Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HmXbiyRaraz7LxURYbyVkoaE4GQ.roa
File: HmXbiyRaraz7LxURYbyVkoaE4GQ.roa (raw, json)
Hash identifier: xgclvvyn6lUKAmEnIkNkDpH3t4Kk7FbxZE0xvFtA4Sk=
Subject key identifier: 1E:65:DB:8B:24:5A:AD:AC:FB:2F:15:11:61:BC:95:92:86:84:E0:64
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A05C6FE91E201BD28B08D1CE476C6CCB55
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HmXbiyRaraz7LxURYbyVkoaE4GQ.roa
Signing time: Tue 01 Sep 2026 10:07:13 +0000
ROA not before: Tue 01 Sep 2026 10:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218854
IP address blocks: 62.169.133.0/24 maxlen: 24
158.173.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:6f:e9:1e:20:1b:d2:8b:08:d1:ce:47:6c:6c:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 1 10:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e65db8b245aadacfb2f151161bc95928684e064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:f2:a9:e5:c5:bc:9e:2c:5d:1d:be:6d:e0:
97:4e:c4:f7:f7:fa:31:a7:8c:6f:ec:ce:b9:1f:39:
31:be:d5:1b:e0:6b:58:7c:07:30:76:d4:a9:23:4a:
3b:c4:b1:d6:3e:ad:21:dd:f1:26:83:13:db:43:61:
29:50:4c:f7:98:ef:0e:20:2d:a0:dd:6b:a0:0a:d4:
56:89:6a:da:64:dd:c8:dc:92:a7:ff:62:27:20:6d:
81:3e:ec:c3:da:52:9e:6a:60:b9:70:2a:f9:7c:93:
79:15:f8:66:2a:7e:5f:55:d3:e3:c5:ef:ac:c3:a7:
f6:a6:a3:ed:33:fb:43:b4:22:ff:26:fc:89:18:40:
47:b6:6d:ee:ab:7f:b0:61:d6:d6:61:b8:a5:3c:ac:
c4:e0:ae:26:4f:1d:b2:4c:78:d5:0a:b3:db:29:cf:
20:37:07:b9:34:e6:b6:9e:79:2c:51:b3:fd:06:e0:
63:97:14:e4:d5:97:15:bb:38:01:06:9e:d6:7b:ec:
12:f6:cc:e3:49:20:60:f5:5b:98:8a:23:4f:c0:58:
6f:bb:ca:5e:a7:2e:16:33:08:59:e9:39:5f:1e:7d:
a8:86:b9:0d:75:64:e9:7b:90:2e:94:8e:44:61:e3:
a5:6d:cd:19:4f:bb:f5:f8:e6:7f:5b:2b:5e:74:78:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:DB:8B:24:5A:AD:AC:FB:2F:15:11:61:BC:95:92:86:84:E0:64
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HmXbiyRaraz7LxURYbyVkoaE4GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.133.0/24
158.173.163.0/24
Signature Algorithm: sha256WithRSAEncryption
85:40:30:ce:30:74:f7:ad:8c:3a:04:e2:d0:33:5b:b5:07:f1:
14:b6:0d:3d:39:e5:e0:ad:06:d0:9e:c5:33:89:cb:3a:26:5a:
4b:d2:d0:c0:dc:ec:1d:2c:ea:4d:1a:82:d8:1c:71:c7:0c:dc:
fa:ec:64:07:0f:75:e6:21:ce:74:94:43:ff:b6:3a:12:0f:f9:
f6:01:7c:fd:89:12:db:ee:d7:db:4e:7d:79:e3:fb:10:c5:0e:
28:ba:be:fd:75:c5:0a:79:a0:99:10:47:e3:12:e7:4c:8a:1a:
15:75:e8:20:d7:a1:97:db:a2:7d:ee:5c:75:30:8c:c1:5e:46:
e1:fc:db:b5:f8:f5:14:3a:f9:2e:07:65:ba:69:0d:c2:cc:e4:
fe:85:3e:4c:80:82:95:9f:f2:37:8f:35:c1:aa:0f:46:83:51:
5e:e8:d7:d5:c7:3b:f7:fc:b6:b7:91:91:7d:61:3a:db:07:d4:
ee:da:de:56:58:82:1a:fe:d7:d1:26:80:dc:92:f5:ea:a0:5d:
95:c9:fa:c8:05:a4:26:ff:9b:31:a9:48:39:30:9a:e1:3f:ce:
85:9e:6e:1b:92:3b:6e:3c:af:45:93:25:7d:76:48:31:96:ee:
8d:09:45:1f:7e:58:70:55:09:9f:09:b7:1d:ba:2a:bb:bd:d6:
51:4c:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:13 2026 by rpki-client