQxZjQzMjc4YTliMTM1NDRkYzVmYmQxNGRiNjJiYmZkOGIzNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3opYGnYYixxbT6m4czRnR3YCUS3F
snMRPnkk4IbQx6UYI9kkQQ9GBt9CgtBExcvp4u+15muBRJzkgupVuph0100jMQ+1
ihIImBxo35s87fTvGTK5TKx67Y47HRSxQrUHmcpns3f0pDTEh/7AR+zTPM1eifjp
FnTsYF7W4iXVAo4jWW1uIzisZke4ELtG/UrScn7UGs4Ow2KvI1YbQehjkFYmikuC
PYMUELPNre19fkS5LN31LhooSOxWuOJPCRjiM2sLTiLzAxszLfXoj/5qvnntLobO
NCfqa3q4lyPtoiD3ZDFj6pAnzSV2fjovIrXPqlFw7VR+6fravao2lBJe/QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB7R9DJ4qbE1RNxfvRTbYrv9izcEMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL0h0SDBNbmlwc1RWRTNGLTlGTnRpdV8yTE53US5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBylUw
DQYJKoZIhvcNAQELBQADggEBAD4do1719U1QISnnrftX4YK78aU3QhGS2QHikyT3
dj3tN2lY2yi+UFS23QSx0UgGvn99fz2HcSHQdl++fTUgwmbkR2Sdpd44sURXQYFO
6Jt8kvC2z6xRqQgd+KzQHjHLXPE2OSumv1/yfXbyisSuJBDhwYf/6UG+w62ukuM9
Ga13KQM/cCphJQAkFMOfy7BlS8mDm9CY5VKaxeRkiF4jNi6t6zZfa2Spcvu1KHeO
MpfrnF+wggahufVEUk818SrbMYtZ2LISv0ft8KQjEx/tgli0PsrDUmDCqic3KJdL
QjHwHoSMmXPfJRthipCVrr9zbTn5qokcx0Ni2ImKG2MwY44=
-----END CERTIFICATE-----
Generated at Thu Mar 12 15:48:15 2026 by rpki-client