Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hcuF5__NvpE96lLNYKrOGNksBPY.roa
File: hcuF5__NvpE96lLNYKrOGNksBPY.roa (raw, json)
Hash identifier: oYGn6FrDGVCNtN7WESXA18tOHunjjr7dHuaHBJ3Jdxg=
Subject key identifier: 85:CB:85:E7:FF:CD:BE:91:3D:EA:52:CD:60:AA:CE:18:D9:2C:04:F6
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0251DD740DC7AE697637A6C59D1496EDF
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hcuF5__NvpE96lLNYKrOGNksBPY.roa
Signing time: Fri 21 Aug 2026 16:18:27 +0000
ROA not before: Fri 21 Aug 2026 16:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214128
IP address blocks: 201.7.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:1d:d7:40:dc:7a:e6:97:63:7a:6c:59:d1:49:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 21 16:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85cb85e7ffcdbe913dea52cd60aace18d92c04f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:ae:c6:a0:09:d6:79:a0:0e:e9:d4:2c:e3:
a3:2a:6f:22:98:2e:57:32:6d:33:68:94:3b:07:68:
34:1f:f1:fe:e4:e0:87:f1:c1:f1:89:50:69:0d:5b:
eb:9a:9c:4c:9a:49:7f:88:aa:ef:ed:04:25:d4:99:
7b:f0:50:be:51:db:55:16:d0:b9:89:e6:0b:4e:6a:
7e:d1:9c:ae:79:f8:8a:7c:2a:a4:95:0a:1c:3c:c4:
ed:c3:1f:e2:b7:58:7f:4e:b9:c3:2b:59:34:aa:6c:
1d:77:07:d7:45:18:20:f2:77:a3:d0:47:a5:d3:27:
85:04:bd:bf:43:18:23:78:a6:fc:89:0a:1e:85:88:
3d:3b:bb:91:17:93:ec:6c:38:f9:d4:b3:4c:95:8c:
e3:e4:be:21:9f:7d:70:21:56:fe:69:4b:62:e9:51:
76:cc:c3:84:27:72:e0:8d:02:43:ac:79:55:bc:72:
34:81:95:b3:d3:88:94:01:42:11:16:6c:63:7c:51:
07:18:ef:81:43:eb:00:cb:6f:b0:01:54:a3:5f:7c:
ac:e5:f5:f7:04:e5:01:64:9f:cc:04:53:2f:7a:0b:
5a:76:f7:ba:e1:e7:c4:cb:3c:40:0c:84:36:81:91:
0c:d7:6f:12:d6:5e:e6:7f:09:99:e4:9f:1d:c1:ed:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:85:E7:FF:CD:BE:91:3D:EA:52:CD:60:AA:CE:18:D9:2C:04:F6
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hcuF5__NvpE96lLNYKrOGNksBPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.24.0/24
Signature Algorithm: sha256WithRSAEncryption
99:95:33:84:dd:52:de:50:24:da:d9:96:13:91:08:64:04:34:
db:d0:51:61:08:9b:6c:59:45:66:4e:9c:50:01:c8:a5:1a:98:
e5:4b:d9:1b:ca:de:cc:d3:15:7c:c5:5a:e0:2e:63:4f:83:64:
f0:e4:a5:e2:b5:12:98:46:c2:51:5a:b3:b5:53:66:60:49:cd:
18:18:10:7c:89:9f:73:36:6f:3a:6e:0f:87:d3:ad:3a:c3:74:
33:ec:40:90:89:ab:18:28:71:12:5e:08:9f:7d:05:83:17:5a:
b3:71:18:ea:91:64:d7:55:82:23:19:32:62:4c:ff:7b:86:ce:
dc:be:d5:ee:0a:de:45:56:b6:a1:61:87:96:b9:12:87:00:0f:
8f:de:63:29:13:fc:b8:3d:92:d3:6c:8c:10:22:ed:34:88:fb:
c9:60:1a:c4:4f:f2:e8:33:8d:7b:0f:32:e9:4c:80:a6:ea:1f:
56:79:73:38:b9:d3:3a:83:e6:78:5b:32:bc:e8:a6:3f:71:c7:
61:06:b1:88:08:32:fc:ee:d2:48:e5:be:4e:5e:cd:d3:89:70:
8e:d4:5a:35:2e:79:17:88:ae:ed:2f:b1:2d:b0:b9:08:cc:c0:
5e:fa:37:fd:c0:e6:e2:a2:d1:b2:8e:14:e7:00:d9:c8:12:67:
9c:ec:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:22 2026 by rpki-client