Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HscGrRccOtXRpBd4DIeb4Kb_Y2s.roa
File: HscGrRccOtXRpBd4DIeb4Kb_Y2s.roa (raw, json)
Hash identifier: TluwUtP/kelzS2bBdGIVZTA/Ws/ztuwX5Nxy5OsnNB8=
Subject key identifier: 1E:C7:06:AD:17:1C:3A:D5:D1:A4:17:78:0C:87:9B:E0:A6:FF:63:6B
Certificate issuer: /CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Certificate serial: 019FFF10A0C773417413937A0909CD6B3255
Authority key identifier: 1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HscGrRccOtXRpBd4DIeb4Kb_Y2s.roa
Signing time: Fri 14 Aug 2026 06:58:27 +0000
ROA not before: Fri 14 Aug 2026 06:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 193.5.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:10:a0:c7:73:41:74:13:93:7a:09:09:cd:6b:32:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da34b66736f0ce2f1f01ccbf68f8f39c593b14a
Validity
Not Before: Aug 14 06:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ec706ad171c3ad5d1a417780c879be0a6ff636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:d2:0a:7a:cc:63:e7:69:c1:92:06:b1:b1:
60:98:f1:c7:4b:1a:3e:1d:0f:b8:e6:64:2c:90:50:
e1:55:5a:1d:d0:a2:9a:56:cd:28:cb:28:f1:3b:d5:
3b:0e:4a:68:b6:c8:13:6c:ef:06:fc:ee:be:53:8e:
81:c3:fc:7a:e4:09:85:22:f7:f9:38:1d:0c:73:40:
2c:f3:37:d3:cf:48:f3:13:f5:fc:5f:ea:5b:f8:03:
e5:52:62:a0:54:71:cb:c6:d6:c2:a4:a0:29:bc:09:
ce:78:35:c9:bb:1d:7f:e7:b9:f9:f3:d8:c0:f0:6e:
49:48:00:2d:bc:16:cc:5b:81:f1:8a:f2:8d:0d:bb:
6c:9a:7d:42:37:d3:9d:18:82:a4:f0:85:98:5b:ff:
a2:ac:a4:3f:5f:c2:9d:c2:93:93:c9:0d:93:17:8d:
ce:ec:99:9a:38:c1:36:7c:35:b7:80:4b:7b:4a:64:
34:fd:3e:d7:87:27:10:a8:b0:58:e3:ac:10:b1:43:
d5:65:c8:28:4c:29:5c:81:ce:42:19:d0:4d:2f:02:
9f:b5:ff:e0:9d:a7:4a:23:4b:23:aa:8f:40:fd:f4:
14:96:4e:99:ee:eb:29:14:fd:9f:70:2c:b4:92:8c:
5d:da:6e:31:cc:0b:e3:4c:c9:58:55:75:92:3f:07:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:06:AD:17:1C:3A:D5:D1:A4:17:78:0C:87:9B:E0:A6:FF:63:6B
X509v3 Authority Key Identifier:
keyid:1D:A3:4B:66:73:6F:0C:E2:F1:F0:1C:CB:F6:8F:8F:39:C5:93:B1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaNLZnNvDOLx8BzL9o-POcWTsUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HscGrRccOtXRpBd4DIeb4Kb_Y2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e454ce-b44b-465c-bc30-54cb9351c258/1/HaNLZnNvDOLx8BzL9o-POcWTsUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1f:b3:10:3b:34:35:0b:67:87:21:ea:a3:fa:8f:8b:2e:0c:
5b:0c:d0:08:2b:50:64:74:34:f1:5a:75:db:50:27:12:18:56:
c7:92:92:e2:f1:cc:d9:62:8f:39:fd:39:05:d2:19:f1:60:c1:
9c:b7:59:3b:d3:0b:00:e5:7c:ba:fe:27:b8:ab:0d:e2:f2:56:
39:29:4d:e2:22:22:dd:af:4f:62:53:8d:d7:cc:1b:2b:98:2b:
41:88:96:81:0a:ba:4f:90:8b:24:b2:f7:ec:b8:3c:ac:7c:00:
94:06:11:a2:04:2a:fd:0b:42:b3:eb:f1:2c:09:8a:c3:48:0f:
c7:cd:1d:61:0b:d6:89:ad:05:2b:86:48:24:4e:ef:49:36:56:
4c:fc:6d:2e:01:26:3c:b6:e8:3b:2b:0d:51:6a:f5:9e:fc:f8:
50:ff:6d:fb:cc:7c:d9:cf:80:c3:52:b7:51:3d:8d:ad:7d:bd:
b8:e7:c6:37:1a:93:23:9f:9d:29:15:f5:3a:29:6e:f8:82:95:
c7:94:a2:07:9f:64:3d:6f:af:b0:d9:9c:e4:f2:00:09:19:8f:
80:94:2e:d9:d6:da:0a:2d:a0:82:00:c4:46:0f:ce:b1:d1:cc:
38:c7:e1:07:ca:77:8c:4c:bb:c9:11:d9:ef:b5:de:85:7c:57:
22:2c:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:19 2026 by rpki-client