Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HsYpOd7_G1RodaPlnOvuzsQQOAY.roa
File: HsYpOd7_G1RodaPlnOvuzsQQOAY.roa (raw, json)
Hash identifier: /CV7QjAsRYNIUG6r3bmzHIuQjO53phES0FHadxy4YJs=
Subject key identifier: 1E:C6:29:39:DE:FF:1B:54:68:75:A3:E5:9C:EB:EE:CE:C4:10:38:06
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A03DD429D0716DB80286326F02873A9F91
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HsYpOd7_G1RodaPlnOvuzsQQOAY.roa
Signing time: Wed 26 Aug 2026 11:28:29 +0000
ROA not before: Wed 26 Aug 2026 11:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45090
IP address blocks: 37.202.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:d4:29:d0:71:6d:b8:02:86:32:6f:02:87:3a:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 11:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ec62939deff1b546875a3e59cebeecec4103806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:98:3d:c2:05:e7:26:e3:52:09:8e:d0:c9:
47:af:30:03:28:9d:71:c6:ed:68:d9:6d:0d:6f:24:
42:c4:d4:6a:a3:48:3c:9c:5e:91:90:0c:28:33:77:
ce:07:00:d7:f9:7e:7b:e6:ee:fc:28:76:03:88:77:
80:b1:69:de:4b:ca:c9:2d:07:f7:31:28:f8:89:ad:
ae:54:84:f1:ba:0e:74:af:72:49:10:35:e9:73:1b:
ff:09:73:f1:1a:57:80:1c:78:7e:f2:e8:3e:59:73:
6c:c5:ab:1d:c4:08:02:58:73:3c:5b:e7:86:f7:84:
e1:a2:42:30:13:64:c9:72:36:18:36:32:ba:ec:47:
91:4d:62:ff:a6:1e:27:76:70:90:07:66:3c:ec:8a:
4c:30:b1:08:12:f4:e8:54:fa:dc:42:8b:67:7a:09:
3b:bd:5f:04:83:d0:04:f8:a6:10:e9:4d:7e:08:f3:
6f:8b:18:27:8a:18:cb:4c:f2:71:6f:c5:54:68:59:
29:55:fe:24:0b:2f:71:01:d5:39:2e:90:e0:95:9f:
9d:22:44:8f:ee:ca:8d:c6:50:55:65:73:44:a9:bf:
1f:54:03:6d:14:3c:7b:e7:67:6d:26:b5:ec:15:af:
99:8e:a3:ce:93:7b:17:7e:0b:95:59:6a:9b:87:23:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C6:29:39:DE:FF:1B:54:68:75:A3:E5:9C:EB:EE:CE:C4:10:38:06
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HsYpOd7_G1RodaPlnOvuzsQQOAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.200.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c7:85:75:e8:3b:9c:72:b3:51:82:ea:66:6f:45:68:54:b5:
75:c0:a4:8e:d2:d4:53:f6:09:97:1c:cc:24:63:07:50:57:b6:
92:46:49:4d:98:9c:7f:3b:6b:d0:12:71:5c:e2:1d:44:ff:71:
bc:a4:f1:03:d3:40:ff:23:6b:f6:86:3f:6c:04:94:52:d7:c5:
b9:18:49:1a:26:ea:bc:c5:0d:ca:16:5e:a8:66:99:03:ef:fe:
d4:b5:9c:57:b8:96:30:ec:95:81:45:1c:21:e1:b2:de:76:3a:
d0:56:9f:92:86:88:69:8e:aa:42:e2:2c:6d:72:27:b1:7b:06:
fe:92:f0:b9:46:f3:54:1f:9a:f5:f1:ef:57:d6:d2:75:e7:d1:
ab:db:11:01:17:86:85:62:00:06:14:4a:05:c4:74:d6:a0:bc:
b5:ef:38:24:12:17:c4:81:38:f7:11:18:8a:e8:cc:7e:ab:2a:
a3:3d:9d:d7:b4:ad:39:42:34:7e:8c:6d:9f:cf:6a:20:1e:28:
c6:62:55:78:39:08:3e:4d:4a:66:6c:d8:c5:da:a5:21:18:fb:
55:9e:64:dc:19:77:b6:07:cc:ef:7e:e1:90:82:bf:e0:15:f3:
ad:65:d5:fd:59:a6:42:68:0e:ef:2e:3b:af:9b:ae:7c:88:89:
96:d2:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:33 2026 by rpki-client