Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hCvAf3NmUPcZlenLL0FGkTa9Nz8.roa
File: hCvAf3NmUPcZlenLL0FGkTa9Nz8.roa (raw, json)
Hash identifier: 5orvTDol3eTXI5dXq43C7qALvr3w4s4tGZvD+NFaA48=
Subject key identifier: 84:2B:C0:7F:73:66:50:F7:19:95:E9:CB:2F:41:46:91:36:BD:37:3F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A1A0C6915CDF680A4266986E594869B045
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hCvAf3NmUPcZlenLL0FGkTa9Nz8.roa
Signing time: Tue 03 Nov 2026 09:38:50 +0000
ROA not before: Tue 03 Nov 2026 09:38:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 195.178.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:c6:91:5c:df:68:0a:42:66:98:6e:59:48:69:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 3 09:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=842bc07f736650f71995e9cb2f41469136bd373f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:28:d7:58:2d:df:e5:87:75:9d:71:30:f8:
82:b4:01:39:fb:61:35:63:51:b4:4c:e0:d7:61:46:
f6:dc:69:44:ce:f9:b2:1b:dc:00:5b:7e:d3:1d:9e:
e7:2d:e6:d9:f3:f7:43:ad:35:4a:54:4b:1a:84:8d:
58:78:40:9f:ef:9b:b6:67:20:f0:9e:f5:32:fd:7f:
5f:f7:80:b7:4b:62:9e:a4:4e:cd:05:1b:65:b5:dd:
54:41:ea:e5:b2:c0:77:f8:d2:c9:35:5b:12:a8:13:
ca:47:40:82:c0:25:39:9a:b6:f5:ef:17:8a:49:5e:
27:6f:38:cd:3e:5e:43:97:b2:cd:fb:cc:a9:73:da:
ef:e7:a6:4a:51:0c:a4:05:c2:6a:59:5a:34:5b:1f:
38:fc:6e:08:2c:92:d3:08:01:54:4a:73:b3:68:79:
47:85:d0:62:d1:89:37:2a:8f:56:14:a7:e2:44:1d:
a1:8a:8b:2a:6e:eb:59:4c:03:da:03:50:2d:ed:09:
0a:24:36:15:52:0f:f8:32:6f:2f:75:ec:85:c2:24:
ae:f3:21:b4:f6:c1:06:24:4c:f5:f5:c0:c8:3f:7c:
62:21:a6:05:aa:7b:e5:db:c7:d3:55:7f:fb:01:bb:
5f:49:b2:6f:7b:f1:67:3f:c4:79:af:20:a9:07:03:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2B:C0:7F:73:66:50:F7:19:95:E9:CB:2F:41:46:91:36:BD:37:3F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hCvAf3NmUPcZlenLL0FGkTa9Nz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5d:44:1c:7a:38:3f:94:44:05:16:3c:94:25:ee:94:a9:95:
94:ba:f0:14:81:f6:83:e0:63:c5:34:39:fb:6d:77:63:86:97:
e4:95:94:e8:04:a1:30:3c:62:07:cd:f4:01:d8:66:79:a1:45:
42:06:84:77:62:16:bb:63:9e:93:36:80:03:6e:e2:75:fe:a9:
bd:81:93:64:f2:9d:b5:b7:20:73:ef:2f:a1:ba:10:d8:3e:cd:
4d:c7:16:5d:77:83:85:22:10:d1:0c:49:f8:d0:ba:be:ba:cc:
ad:45:76:a6:af:5c:f5:a6:8f:ef:f5:2b:9c:b6:ed:83:4a:21:
bc:30:5c:3d:b9:85:df:31:50:ec:4b:68:4d:dd:c7:cf:60:f4:
81:f9:c8:51:a1:48:0c:4f:85:c3:a5:67:81:a3:c5:11:c1:86:
80:7b:7d:2c:b2:5b:32:d8:b6:f3:d7:0e:ab:13:d2:13:10:a9:
f8:e9:f0:39:17:07:af:47:54:e8:27:55:3b:29:d7:b8:a3:70:
db:d8:15:76:07:8f:8e:10:d9:fe:3b:db:43:d5:20:6e:22:9e:
2f:4a:b8:e7:7d:71:45:00:41:ea:a6:ca:8f:78:7e:dc:30:0a:
cb:63:5c:94:ff:56:00:7d:58:cb:8f:08:3f:d1:ab:46:20:aa:
6f:5c:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 12:46:26 2026 by rpki-client