Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HCr3k_D09HHwzHCcUwenjxDo0Ns.roa
File: HCr3k_D09HHwzHCcUwenjxDo0Ns.roa (raw, json)
Hash identifier: D/E6KTEd+YtEwctdt8IgU+Q+/kjOycImkfLN40FVvsI=
Subject key identifier: 1C:2A:F7:93:F0:F4:F4:71:F0:CC:70:9C:53:07:A7:8F:10:E8:D0:DB
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019DE22EC527197A3B675AEA518704E16B1B
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HCr3k_D09HHwzHCcUwenjxDo0Ns.roa
Signing time: Fri 01 May 2026 06:16:49 +0000
ROA not before: Fri 01 May 2026 06:16:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 188.191.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 21:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:2e:c5:27:19:7a:3b:67:5a:ea:51:87:04:e1:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 1 06:16:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c2af793f0f4f471f0cc709c5307a78f10e8d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:3e:ab:1d:5d:86:91:3f:43:ec:c5:6e:22:
5b:64:81:1c:cf:7f:d8:10:d2:a9:67:f8:06:d7:66:
86:73:80:2d:e9:b3:75:54:8f:5c:24:48:dd:5a:e2:
c8:6f:8b:ac:8a:dc:f4:38:55:f9:ff:aa:ae:f0:27:
e3:76:65:67:3d:06:85:46:67:97:cf:f4:7f:88:56:
6b:50:70:1a:64:b8:8b:de:31:4c:60:ae:85:02:b4:
fb:bd:c3:a6:8d:66:ee:3f:09:4b:70:fb:da:67:41:
21:c5:0c:b6:b8:5f:6f:c4:ba:f7:14:fd:1b:8f:bb:
1c:5e:75:2a:5b:e4:17:4c:1a:68:90:49:eb:86:22:
bc:b3:ee:29:8c:5d:ec:5d:c4:3c:94:0e:06:b7:74:
0f:42:38:90:bd:ef:75:4c:4a:af:7a:be:4f:4a:48:
ad:75:39:a5:22:5c:3b:70:51:2d:88:be:dc:a2:3f:
1c:34:2b:db:23:41:38:df:55:96:e9:e4:1c:ae:0a:
e6:22:54:90:d4:b4:4e:98:7a:0f:7f:8d:5a:06:93:
37:26:a6:9c:12:51:a0:08:d3:a9:8b:29:71:d2:07:
b6:06:59:81:17:cf:38:80:72:d7:20:b5:62:90:aa:
12:f4:b9:89:87:d6:64:67:5e:b9:64:24:47:3c:4f:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:F7:93:F0:F4:F4:71:F0:CC:70:9C:53:07:A7:8F:10:E8:D0:DB
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/HCr3k_D09HHwzHCcUwenjxDo0Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
37:79:1f:ea:37:4b:23:a9:12:79:a2:98:8e:03:de:78:87:bf:
0c:f0:fe:6e:cb:b0:c9:77:00:45:af:03:a3:63:9c:ff:8b:98:
ea:d9:0a:7b:1d:62:88:41:0b:37:e7:ab:aa:44:c1:f0:92:f1:
9e:72:da:ae:2f:ed:6e:32:e6:97:fb:ae:8e:f9:11:ca:1d:60:
4b:d0:33:99:ca:9d:47:34:d2:18:50:67:38:f6:79:d2:3f:03:
89:5a:64:48:b0:9c:1d:40:97:23:dc:76:22:45:c4:28:6a:e9:
7c:9f:43:46:27:c7:fe:fa:8b:31:50:71:c0:43:5a:37:74:d9:
6f:30:77:ef:ee:fe:7c:2a:8a:65:27:56:08:01:24:3d:a3:a4:
9c:5e:aa:15:61:91:94:c9:60:d7:d4:00:f3:86:b6:b8:46:ce:
50:78:6d:39:80:f7:0b:72:68:71:fe:17:c0:74:11:e1:83:c5:
39:5a:4e:33:9f:29:a5:f3:20:a0:d0:61:d3:cd:f0:30:f1:16:
61:13:12:41:26:fa:43:57:93:b8:82:14:40:36:ae:d1:68:79:
1f:5a:73:45:75:d0:03:22:a9:bb:51:b9:3a:a6:95:6e:6f:aa:
b6:86:23:33:18:7a:9a:76:0e:7a:9f:ca:4f:99:55:a8:bb:a6:
27:35:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 03:12:19 2026 by rpki-client