Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa
File: 2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa (raw, json)
Hash identifier: M1edUcZNtYk6o/wToAk4z5J0jw/3ZvfQIx1YRru5078=
Subject key identifier: D8:74:0E:C7:88:8E:FF:1A:C9:1E:FA:D4:8B:8C:83:E6:3A:FE:9A:F3
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 019EF92AD57F6E7057D3FBC1A7A4488F7C92
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa
Signing time: Wed 24 Jun 2026 10:26:34 +0000
ROA not before: Wed 24 Jun 2026 10:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 194.88.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 10:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:2a:d5:7f:6e:70:57:d3:fb:c1:a7:a4:48:8f:7c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Jun 24 10:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8740ec7888eff1ac91efad48b8c83e63afe9af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1a:e4:a9:7d:3e:de:e9:97:c6:0e:ba:e8:f3:
93:27:c1:3a:ac:ac:ed:cf:82:48:dc:ae:03:c5:c4:
9e:13:be:52:e5:69:b5:d8:c6:5f:63:3d:c1:44:ad:
67:13:41:2d:31:f0:5a:18:db:10:ae:f1:fe:97:31:
45:f1:fe:74:f8:f3:bd:15:8c:fe:43:97:5d:89:20:
69:e0:bb:4f:3b:71:1f:53:bf:ea:4b:d1:c6:60:55:
3d:73:4d:25:45:64:ec:c9:07:74:ea:96:ad:40:ab:
fc:13:43:99:b2:18:90:6d:08:77:dc:99:ae:07:0a:
26:62:11:b1:70:51:66:26:41:f1:2d:3d:8e:5b:8c:
02:9a:7d:e6:a6:b0:d4:a5:73:d2:50:27:d5:3d:c6:
d9:80:d2:df:d1:40:12:fb:3f:1a:85:e8:1d:a0:43:
f4:5e:fb:1e:3a:16:00:58:9a:43:39:73:94:1a:4b:
58:b9:d1:2a:9a:e1:0e:b4:67:e5:b4:44:ed:ac:f9:
0c:1d:a0:c3:e3:c8:f2:81:32:07:8d:d1:91:cb:7a:
45:3c:cf:db:25:44:b9:95:eb:90:41:4b:ec:8c:3a:
8e:25:15:59:b3:11:4c:6c:69:1e:53:f5:b0:d3:86:
e3:e7:ad:76:41:09:bb:b6:0e:de:39:1c:da:46:e5:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:0E:C7:88:8E:FF:1A:C9:1E:FA:D4:8B:8C:83:E6:3A:FE:9A:F3
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.232.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:96:84:9a:25:85:63:61:a6:46:4c:5d:e7:f3:fc:61:13:99:
7a:2e:97:68:f9:97:b6:35:b7:b5:f5:b3:0a:3f:d2:f7:6a:17:
d3:8a:2b:5c:39:84:f3:7b:3f:31:9a:53:2c:a4:5c:2a:a4:3b:
79:f2:9e:46:7e:6d:20:fc:57:fe:23:16:21:9f:ab:44:47:c9:
79:cb:86:8a:a3:38:3f:3c:aa:d9:f6:37:66:1f:1d:45:6e:a4:
32:a1:95:4b:64:66:cb:c1:19:26:bd:05:52:82:57:46:65:6a:
ce:e3:64:77:f5:1f:ca:cc:ab:59:e5:52:a4:d9:82:b6:ec:b7:
96:9e:0b:98:bc:18:08:fb:fb:c2:6a:b6:f3:8c:80:be:ea:37:
c1:9f:8f:fe:18:e5:22:a3:eb:9d:20:7a:dc:e0:39:64:a7:e5:
58:32:07:e3:68:18:30:9a:97:e1:19:9c:20:c1:05:bb:52:e1:
4f:9d:8f:87:03:89:00:24:81:c0:b7:1e:23:5f:be:bc:1c:b1:
f6:d6:a4:e6:ac:46:45:25:71:2e:1d:9c:41:14:b9:a8:56:45:
2e:5d:75:d5:d1:80:d3:bd:93:cb:ac:53:45:fd:52:bc:8d:7d:
c3:5a:76:59:d8:95:aa:e0:e6:60:49:c4:b9:ce:23:0f:b9:dc:
8e:43:52:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ75KtV/bnBX0/vBp6RIj3ySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5
ZDI5MTYwHhcNMjYwNjI0MTAyNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODc0MGVjNzg4OGVmZjFhYzkxZWZhZDQ4YjhjODNlNjNhZmU5YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hrkqX0+3umXxg666POTJ8E6rKzt
z4JI3K4DxcSeE75S5Wm12MZfYz3BRK1nE0EtMfBaGNsQrvH+lzFF8f50+PO9FYz+
Q5ddiSBp4LtPO3EfU7/qS9HGYFU9c00lRWTsyQd06patQKv8E0OZshiQbQh33Jmu
BwomYhGxcFFmJkHxLT2OW4wCmn3mprDUpXPSUCfVPcbZgNLf0UAS+z8ahegdoEP0
XvseOhYAWJpDOXOUGktYudEqmuEOtGfltETtrPkMHaDD48jygTIHjdGRy3pFPM/b
JUS5leuQQUvsjDqOJRVZsxFMbGkeU/Ww04bj5612QQm7tg7eORzaRuWh6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNh0DseIjv8ayR761IuMg+Y6/przMB8GA1UdIwQY
MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt
MWE0MmY2MzJjMzA3LzEvMkhRT3g0aU9feHJKSHZyVWk0eUQ1anItbXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3
LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljoMA0G
CSqGSIb3DQEBCwUAA4IBAQDcloSaJYVjYaZGTF3n8/xhE5l6Lpdo+Ze2Nbe19bMK
P9L3ahfTiitcOYTzez8xmlMspFwqpDt58p5Gfm0g/Ff+IxYhn6tER8l5y4aKozg/
PKrZ9jdmHx1FbqQyoZVLZGbLwRkmvQVSgldGZWrO42R39R/KzKtZ5VKk2YK27LeW
nguYvBgI+/vCarbzjIC+6jfBn4/+GOUio+udIHrc4Dlkp+VYMgfjaBgwmpfhGZwg
wQW7UuFPnY+HA4kAJIHAtx4jX768HLH21qTmrEZFJXEuHZxBFLmoVkUuXXXV0YDT
vZPLrFNF/VK8jX3DWnZZ2JWq4OZgScS5ziMPudyOQ1K9
-----END CERTIFICATE-----
Generated at Wed Jun 24 19:01:49 2026 by rpki-client