Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/HafJJlxsimcAkGfC5XJdVp437bc.roa
File: HafJJlxsimcAkGfC5XJdVp437bc.roa (raw, json)
Hash identifier: XiyN4pRhYN4iLWMsTeJd+IJH5u+uAOaKuInZTRI3rVs=
Subject key identifier: 1D:A7:C9:26:5C:6C:8A:67:00:90:67:C2:E5:72:5D:56:9E:37:ED:B7
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F3BD29392D50AC4C8DB092E58E2DCFC64
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/HafJJlxsimcAkGfC5XJdVp437bc.roa
Signing time: Tue 07 Jul 2026 09:04:43 +0000
ROA not before: Tue 07 Jul 2026 09:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199897
IP address blocks: 201.3.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:d2:93:92:d5:0a:c4:c8:db:09:2e:58:e2:dc:fc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 7 09:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1da7c9265c6c8a67009067c2e5725d569e37edb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:ef:00:42:61:29:c3:a3:85:9f:12:bd:40:
b8:fc:ee:10:a0:91:ed:fd:e9:29:b9:ad:29:c5:d0:
bb:cf:2c:16:b7:a9:aa:a4:e2:49:9c:8d:cb:6a:d1:
b2:27:78:11:65:08:9a:90:8d:f6:db:ca:9f:57:5e:
b7:3a:40:36:94:a5:9b:35:3e:d5:64:df:7c:1a:e5:
cd:f5:bc:ec:11:13:cd:72:70:e0:70:91:71:75:73:
76:e2:5a:9c:8f:fe:99:95:a8:1f:d6:af:2a:2f:aa:
9e:33:99:cf:cc:39:c5:86:57:dc:9c:10:75:1e:98:
22:3c:93:34:5e:7e:37:93:da:09:1e:65:15:10:a4:
95:24:ec:14:7b:27:08:0d:19:83:65:01:bd:87:2a:
0c:4c:83:d4:b4:da:55:be:1d:e5:c7:24:40:8d:79:
f0:53:52:03:20:0c:f3:d2:ac:1d:98:17:89:df:4d:
7c:fb:fb:d4:c9:af:36:95:eb:fd:76:cd:65:13:ac:
85:ce:3f:57:eb:92:bc:0e:93:c6:01:c3:6c:70:e5:
e2:6c:a5:d0:3e:49:0c:e2:1e:3a:24:78:97:02:39:
31:9c:39:30:45:f6:6e:ef:9b:b9:3e:8a:50:4e:5d:
e2:1b:52:5f:d8:09:93:4e:18:10:0b:dc:c3:5f:4a:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A7:C9:26:5C:6C:8A:67:00:90:67:C2:E5:72:5D:56:9E:37:ED:B7
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/HafJJlxsimcAkGfC5XJdVp437bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ee:f4:d1:7b:c0:ae:f1:80:69:0a:1b:6d:64:fa:d9:dc:86:
ed:97:35:12:d2:58:50:86:a9:67:28:0f:9c:85:38:5f:07:ed:
e5:8d:a7:76:46:a5:2e:f3:5b:bf:fa:45:c1:e3:10:b8:c6:e2:
22:92:f9:8f:eb:b0:0c:2d:75:dd:56:c9:6e:08:15:5e:24:7e:
e0:83:63:6e:76:1a:d6:f5:d3:66:ce:25:bc:ee:16:3e:c6:56:
bf:44:35:98:e6:55:42:eb:85:48:8f:60:d8:fd:98:3f:7e:65:
1b:28:09:db:e1:d0:1c:26:c0:3c:af:c3:dc:67:35:94:ff:b1:
33:83:8e:4e:b4:21:91:43:61:a7:05:81:c7:55:77:56:f8:51:
59:ca:e0:ad:03:40:aa:30:d4:ff:ea:b1:22:d9:25:e0:2d:42:
c8:90:3f:e2:38:56:b4:bf:92:43:5c:e5:1f:c7:8b:7b:19:6f:
45:f1:07:66:95:04:95:53:ed:b4:26:99:68:ef:5b:39:a7:01:
75:37:e4:aa:bc:fc:32:6f:a4:27:b7:27:9c:22:06:28:da:f8:
1c:79:44:da:9f:c8:94:d8:73:23:3c:52:db:aa:00:c1:e8:3b:
3c:3a:5c:dc:8a:3e:a4:65:17:c5:6a:4b:80:ce:73:59:1e:70:
10:3a:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client