Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hvrECtRtxVPUHDXzjKdAlcyRjog.roa
File: hvrECtRtxVPUHDXzjKdAlcyRjog.roa (raw, json)
Hash identifier: d5snX7+Hc4RUYD6A+fmRwRD4YilkH7XfRNO8PBtC+DY=
Subject key identifier: 86:FA:C4:0A:D4:6D:C5:53:D4:1C:35:F3:8C:A7:40:95:CC:91:8E:88
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A057C6F8E26E838B51015779FFFE7AB537
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hvrECtRtxVPUHDXzjKdAlcyRjog.roa
Signing time: Mon 31 Aug 2026 12:24:12 +0000
ROA not before: Mon 31 Aug 2026 12:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a0f:7c80::/29 maxlen: 29
2a0f:a500::/29 maxlen: 29
2a14:4a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:c6:f8:e2:6e:83:8b:51:01:57:79:ff:fe:7a:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 31 12:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86fac40ad46dc553d41c35f38ca74095cc918e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:e2:4f:c2:e6:64:63:7c:a5:c6:72:70:00:
cd:69:ac:01:ce:ad:5e:85:d9:ba:d9:f5:4c:33:55:
7f:ab:09:3f:3a:56:f0:20:31:77:2d:ea:84:4f:de:
5a:ca:75:1c:af:a5:9c:8d:70:38:17:4a:f9:34:d4:
5d:37:f5:0e:54:c4:dd:24:aa:7b:fa:20:03:80:65:
27:07:74:c6:f2:88:56:b3:0b:12:e7:f1:ee:22:a5:
f6:38:4f:1c:44:e9:df:1a:f5:fe:84:fb:a0:fa:2a:
87:51:93:32:73:0f:25:14:d7:0f:94:df:27:c4:79:
18:f7:81:f7:91:fa:36:2e:a2:27:e6:61:e0:78:10:
a4:70:37:45:b4:f7:7c:09:30:5e:ad:98:42:bf:c9:
6e:6a:92:4c:63:d6:10:dd:04:d2:4f:a8:89:cb:e3:
23:93:9b:6c:5c:21:2e:12:89:23:2e:d6:f5:3e:57:
5a:de:7e:c1:ff:fc:62:a3:c2:67:dc:1f:a7:f6:5c:
8f:86:02:3b:1e:e0:5c:47:10:d0:ec:2c:df:9b:14:
5e:82:2b:5a:f5:1a:fa:f9:40:76:f5:fc:63:3a:04:
60:65:0a:1b:b8:72:9c:18:bb:07:a0:f0:15:4f:be:
d9:aa:d5:6e:1f:4f:f2:a4:4f:86:f9:64:e5:4e:5c:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:C4:0A:D4:6D:C5:53:D4:1C:35:F3:8C:A7:40:95:CC:91:8E:88
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hvrECtRtxVPUHDXzjKdAlcyRjog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7c80::/29
2a0f:a500::/29
2a14:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
40:12:71:26:e8:44:05:0b:6a:55:e2:57:7c:55:b9:5e:f5:e6:
fa:17:27:31:52:c0:dc:3d:80:b2:d2:d0:b4:3d:dc:3c:dd:ba:
f7:33:14:23:e8:23:bc:97:25:57:a5:e0:f7:e1:4f:a3:b3:95:
bc:fb:28:34:b3:9f:23:79:9d:fc:2e:7d:5b:9f:2a:7e:a7:e9:
3a:48:a6:3e:bd:2e:de:bb:99:5d:62:b6:27:b3:ed:43:ed:e0:
6d:b5:3f:58:40:61:6f:46:4a:31:7e:22:aa:d5:67:79:6a:96:
92:b4:09:de:1b:98:b2:76:ed:bb:0b:2c:99:ab:ec:3e:61:be:
ce:34:d6:29:97:81:e3:d6:13:ce:c5:e9:2b:c9:6e:ad:ab:a1:
4b:18:b9:37:d7:06:4f:8c:0c:d4:44:24:cc:7e:3d:f1:1e:a6:
cb:32:0f:fd:b5:2c:d4:45:77:ed:09:c1:55:72:d5:65:f0:f3:
ab:e2:cc:17:7e:e5:31:d8:46:8a:9b:9a:df:36:b0:e7:b9:3c:
fc:fb:c2:1a:15:b2:aa:7f:b9:a1:2a:d3:9b:4b:9f:f5:be:45:
d6:72:1a:42:0d:e5:f8:f3:32:cc:0f:3b:e2:87:20:a6:f8:7a:
97:65:f4:80:b4:c1:27:1f:79:f6:5e:3f:89:6d:23:14:45:a9:
24:74:c0:3c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaBXxvjiboOLUQFXef/+erU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwODMxMTIyNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmZhYzQwYWQ0NmRjNTUzZDQxYzM1ZjM4Y2E3NDA5NWNjOTE4ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyubiT8LmZGN8pcZycADNaawBzq1e
hdm62fVMM1V/qwk/OlbwIDF3LeqET95aynUcr6WcjXA4F0r5NNRdN/UOVMTdJKp7
+iADgGUnB3TG8ohWswsS5/HuIqX2OE8cROnfGvX+hPug+iqHUZMycw8lFNcPlN8n
xHkY94H3kfo2LqIn5mHgeBCkcDdFtPd8CTBerZhCv8luapJMY9YQ3QTST6iJy+Mj
k5tsXCEuEokjLtb1Plda3n7B//xio8Jn3B+n9lyPhgI7HuBcRxDQ7CzfmxRegita
9Rr6+UB29fxjOgRgZQobuHKcGLsHoPAVT77ZqtVuH0/ypE+G+WTlTlxNjQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIb6xArUbcVT1Bw184ynQJXMkY6IMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvaHZyRUN0UnR4VlBVSERYempLZEFsY3lSam9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg98gAMF
AyoPpQADBQMqFEqAMA0GCSqGSIb3DQEBCwUAA4IBAQBAEnEm6EQFC2pV4ld8Vble
9eb6FycxUsDcPYCy0tC0Pdw83br3MxQj6CO8lyVXpeD34U+js5W8+yg0s58jeZ38
Ln1bnyp+p+k6SKY+vS7eu5ldYrYns+1D7eBttT9YQGFvRkoxfiKq1Wd5apaStAne
G5iydu27CyyZq+w+Yb7ONNYpl4Hj1hPOxekryW6tq6FLGLk31wZPjAzURCTMfj3x
HqbLMg/9tSzURXftCcFVctVl8POr4swXfuUx2EaKm5rfNrDnuTz8+8IaFbKqf7mh
KtObS5/1vkXWchpCDeX48zLMDzvihyCm+HqXZfSAtMEnH3n2Xj+JbSMURakkdMA8
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:42 2026 by rpki-client