Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/HpSNuerWy6MFY6ulRBojWGdkNVY.roa
File: HpSNuerWy6MFY6ulRBojWGdkNVY.roa (raw, json)
Hash identifier: PEL0oIsbOyso4/AT0pd3UuuxgjMRhI8GJOSmJ1Ns31Y=
Subject key identifier: 1E:94:8D:B9:EA:D6:CB:A3:05:63:AB:A5:44:1A:23:58:67:64:35:56
Certificate issuer: /CN=8fa54e6ec7ec1173aa27ae8f669a05b8f120b62f
Certificate serial: 019F236880AFFCAC963F3E028542FB88FA0E
Authority key identifier: 8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/HpSNuerWy6MFY6ulRBojWGdkNVY.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24944
IP address blocks: 194.50.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:80:af:fc:ac:96:3f:3e:02:85:42:fb:88:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa54e6ec7ec1173aa27ae8f669a05b8f120b62f
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e948db9ead6cba30563aba5441a235867643556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:97:2d:bb:f9:73:e8:c0:6b:04:5d:80:94:
56:fb:ef:97:a2:8c:9b:ea:9b:be:b1:4c:3a:bf:c2:
b8:17:ab:8d:25:1d:fd:2f:3f:85:3c:6a:e7:34:b4:
e2:9d:3c:88:2e:51:8f:7b:f6:8a:1d:26:7d:e9:f3:
f0:d7:f1:5e:08:72:68:ac:ae:f8:9e:3e:c5:9d:37:
1d:02:9c:f6:36:ff:42:e1:b7:41:56:8a:c9:47:98:
bd:57:7e:d3:9c:e6:09:5a:8d:bd:d8:2f:da:1d:5d:
41:ad:36:d1:f8:10:79:2f:ec:a5:81:b1:ef:18:ec:
01:9b:e6:17:e6:a9:6a:01:a6:1c:b1:c2:ef:2e:3f:
4e:a3:28:b9:dc:04:c2:bb:1a:59:a8:6d:4c:69:95:
d5:81:b3:fa:cc:0f:17:ef:d5:e2:72:04:ea:9f:fb:
b9:19:37:2c:99:79:07:89:25:f8:0a:4c:b5:2e:dd:
c8:2c:6e:f7:46:98:ce:0b:11:9b:0e:31:45:d1:43:
8c:e3:83:ea:13:71:9a:f2:cb:4d:1d:c9:52:67:74:
98:37:b2:cc:b5:df:6e:0d:9e:25:ce:de:0f:55:ef:
16:ab:49:67:9d:2a:98:1a:ae:38:ec:93:dd:81:ba:
9c:c5:6b:17:2a:ed:de:bc:43:82:fc:b0:a4:a1:ba:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:94:8D:B9:EA:D6:CB:A3:05:63:AB:A5:44:1A:23:58:67:64:35:56
X509v3 Authority Key Identifier:
keyid:8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/HpSNuerWy6MFY6ulRBojWGdkNVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.84.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b5:6f:66:70:54:f3:fd:9c:e7:8b:0e:7e:f2:ff:15:fe:86:
4a:74:f0:5d:59:d3:c3:2c:da:ee:f1:9f:c8:50:6e:54:6d:8c:
a4:0e:f2:86:3d:c7:2f:c0:d2:01:82:56:8e:2e:c3:5e:a9:cb:
8d:55:05:0e:e6:11:40:b4:ac:e8:7a:09:68:e9:b5:ea:30:ea:
7b:f7:fc:e7:f8:e6:ac:8a:10:05:54:5d:de:a1:43:6e:32:7f:
66:a4:16:26:9c:04:de:58:e1:ef:34:82:80:7b:f8:03:5c:63:
0d:0e:67:4c:cc:63:6d:b6:1d:cd:c1:3f:40:ae:aa:35:5c:98:
c8:45:b0:0c:66:a3:2e:16:79:b0:96:f0:bc:96:ea:3a:8a:44:
1c:f5:e2:f4:4e:27:ce:05:4e:35:1d:b0:af:4f:2b:90:56:2d:
27:b2:b3:d6:ae:ca:df:a1:e5:54:aa:b7:d1:48:77:2b:c1:17:
25:98:b3:00:6b:10:60:0e:dd:c0:d1:6b:f6:2a:69:b6:46:fb:
fb:80:c1:5f:5e:3e:5f:87:4f:4a:b0:08:c1:39:e9:c4:28:d7:
17:72:48:c7:76:8c:89:bd:d9:01:02:87:57:a2:59:37:37:17:
b7:15:3a:ff:27:e6:3d:f4:c8:11:ea:39:ba:e3:a5:de:69:6e:
7a:46:e3:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaICv/KyWPz4ChUL7iPoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTU0ZTZlYzdlYzExNzNhYTI3YWU4ZjY2OWEwNWI4ZjEy
MGI2MmYwHhcNMjYwNzAyMTUxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTk0OGRiOWVhZDZjYmEzMDU2M2FiYTU0NDFhMjM1ODY3NjQzNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5qXLbv5c+jAawRdgJRW+++Xooyb
6pu+sUw6v8K4F6uNJR39Lz+FPGrnNLTinTyILlGPe/aKHSZ96fPw1/FeCHJorK74
nj7FnTcdApz2Nv9C4bdBVorJR5i9V37TnOYJWo292C/aHV1BrTbR+BB5L+ylgbHv
GOwBm+YX5qlqAaYcscLvLj9Ooyi53ATCuxpZqG1MaZXVgbP6zA8X79XicgTqn/u5
GTcsmXkHiSX4Cky1Lt3ILG73RpjOCxGbDjFF0UOM44PqE3Ga8stNHclSZ3SYN7LM
td9uDZ4lzt4PVe8Wq0lnnSqYGq447JPdgbqcxWsXKu3evEOC/LCkobo9IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6Ujbnq1sujBWOrpUQaI1hnZDVWMB8GA1UdIwQY
MBaAFI+lTm7H7BFzqieuj2aaBbjxILYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZWT2JzZnNFWE9xSjY2UFpwb0Z1UEVndGk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt
NmUwMmFmMGE0OTk0LzEvSHBTTnVlcld5Nk1GWTZ1bFJCb2pXR2RrTlZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0
LzEvajZWT2JzZnNFWE9xSjY2UFpwb0Z1UEVndGk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJUMA0G
CSqGSIb3DQEBCwUAA4IBAQB5tW9mcFTz/Zzniw5+8v8V/oZKdPBdWdPDLNru8Z/I
UG5UbYykDvKGPccvwNIBglaOLsNeqcuNVQUO5hFAtKzoeglo6bXqMOp79/zn+Oas
ihAFVF3eoUNuMn9mpBYmnATeWOHvNIKAe/gDXGMNDmdMzGNtth3NwT9Arqo1XJjI
RbAMZqMuFnmwlvC8luo6ikQc9eL0TifOBU41HbCvTyuQVi0nsrPWrsrfoeVUqrfR
SHcrwRclmLMAaxBgDt3A0Wv2Kmm2Rvv7gMFfXj5fh09KsAjBOenEKNcXckjHdoyJ
vdkBAodXolk3Nxe3FTr/J+Y99MgR6jm646XeaW56RuMh
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:50:37 2026 by rpki-client