Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1HcPQ5pfKmPtctEimZHE7z79hac.roa
File: 1HcPQ5pfKmPtctEimZHE7z79hac.roa (raw, json)
Hash identifier: 01IfM+fb4QfgTTaJeTcZGafqZtEIOcrvm8euITSheiU=
Subject key identifier: D4:77:0F:43:9A:5F:2A:63:ED:72:D1:22:99:91:C4:EF:3E:FD:85:A7
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019BF9669D6A15E9A89139EEC4217E2064F4
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1HcPQ5pfKmPtctEimZHE7z79hac.roa
Signing time: Mon 26 Jan 2026 08:23:30 +0000
ROA not before: Mon 26 Jan 2026 08:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273232
IP address blocks: 91.193.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:66:9d:6a:15:e9:a8:91:39:ee:c4:21:7e:20:64:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 26 08:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4770f439a5f2a63ed72d1229991c4ef3efd85a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:2c:87:0b:94:83:e3:b1:f4:e0:c3:fb:49:
5a:a8:bf:53:7c:72:11:97:ef:c6:c4:a8:f7:2d:e4:
69:3b:11:c4:96:d9:32:f4:06:4a:ec:dd:ab:03:e3:
01:0b:30:08:5b:3c:2d:53:f1:c1:a5:4c:f6:4d:58:
4d:a4:fd:79:7f:e5:dc:f8:12:c3:59:89:52:80:4e:
3c:14:77:fa:24:40:4d:5a:7c:88:eb:b7:17:4b:04:
74:d2:83:53:b1:a5:62:1b:1f:92:fb:fd:2e:d0:52:
93:9b:2a:22:96:90:0a:6f:94:cc:10:c4:85:07:55:
1f:85:68:f9:c8:64:f1:00:01:e9:50:6b:f5:23:7f:
49:6a:b0:45:d3:d3:65:9c:e3:54:5e:c8:6d:79:4e:
e4:0b:59:32:28:6f:16:ba:ed:6e:a3:12:b7:71:f6:
bd:66:4b:03:e7:77:6f:c8:96:87:fa:dc:34:f5:b7:
49:e2:e7:0a:d2:30:4b:5f:6f:d5:6c:62:fd:b0:57:
4c:48:c6:b8:0a:5b:db:9c:8d:5f:22:9b:74:15:a6:
01:3c:b1:85:0a:cd:5a:b1:38:71:cc:dd:20:b0:ad:
1d:71:20:91:17:fd:fb:36:1b:ce:a6:56:ca:c1:26:
c8:5c:4b:19:15:28:a0:15:8a:a8:7d:57:4a:51:50:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:77:0F:43:9A:5F:2A:63:ED:72:D1:22:99:91:C4:EF:3E:FD:85:A7
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1HcPQ5pfKmPtctEimZHE7z79hac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c9:c1:95:51:3c:0a:42:d9:1f:4b:bc:b7:37:bb:24:84:87:
0a:a3:ee:97:1d:e2:50:74:48:54:31:4f:da:75:97:71:1b:b3:
65:82:ad:45:b4:fc:99:6c:f9:3f:b9:03:18:91:d4:67:68:c4:
bd:52:23:e0:38:9d:36:23:f1:c4:d3:c2:7f:71:6a:b4:2d:8d:
c5:66:06:74:bd:0e:5e:a6:75:e2:fa:ca:31:dd:d4:81:8c:3c:
b3:5a:85:48:e5:47:1d:bf:5d:f6:09:90:63:3b:f4:44:53:e5:
74:64:b5:65:96:5b:a6:f0:70:f1:04:4d:7a:0d:34:ed:d4:c3:
21:b1:70:81:9b:4e:e4:f0:96:85:04:e6:d6:d3:4b:3f:e5:4e:
35:4f:20:42:52:85:3f:95:2b:58:8d:a8:90:0b:84:f2:1d:6f:
76:02:10:16:f7:d5:b2:3f:c6:64:2e:b5:5a:20:a6:47:0f:b6:
c1:7b:26:71:28:fa:03:ec:d2:d7:d9:9c:07:60:f5:dd:bb:d2:
7a:f0:a4:f4:44:b2:fa:80:e1:d5:bd:84:07:94:59:90:9c:d0:
0d:42:d5:95:73:d7:d8:b7:29:11:9c:82:3c:8b:81:fa:93:50:
17:ad:86:e7:f3:12:32:37:86:18:39:c6:8a:eb:f0:ab:53:2b:
eb:d9:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 09:30:24 2026 by rpki-client