Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dHlhb5wlesOSzMNb-Eq4dp-VVPo.roa
File: dHlhb5wlesOSzMNb-Eq4dp-VVPo.roa (raw, json)
Hash identifier: EFaTIAjhZrMuLPCJiVjc6z+tDX3pWD9MbY87UH/UrNw=
Subject key identifier: 74:79:61:6F:9C:25:7A:C3:92:CC:C3:5B:F8:4A:B8:76:9F:95:54:FA
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01A140627F3D4A974DB56CE1FBD853730411
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dHlhb5wlesOSzMNb-Eq4dp-VVPo.roa
Signing time: Thu 15 Oct 2026 16:25:59 +0000
ROA not before: Thu 15 Oct 2026 16:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218852
IP address blocks: 194.113.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:62:7f:3d:4a:97:4d:b5:6c:e1:fb:d8:53:73:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Oct 15 16:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7479616f9c257ac392ccc35bf84ab8769f9554fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:15:62:c6:d9:95:d3:22:7c:07:94:0f:91:
15:5a:55:24:32:83:26:5f:5a:87:a6:0a:1c:d1:3f:
2c:e5:83:76:e4:ec:67:aa:9a:c4:5f:b1:28:59:e8:
0b:b3:ef:a5:c7:7a:33:bb:ff:06:bb:67:5f:33:5b:
ac:b3:17:73:63:00:ac:77:3d:a8:65:76:74:14:fc:
c2:e0:e8:5b:21:16:d2:a7:d2:36:79:b5:c5:7a:59:
f3:60:35:67:aa:ba:cd:07:42:29:f7:b8:cd:cd:ee:
7d:b7:c2:9e:34:98:0d:b2:84:a9:7c:8d:2d:dc:1a:
6a:d0:73:0d:43:a3:ec:43:94:d1:39:9d:81:a1:82:
20:8b:c0:79:85:a2:fc:a1:10:18:2c:9a:db:8b:ae:
5c:25:6f:e3:ae:1b:eb:83:c0:d7:02:de:49:d7:72:
f6:fd:4b:0f:74:14:2e:4d:4f:c4:11:72:62:7a:b0:
d2:b0:b7:a2:95:5d:5a:f6:e1:c8:d5:ed:1e:d5:57:
e8:8a:18:41:fe:a5:2f:46:1a:62:b0:3f:62:e7:d6:
60:90:e7:68:b0:b3:a4:0c:7b:77:15:bd:60:71:ad:
56:a2:99:74:af:ed:cb:1c:f6:4a:76:e9:db:48:ec:
24:e4:1d:5e:ba:e5:d6:09:1d:dc:b1:c7:9b:d5:c3:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:61:6F:9C:25:7A:C3:92:CC:C3:5B:F8:4A:B8:76:9F:95:54:FA
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dHlhb5wlesOSzMNb-Eq4dp-VVPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.238.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1b:79:91:44:37:62:8a:1a:99:73:f4:8a:fc:70:d8:05:f8:
da:1a:0e:c5:f5:29:0c:5b:04:b4:73:30:b4:fb:ff:45:89:a2:
c0:9c:6c:f0:48:f6:52:b0:21:8c:b4:ff:10:42:21:14:46:c0:
d5:e8:79:91:0c:1b:f3:74:fc:49:ae:8e:fb:46:63:33:7c:9f:
ea:cc:2b:4d:d9:46:83:ab:81:22:5e:0a:04:cd:ce:e3:3f:9c:
0c:a9:cb:0b:a6:8c:cc:4c:8a:4d:13:ce:aa:74:ea:88:de:4f:
0f:d5:a4:8e:41:11:58:f6:5c:21:b7:23:a2:20:73:fb:74:63:
34:b7:b7:3e:5b:d7:5e:28:cf:b6:0f:d5:b4:89:e7:24:5d:42:
f0:71:33:cc:c5:57:bf:a8:41:72:94:f9:39:0b:1c:a5:c0:fe:
d6:11:e6:1d:21:d2:93:04:dd:d6:76:fc:d8:ed:4f:dc:bb:5c:
a7:40:61:52:c8:88:5b:63:ea:fd:45:3c:ae:f2:17:40:ba:53:
65:78:57:0f:f3:0b:24:73:df:d0:1a:78:a2:23:e5:21:f9:e8:
ec:ce:6b:6d:35:12:87:40:49:1d:a0:9e:5e:f6:cb:9f:87:56:
cb:53:da:16:fd:50:d6:b3:81:1a:56:67:d2:e7:9e:a7:d4:c9:
a0:69:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:24 2026 by rpki-client