Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa
File: HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa (raw, json)
Hash identifier: m3qcvytC4O+9pABPedPudw1QdoZyvWEqd2L9LP+DeoM=
Subject key identifier: 1C:6C:AB:AC:5B:28:87:F7:64:AC:B6:59:B6:74:C9:B0:C6:23:3C:E8
Certificate issuer: /CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Certificate serial: 019F2368333F3B4A867B86ECB20834718CA8
Authority key identifier: 4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213483
IP address blocks: 89.31.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:3f:3b:4a:86:7b:86:ec:b2:08:34:71:8c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c6cabac5b2887f764acb659b674c9b0c6233ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0d:4f:4e:eb:52:c8:28:c0:16:b0:9d:78:34:
cb:c3:4d:92:04:5e:b9:b1:c1:98:16:23:40:fa:97:
f1:25:7c:5d:3a:62:c5:70:ee:7e:97:24:8f:55:01:
c5:89:16:8b:5e:58:61:01:17:e1:a4:25:e4:d9:4e:
52:35:1e:8a:85:63:58:79:1b:ce:8f:78:10:f4:4b:
97:56:86:cf:9a:64:be:aa:96:1c:ef:e0:de:98:a4:
18:88:33:00:ab:30:82:7a:f5:02:54:8f:46:d7:a5:
e1:56:0d:16:26:2b:cd:b1:e0:f6:3d:de:2f:db:46:
5d:91:dd:97:51:20:11:76:7b:22:c7:ff:43:6e:a1:
ef:14:cc:3d:f5:96:24:16:7e:cd:6b:5b:1b:6f:8d:
f7:f5:5e:04:01:94:d1:3f:84:ee:02:49:93:b0:e6:
30:c9:18:51:d2:d4:c7:e0:c1:6b:43:e7:ec:d5:c4:
8d:54:65:14:cd:75:e5:89:7d:39:75:a3:aa:fd:4a:
3a:de:04:3e:95:ed:99:83:b0:29:44:49:97:b4:f2:
19:24:6a:2a:3f:dc:1e:7f:0d:b0:f4:a2:1c:c5:f2:
7c:0e:99:06:08:91:a2:89:75:e8:9b:3b:c9:4f:a8:
f9:2b:dc:58:04:f9:ef:69:5d:5d:83:3a:95:3a:a5:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6C:AB:AC:5B:28:87:F7:64:AC:B6:59:B6:74:C9:B0:C6:23:3C:E8
X509v3 Authority Key Identifier:
keyid:4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.246.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4e:e4:2f:47:ba:17:b8:4a:87:7e:7d:3b:40:2a:58:a1:d6:
fc:6e:9a:e7:19:10:68:f5:7e:ae:3e:48:d9:62:3e:46:9c:0f:
e3:46:af:9f:04:95:ac:44:e5:dd:a3:ce:0d:3e:99:78:e7:cb:
ad:d1:65:46:d5:7d:1e:d5:5a:07:62:22:a4:43:07:32:b7:ea:
57:7f:9d:a3:43:8f:4e:79:43:71:4f:3d:af:a7:a7:d9:8f:f9:
02:95:18:07:9e:53:e6:03:de:32:be:6b:75:a4:f4:dd:32:03:
af:e2:88:89:99:8c:8d:71:a0:b5:49:45:44:39:4f:08:80:9e:
c9:16:6f:f9:c4:12:d7:c2:3a:2e:9c:fe:91:e1:51:35:65:0d:
d5:68:0c:b5:77:69:4a:0a:2a:ce:de:6a:ce:a4:99:47:ee:65:
b9:32:ee:e8:2a:6d:a0:38:1f:68:fd:86:5d:0a:bd:09:e6:aa:
7b:6a:71:1e:26:1b:a0:97:2e:48:08:70:19:0a:7c:2b:1f:04:
76:36:82:7e:ec:89:01:59:f1:27:66:c0:6b:5f:70:9d:fe:07:
e5:7e:ef:f7:08:d1:dc:b5:54:ff:44:0d:c5:b8:dc:b9:7f:41:
9e:16:5b:0e:99:eb:13:ab:d9:0f:6a:09:f2:78:a9:1e:69:a4:
50:86:70:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 06:11:03 2026 by rpki-client