Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/Hzt1hVee4qju57F3Ar863410Av8.roa
File: Hzt1hVee4qju57F3Ar863410Av8.roa (raw, json)
Hash identifier: +JMJGIKgMrfRmhRpBwBa7vxoZXnFjBkP0QWjFV0kYl0=
Subject key identifier: 1F:3B:75:85:57:9E:E2:A8:EE:E7:B1:77:02:BF:3A:DF:8D:74:02:FF
Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial: 019FD2D97457A204D91C12B24FE57A5A2505
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/Hzt1hVee4qju57F3Ar863410Av8.roa
Signing time: Wed 05 Aug 2026 16:54:54 +0000
ROA not before: Wed 05 Aug 2026 16:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196709
IP address blocks: 2a13:7e40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:d9:74:57:a2:04:d9:1c:12:b2:4f:e5:7a:5a:25:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Validity
Not Before: Aug 5 16:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f3b7585579ee2a8eee7b17702bf3adf8d7402ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:0d:9b:59:03:eb:31:ca:33:d8:41:12:54:
06:9e:b0:a3:d2:f8:5f:52:d3:60:bf:1b:d4:ee:04:
eb:11:2f:ac:ec:3c:52:fc:ae:ea:0f:e6:bf:ac:43:
1d:9a:6b:ef:71:f3:c5:ac:2f:39:b5:d5:fe:6e:3e:
0e:78:94:2b:28:d8:09:f9:58:32:6f:e8:d5:61:7e:
29:e1:af:34:20:93:6f:de:1f:d4:08:c6:30:74:bf:
4c:2e:d0:2c:ff:c9:30:e1:f8:5e:e6:e6:22:d3:48:
76:6f:03:33:22:64:2d:14:ab:3b:ad:7b:c6:b4:b8:
f0:34:9c:2c:b6:80:14:d6:8c:21:36:61:a3:96:2d:
d7:56:68:a7:97:24:e2:15:82:5e:01:a1:2d:05:69:
0f:22:c7:3a:cf:a0:db:02:43:4e:f8:ba:76:e2:45:
01:23:0c:01:75:79:6b:4c:3c:18:ef:ab:82:ac:9f:
d3:16:08:05:ad:a3:84:a4:4e:30:50:82:33:78:d2:
e6:f7:fb:17:3a:3c:e6:a5:a2:d3:2f:2f:ef:a9:6f:
1e:57:85:60:e9:18:80:28:e1:a5:89:a0:f0:be:a0:
23:42:b2:fb:90:c6:c5:ab:80:1c:41:7b:3e:75:27:
90:30:97:b2:05:c4:9e:b0:07:a6:eb:bd:46:3a:3b:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:75:85:57:9E:E2:A8:EE:E7:B1:77:02:BF:3A:DF:8D:74:02:FF
X509v3 Authority Key Identifier:
keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/Hzt1hVee4qju57F3Ar863410Av8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
b4:24:b4:69:58:6e:0a:4d:85:fa:31:f0:8c:10:62:f9:b9:4f:
85:bb:56:4b:85:fd:75:2e:07:b6:35:8d:ec:68:6a:30:54:7d:
89:7f:99:48:b3:b0:dd:e5:29:97:56:e7:c7:e5:d2:87:57:d1:
0f:32:79:bd:05:8a:78:57:78:30:2a:66:97:24:30:ac:9b:34:
cc:42:3c:a8:82:75:ad:da:f4:cc:71:cb:54:38:11:d7:34:e9:
31:34:68:98:70:b2:e4:2c:07:49:d3:ee:6f:ec:be:f7:bb:8d:
71:14:d8:71:62:05:cd:ab:d3:25:11:f9:b7:a2:63:20:27:fa:
a0:94:9e:23:0a:82:82:86:61:f3:d6:1c:30:64:9c:c8:83:76:
f8:50:4d:ff:ce:b5:e8:42:c6:f1:f6:b5:8c:0c:a9:be:a8:ac:
1f:a1:73:c4:9f:11:7e:74:f5:05:45:03:13:35:76:0f:a7:22:
70:aa:c2:fd:63:fa:7a:6b:3e:54:32:d7:9f:12:1f:5b:be:e4:
b3:fd:55:45:59:c8:d5:d9:89:88:72:3a:02:5c:63:6f:5e:46:
c1:f8:d3:65:e5:fc:06:25:6a:fa:ae:7c:99:b1:4d:c7:de:d2:
c5:b6:0d:09:f4:3f:5f:42:25:c1:c3:40:70:43:52:c1:11:3e:
05:ec:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:01 2026 by rpki-client