Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HKbuSH8_HjXiwVUN7B1POnCU2OE.roa
File: HKbuSH8_HjXiwVUN7B1POnCU2OE.roa (raw, json)
Hash identifier: 9i0Mfwg/iwwXlH+nD/eYIeclazXYe6u0VQKFMf5swdc=
Subject key identifier: 1C:A6:EE:48:7F:3F:1E:35:E2:C1:55:0D:EC:1D:4F:3A:70:94:D8:E1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0674184CC35840344E9B83CBA689FF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HKbuSH8_HjXiwVUN7B1POnCU2OE.roa
Signing time: Sun 13 Sep 2026 09:08:29 +0000
ROA not before: Sun 13 Sep 2026 09:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215536
IP address blocks: 2a0e:b107:12df::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:06:74:18:4c:c3:58:40:34:4e:9b:83:cb:a6:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ca6ee487f3f1e35e2c1550dec1d4f3a7094d8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:68:a4:90:d0:e5:7c:cc:89:7c:da:75:0f:
36:66:33:a0:03:09:9c:be:c5:74:8c:a8:8e:98:9f:
e9:a4:31:00:bc:51:64:db:63:43:89:e6:c4:95:cf:
39:14:a7:68:d9:67:6c:10:3b:11:f7:e1:42:dc:39:
25:35:02:e6:6a:63:3b:7f:1c:93:4e:49:96:86:ea:
6d:6e:21:5b:30:9c:e1:5a:1b:61:56:a0:ce:df:8f:
1d:04:cd:8d:5d:fb:cf:73:b8:5d:ff:bb:4c:53:e4:
61:d4:16:c2:00:55:58:01:05:9e:54:29:9e:fc:c1:
62:04:21:20:3e:d1:4a:5e:48:e5:8d:9e:4c:f5:09:
d1:86:26:d1:dc:b9:43:a3:1d:45:d3:54:be:54:e4:
d5:59:0b:03:3a:cc:de:f4:29:63:0e:b1:14:db:ec:
92:81:22:c5:ea:2a:ab:f8:8e:0c:bc:a3:51:62:5c:
7f:9d:a6:94:dd:10:c3:00:fa:0f:e5:9e:6b:3b:32:
ee:0c:4f:96:ca:2e:ed:3d:ff:f1:24:0a:f6:7a:ab:
69:8d:fa:75:51:dc:2f:0c:e4:ee:21:27:a5:0c:2f:
71:4e:03:e8:db:cb:c4:31:09:97:97:b0:06:a7:cb:
e6:67:d1:e1:a4:29:6f:a2:6f:e0:6e:62:33:cf:ed:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:EE:48:7F:3F:1E:35:E2:C1:55:0D:EC:1D:4F:3A:70:94:D8:E1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HKbuSH8_HjXiwVUN7B1POnCU2OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12df::/48
Signature Algorithm: sha256WithRSAEncryption
60:6a:91:65:b3:6c:46:aa:21:c6:88:6c:35:aa:04:07:c1:7b:
5f:ff:42:d9:a5:47:2b:5c:bd:b5:18:b7:ff:80:6b:46:4b:14:
bf:8f:40:d3:fe:4c:bf:5a:2a:aa:8c:3d:b1:e5:96:5a:80:3c:
97:61:04:50:19:6b:5b:81:4d:db:27:77:b5:d0:e2:5b:64:d6:
21:f7:33:92:8c:4a:12:56:96:7d:88:87:90:dd:a4:4f:61:8f:
89:51:94:ae:35:cf:69:f3:64:86:e9:6f:db:8c:a1:80:66:cf:
18:a9:63:6a:0a:2a:00:ce:3b:e3:78:e7:5e:af:4f:8a:cb:c1:
c2:f8:a3:5d:2b:e6:55:fc:8f:b3:9c:4b:f2:cc:04:e0:c8:3b:
db:57:7a:bb:a9:55:25:29:6b:24:4d:fb:53:fb:99:f7:28:0d:
27:04:8c:fc:63:1a:c0:f8:42:5f:18:e1:3c:29:42:41:05:f3:
be:a3:b3:de:99:e3:b3:fc:30:72:d3:29:ea:70:0f:02:77:f5:
53:69:9f:fb:0e:c0:f4:1b:8c:bb:7e:a5:f6:6e:b1:26:3e:cd:
c7:62:f1:53:3d:7c:ac:bc:6e:1e:47:a6:13:b2:42:5b:11:c9:
47:4e:6e:bf:bf:39:ef:1f:70:d0:78:8a:d7:74:a0:7d:1d:fb:
95:91:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:30:36 2026 by rpki-client