Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/HTNYR2yr94a8EGiK6hAbvtY6o6k.roa
File: HTNYR2yr94a8EGiK6hAbvtY6o6k.roa (raw, json)
Hash identifier: KMWU4G6lDxx80Y3CEw+h1nuvz/CTjsjL+YK1q+mIGr0=
Subject key identifier: 1D:33:58:47:6C:AB:F7:86:BC:10:68:8A:EA:10:1B:BE:D6:3A:A3:A9
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019FD08D6C96A73B2898DDE6ECA27C60E011
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/HTNYR2yr94a8EGiK6hAbvtY6o6k.roa
Signing time: Wed 05 Aug 2026 06:12:36 +0000
ROA not before: Wed 05 Aug 2026 06:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 2a14:a087:8::/48 maxlen: 48
2a14:a087:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:8d:6c:96:a7:3b:28:98:dd:e6:ec:a2:7c:60:e0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Aug 5 06:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3358476cabf786bc10688aea101bbed63aa3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:e0:c2:5f:a7:82:68:b0:56:c5:14:b5:43:
9f:35:6c:5a:65:6d:da:ac:8d:3f:2e:09:54:36:a2:
9f:41:14:f8:c0:e5:25:86:1a:ac:94:be:d1:a5:15:
9f:32:f7:41:2d:06:19:56:e2:86:26:e4:55:e9:d0:
3e:85:35:a4:52:09:fe:d8:47:dd:17:b9:07:1d:96:
5a:f8:48:b5:22:3a:01:17:6c:b0:00:b8:30:d0:2b:
1b:6a:f6:7d:97:45:28:e0:6d:8d:b8:d4:4b:d7:c8:
37:29:81:57:1c:b8:71:31:35:b8:e0:ef:97:39:8c:
9d:2b:84:16:3e:3c:71:a3:d5:06:08:f6:d2:1e:32:
65:6e:6f:fe:55:ba:38:6f:cb:6c:b4:7e:80:2f:25:
e4:e2:bc:7a:f7:bf:ec:d0:92:7b:63:63:05:0b:0b:
27:e6:ee:49:e4:81:80:d4:03:6b:5c:5c:e5:12:bd:
ef:04:09:cc:de:8f:ea:1a:5e:44:a3:a6:6c:f4:49:
31:4a:42:e0:6f:80:77:a5:31:81:9c:02:94:5e:ea:
09:65:3c:e5:b5:a3:8e:e4:be:61:55:dd:6e:ba:6d:
30:d1:2e:ed:e4:27:91:2d:8d:fb:df:4d:8e:02:bf:
49:b5:f3:8a:81:95:03:13:2b:67:03:d6:1c:a1:4b:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:33:58:47:6C:AB:F7:86:BC:10:68:8A:EA:10:1B:BE:D6:3A:A3:A9
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/HTNYR2yr94a8EGiK6hAbvtY6o6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a087:8::/47
Signature Algorithm: sha256WithRSAEncryption
22:8b:79:6d:28:3c:f8:2e:ce:21:d5:73:f7:3a:11:7a:ae:d9:
6d:04:b3:92:9c:c5:4a:90:33:ad:81:05:89:22:7b:7a:ec:38:
6e:f1:23:44:6f:f1:1e:d8:47:8f:83:43:a1:c7:33:c6:ab:42:
85:e7:e4:51:dd:10:6a:5c:77:7e:36:95:b8:44:30:ce:05:03:
a7:ef:fe:7e:b3:07:fb:06:7d:8f:98:12:b0:84:2e:2e:56:23:
f3:bd:37:a8:51:51:69:e4:72:7a:dc:7d:ea:7f:99:98:59:d2:
6a:28:10:6b:04:8b:66:80:d1:51:4d:e8:eb:7c:52:8a:26:28:
97:d8:22:b2:6f:65:1d:aa:eb:56:0f:09:cb:d5:d6:ed:1a:aa:
8a:00:15:a6:2d:7f:ab:89:18:4b:1a:e2:0f:9f:dd:26:49:be:
4d:38:e3:54:05:af:b8:79:90:b8:51:c5:e3:1f:8a:9f:d7:76:
4e:dd:fb:dc:ee:66:1e:23:30:8f:fa:49:04:1e:92:68:4e:80:
e4:71:8b:98:d5:c7:41:be:80:ec:07:34:c8:00:95:1f:de:cb:
19:95:ec:45:bb:87:99:5a:6a:0d:11:22:d8:3e:a6:ee:c8:29:
06:ad:c6:3b:d2:56:93:3d:92:62:72:1f:9f:a5:f4:eb:4d:f7:
5f:40:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:49:23 2026 by rpki-client