Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hzeHFDX7-fXakvbRNzVIimetgT0.roa
File: hzeHFDX7-fXakvbRNzVIimetgT0.roa (raw, json)
Hash identifier: TTVPslSxsu3A4z0fsBCY/2+kt2uSPjNyxRVnr/wiATk=
Subject key identifier: 87:37:87:14:35:FB:F9:F5:DA:92:F6:D1:37:35:48:8A:67:AD:81:3D
Certificate issuer: /CN=4f7ce59e47418166d20f5164856f8793399189d0
Certificate serial: 019F2368EB7BBC18418264D0F9C754662D9E
Authority key identifier: 4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hzeHFDX7-fXakvbRNzVIimetgT0.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212034
IP address blocks: 2001:67c:2918::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:7b:bc:18:41:82:64:d0:f9:c7:54:66:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7ce59e47418166d20f5164856f8793399189d0
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8737871435fbf9f5da92f6d13735488a67ad813d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:9a:e0:e2:a2:56:c1:d4:69:78:a4:5f:9e:
c8:e0:0c:68:62:bd:d6:c4:73:8a:b2:45:a0:0d:1d:
91:c2:7f:cf:39:42:c8:eb:55:c9:14:cc:af:fd:6f:
a6:43:7a:c7:16:65:ce:db:60:15:b7:36:3c:5e:24:
14:83:4f:dd:85:61:c2:70:b4:a7:e1:c3:19:e1:be:
38:73:49:ba:9b:ee:6c:61:fb:0a:4d:11:6c:dd:f7:
20:50:d9:79:c7:60:da:69:d0:f0:aa:7b:3c:ec:ce:
9f:89:b2:78:4e:91:c1:bd:ef:ba:cb:5d:fb:20:8c:
2a:4c:ee:90:6e:dd:51:fc:ff:54:58:0a:5f:a6:6b:
45:2e:b1:c5:ea:da:74:87:9f:ce:24:f6:ac:e5:29:
ff:81:33:53:76:12:ab:cc:8b:59:3e:43:af:d2:b0:
cc:8f:e1:b6:3f:c5:6b:c5:39:a1:75:42:b3:90:b8:
41:b7:e8:9f:75:97:65:15:46:a6:bf:2b:7a:e1:a3:
5e:c2:63:f5:7e:ef:e4:b4:e8:28:5c:60:6b:ea:33:
09:53:de:a5:0a:44:f2:19:57:b9:99:34:16:55:6c:
29:8a:4e:55:4b:68:0f:c3:20:f3:40:d2:c9:86:0b:
f9:2f:e7:93:dc:17:a0:b1:99:fa:9f:2a:b3:0c:f0:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:87:14:35:FB:F9:F5:DA:92:F6:D1:37:35:48:8A:67:AD:81:3D
X509v3 Authority Key Identifier:
keyid:4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hzeHFDX7-fXakvbRNzVIimetgT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2918::/48
Signature Algorithm: sha256WithRSAEncryption
5b:47:be:fe:2c:04:09:1c:88:7e:13:7b:cd:e0:f4:dd:ca:8a:
cc:ed:33:97:f6:e3:ca:86:9a:93:2b:41:c3:bf:1e:a6:3b:38:
e3:31:0f:26:dc:6a:7d:f6:36:f9:2d:e5:8e:f0:30:9d:9f:30:
ac:bf:26:93:9e:77:f1:3f:88:6e:d2:e4:8a:86:09:98:7b:84:
79:7d:14:4d:89:9c:64:c1:44:f7:90:60:9d:25:46:a2:58:a2:
74:a9:b2:5c:93:4c:86:cf:bc:8c:2a:1d:8c:e2:fe:ec:f5:3e:
27:99:54:24:a6:ee:bc:eb:d2:f9:21:3c:73:cb:04:37:78:0c:
bc:2d:a5:a2:a8:2d:b4:e3:60:91:11:fc:53:28:b8:49:6b:57:
90:88:46:39:f1:1c:b8:ac:4f:7b:98:46:b9:78:b3:ce:a0:9b:
43:8a:82:c1:77:4c:1b:dc:ce:81:f9:b0:ff:22:1e:48:89:0d:
14:92:31:53:9f:d1:2e:a3:38:8d:ec:4e:bd:16:b4:eb:ed:78:
5a:51:ff:e7:2b:a5:7d:96:9c:68:4f:1d:49:13:5a:25:85:65:
59:bc:05:07:bf:a9:4c:71:51:be:b1:85:18:88:da:21:f9:e5:
77:56:c4:3a:a8:7e:86:2e:c6:9b:5b:5b:fa:83:de:2e:2d:07:
0d:70:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:35 2026 by rpki-client