Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HT9W6YwfZyEj0Sx8eP7z9FdN9z0.roa
File: HT9W6YwfZyEj0Sx8eP7z9FdN9z0.roa (raw, json)
Hash identifier: u1X7ci+m1T/5tezKqvKfm9XF/YRhiy2FDMSMfWFs0zE=
Subject key identifier: 1D:3F:56:E9:8C:1F:67:21:23:D1:2C:7C:78:FE:F3:F4:57:4D:F7:3D
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A0E7E847184DCF0418FF2E01309B0FEF59
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HT9W6YwfZyEj0Sx8eP7z9FdN9z0.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11194
IP address blocks: 168.199.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:47:18:4d:cf:04:18:ff:2e:01:30:9b:0f:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3f56e98c1f672123d12c7c78fef3f4574df73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:85:34:f5:e5:88:d2:56:50:06:e7:65:0a:
f7:8f:83:b0:ec:a4:69:4a:2a:80:c0:de:d8:1e:f0:
28:cc:18:08:43:45:f9:2b:88:27:dc:99:73:e5:fb:
07:06:e0:46:1d:17:ef:6e:f9:ac:c7:44:92:0e:6f:
e5:a1:36:cd:d8:d5:92:6a:44:13:d1:f6:e7:04:8c:
b0:db:7f:35:5b:fb:06:5a:1e:47:f3:50:d0:04:34:
5e:15:4c:27:bc:b5:4b:00:9b:a0:90:21:91:7c:e9:
eb:02:0f:4f:8b:07:71:1a:28:f5:96:fb:bb:de:79:
a4:9b:98:4f:10:e3:87:20:17:36:be:93:33:64:c0:
89:4d:27:1f:5e:06:23:db:1f:c0:71:5c:a6:1b:f0:
fd:77:cb:a5:75:1b:cd:e3:fd:6b:46:80:4c:2e:0b:
75:b6:5d:2b:8d:93:61:50:64:e0:30:cd:2b:8a:ab:
a0:62:ba:11:b3:26:c6:e6:02:58:23:31:14:af:7b:
58:6d:79:92:af:7f:e4:f1:62:17:e9:0e:6a:ca:4a:
1a:22:91:d0:22:36:f3:cd:77:36:4e:45:9d:71:65:
34:44:5a:1a:60:22:61:88:0f:8a:0c:91:23:77:35:
22:71:f0:7c:86:01:ad:93:73:77:f0:6e:40:22:0c:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:56:E9:8C:1F:67:21:23:D1:2C:7C:78:FE:F3:F4:57:4D:F7:3D
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HT9W6YwfZyEj0Sx8eP7z9FdN9z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.27.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f1:ea:31:58:51:d8:bf:9d:8a:42:92:45:dd:f3:80:c3:1e:
77:c5:51:33:12:83:ba:98:04:75:9c:d6:9d:91:c1:83:20:2e:
b4:9f:d2:5f:98:f0:28:70:d8:66:fc:6b:7a:d5:70:68:8f:2b:
75:75:03:40:e0:b3:20:40:22:f2:df:00:f4:ef:ea:e1:04:fe:
ee:76:f1:ad:13:17:66:62:76:73:da:ae:6d:e9:54:42:f6:8d:
85:3d:67:e6:77:5e:bc:6d:23:02:e2:cc:a6:62:d5:1f:e8:2f:
d6:4c:59:be:58:24:e0:c6:5c:2f:bc:fb:52:c8:ae:f8:f5:55:
7e:93:1d:dd:74:e1:15:5e:b9:88:a4:70:87:05:cc:8c:8e:2e:
78:f1:81:f0:42:bb:62:c7:91:2c:f9:90:b1:f4:d8:21:c6:cf:
99:28:43:d9:26:8c:d5:6f:44:e1:7d:b9:73:2b:c6:39:f8:4f:
77:9e:a9:94:e0:55:ba:a4:bc:8b:a9:ab:5c:67:35:e2:c9:40:
7b:75:dd:79:dc:1b:02:f0:4a:ad:cb:7c:7e:ec:71:3b:24:8a:
d0:57:83:23:9c:20:15:42:ac:87:23:08:4b:03:a7:61:86:f8:
75:5d:f0:a3:ac:60:3c:09:5d:4a:52:14:e1:01:09:26:97:3f:
c3:3e:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:17 2026 by rpki-client