Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/HhKYiKq2n-bJyN2DyEZihe4nH50.roa
File: HhKYiKq2n-bJyN2DyEZihe4nH50.roa (raw, json)
Hash identifier: EPKOPM05EHOpza8L03DZmEBpzwFsOSCGWz8MEH2IU/k=
Subject key identifier: 1E:12:98:88:AA:B6:9F:E6:C9:C8:DD:83:C8:46:62:85:EE:27:1F:9D
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 019C7BDC167226600DC7B9D3C6E6FCFC15EF
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/HhKYiKq2n-bJyN2DyEZihe4nH50.roa
Signing time: Fri 20 Feb 2026 16:22:26 +0000
ROA not before: Fri 20 Feb 2026 16:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209564
IP address blocks: 212.108.184.0/21 maxlen: 24
212.108.191.0/24 maxlen: 24
2a02:358:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:dc:16:72:26:60:0d:c7:b9:d3:c6:e6:fc:fc:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Feb 20 16:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e129888aab69fe6c9c8dd83c8466285ee271f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:c9:64:af:20:52:c8:c9:be:e6:46:22:aa:
89:f7:a0:4c:97:72:c5:61:ac:1b:67:3a:60:4b:61:
f1:d5:31:3b:83:90:91:3b:c6:40:4d:2c:ab:ea:d9:
b3:7d:f6:00:4c:8d:2b:5d:2f:17:27:e0:9f:81:c9:
3f:95:fe:c9:0a:7f:82:4c:3f:da:99:ee:fa:ea:94:
3b:d9:03:96:3f:5c:14:5e:c0:be:8e:2f:0d:7b:d3:
bc:b7:ea:22:bb:dd:44:98:4c:41:4f:2d:db:8d:ef:
20:4f:54:75:26:b5:ee:f1:1f:57:7f:f4:50:76:5a:
eb:50:5f:2e:d1:00:2e:61:63:be:07:3b:56:36:67:
17:c2:d3:1a:f6:d8:44:e5:21:9a:6d:e2:13:8e:05:
78:82:49:e5:ed:70:3f:58:d9:6c:db:a6:74:3f:86:
d8:17:3d:cd:ae:f1:d1:a6:c5:da:1f:47:6b:40:78:
81:8e:3b:49:94:8b:ab:f8:1b:5d:9d:61:69:c6:76:
be:73:42:c2:6a:d5:d5:4f:37:0e:07:30:32:e2:b9:
73:89:aa:cc:f3:94:b5:3e:9f:1f:bc:00:c2:f8:0e:
f6:c0:f9:8b:20:3f:04:f2:96:08:cc:a0:b6:d8:b5:
f2:6e:e3:2e:cc:1b:a1:2d:2a:9a:eb:a4:64:bb:2b:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:98:88:AA:B6:9F:E6:C9:C8:DD:83:C8:46:62:85:EE:27:1F:9D
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/HhKYiKq2n-bJyN2DyEZihe4nH50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.184.0/21
IPv6:
2a02:358:1000::/36
Signature Algorithm: sha256WithRSAEncryption
59:91:bb:08:0f:ad:1a:67:47:7d:ad:a4:95:c8:99:51:74:09:
0c:f2:de:fe:25:52:3d:34:94:40:de:cc:2f:ac:08:62:0d:37:
d8:98:78:4d:c9:15:f3:17:4c:43:1d:bc:72:1d:79:83:99:0e:
ac:4c:4e:d9:64:ff:8c:c0:34:58:4b:d8:ab:13:a6:dc:be:ca:
77:1c:5c:24:9c:ff:d1:61:1b:4f:47:ed:c6:f9:65:69:5f:58:
37:b4:ea:72:57:32:11:94:5d:16:04:03:4c:89:c9:37:d3:20:
f2:e1:5f:a9:33:93:e0:3d:9e:15:19:84:4c:12:76:32:73:24:
c1:09:41:c3:d5:a7:91:ff:b1:15:ca:91:ac:1b:94:40:36:d1:
7b:ca:99:e2:37:2d:e8:3b:44:4e:45:f5:62:83:c0:a2:83:2c:
40:75:60:bd:28:f7:8f:57:56:97:d3:b3:03:e2:40:3f:75:b6:
be:5d:f5:0a:25:86:18:0d:c8:a7:30:26:d1:f6:61:cf:9d:32:
80:16:48:67:61:e4:4b:50:8e:a7:e4:5e:20:f8:6b:f1:e9:4d:
64:33:9c:bf:ca:59:0e:32:78:8f:bc:1f:d9:b1:9a:41:ab:2c:
e6:27:c1:6c:d1:35:19:87:00:0b:29:e3:0d:55:cb:51:20:2f:
5f:41:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:34:51 2026 by rpki-client