Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HNGxexy8w81AXR6GWvh2TEU2JEg.roa
File: HNGxexy8w81AXR6GWvh2TEU2JEg.roa (raw, json)
Hash identifier: NGT84aSnf8YNioPr4P34003bXvEnduSxQSya2TxYptE=
Subject key identifier: 1C:D1:B1:7B:1C:BC:C3:CD:40:5D:1E:86:5A:F8:76:4C:45:36:24:48
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0E857FE8F02563BB91D57E394D46E2F05
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HNGxexy8w81AXR6GWvh2TEU2JEg.roa
Signing time: Mon 28 Sep 2026 14:07:56 +0000
ROA not before: Mon 28 Sep 2026 14:07:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218720
IP address blocks: 2a06:9801:1510::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:57:fe:8f:02:56:3b:b9:1d:57:e3:94:d4:6e:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 28 14:07:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cd1b17b1cbcc3cd405d1e865af8764c45362448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:ec:4b:2e:2d:64:9e:99:39:75:e0:19:32:
c9:58:97:12:50:94:df:f1:b7:6c:c0:ba:7c:c1:a5:
d8:10:43:b3:b0:7e:f2:8c:b3:6b:e3:a7:0b:bb:05:
e3:69:03:ad:b1:4e:e2:bc:ca:57:a3:a9:69:b0:31:
0e:d7:75:d1:c6:70:c9:f9:12:d8:49:37:53:c7:44:
4b:c2:07:ab:ba:a5:11:db:d2:76:68:32:7e:97:63:
9a:e9:65:f2:b5:af:84:e6:b6:b0:76:60:85:f2:67:
08:47:65:9b:4c:1b:18:ae:c3:6c:c7:f5:3a:52:35:
2e:1e:5a:12:10:20:45:8f:0f:5b:12:5a:f7:69:03:
ac:e6:84:98:ad:41:1c:5d:da:66:4a:1b:ae:67:21:
0b:8c:1d:6f:ee:fb:00:44:9d:48:56:ad:4f:5e:9e:
ca:eb:77:86:e7:2c:cf:de:9b:8a:c6:45:04:69:9d:
0c:ae:b0:c1:a8:7d:71:e1:89:91:9a:b4:0c:48:5b:
84:50:16:ce:49:9b:d9:1d:a7:b9:66:fa:9d:54:3a:
48:f3:bf:a1:9f:84:64:89:0e:cd:ff:8c:69:5b:23:
6d:aa:5e:ce:53:11:76:6d:a2:8c:07:3a:fe:a1:90:
19:98:9e:26:29:bc:59:be:4b:a8:63:d7:8d:7c:95:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:B1:7B:1C:BC:C3:CD:40:5D:1E:86:5A:F8:76:4C:45:36:24:48
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HNGxexy8w81AXR6GWvh2TEU2JEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1510::/48
Signature Algorithm: sha256WithRSAEncryption
93:ba:d2:fe:82:82:5e:60:00:b0:9b:24:69:01:90:7c:5b:69:
70:6f:e3:dd:9c:8a:c1:82:ac:e3:fc:5e:e7:94:bf:3b:78:b2:
af:1e:48:99:49:c2:89:4e:0a:52:d1:c0:62:dc:17:74:fe:80:
6c:ef:51:ab:d4:65:a1:7e:26:ff:b6:b9:94:a7:a9:7d:46:93:
d8:2e:53:ac:42:ac:ab:61:26:4b:2f:8a:a2:a8:9a:0c:ce:6a:
ce:fb:04:85:a3:d7:a7:d7:4c:11:ab:77:08:a8:f0:d7:f3:6c:
b5:12:0f:74:12:b6:36:2a:2f:20:43:fd:72:2b:60:c5:83:4c:
85:ea:9c:6c:be:61:f5:08:18:b4:d3:7e:e3:d0:b0:60:a6:fc:
57:83:8a:3e:39:e0:f9:c4:25:8a:ed:e9:47:73:16:bb:58:22:
c2:95:60:38:cc:6f:15:d5:5c:b4:a3:24:e8:ae:d3:f8:20:61:
ed:a3:96:33:90:b1:fa:d7:7f:95:2f:bd:9e:67:9c:59:be:a8:
9d:4d:c3:7e:27:a5:be:8e:a6:5c:98:c4:8f:82:ea:20:0e:8e:
2e:17:be:f9:0e:c1:3b:0c:14:c2:4c:27:ac:81:41:f6:e0:43:
cd:45:c8:98:c6:04:5d:e4:91:7f:f2:ca:ea:13:c3:1a:56:20:
81:8c:9a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:17 2026 by rpki-client