Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/HCihUF_5hDpIqXqYUJrzBJumeUI.roa
File: HCihUF_5hDpIqXqYUJrzBJumeUI.roa (raw, json)
Hash identifier: f9CXT6KQWpEiwwhV9yK1XmVpJI+yxpUMYfkH0B1xxTc=
Subject key identifier: 1C:28:A1:50:5F:F9:84:3A:48:A9:7A:98:50:9A:F3:04:9B:A6:79:42
Certificate issuer: /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial: 019F2368EAF7215AEF6DE145990B010FF3FB
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/HCihUF_5hDpIqXqYUJrzBJumeUI.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a0a:7740:1::/48 maxlen: 48
2a0a:7740:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:f7:21:5a:ef:6d:e1:45:99:0b:01:0f:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c28a1505ff9843a48a97a98509af3049ba67942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:5d:65:f2:ea:5c:25:b9:cb:72:a4:31:63:
09:18:a1:11:0f:65:b0:74:0f:9b:fe:0c:05:00:e2:
9f:e9:3e:4b:ed:bc:51:89:5e:64:ce:79:32:95:00:
40:f7:9d:80:b3:fa:59:41:7f:18:f6:fb:36:e2:7c:
8b:b5:0e:2e:1d:36:bc:98:06:4a:9f:1a:30:e0:f8:
f1:35:ee:52:ae:89:98:f8:3b:ce:c2:fa:be:71:39:
8f:cf:ff:89:4f:f5:d0:aa:b4:b9:07:3d:69:ec:53:
22:49:6b:46:ad:84:32:ba:51:04:bf:9c:19:c1:33:
53:69:78:df:5b:21:ba:9b:b2:47:89:66:c4:97:f0:
d1:76:4d:21:c9:e8:d5:3b:70:e7:d4:bf:79:34:4c:
25:b3:12:7b:a8:b0:16:39:26:53:c6:1f:64:fb:ea:
fe:e2:fd:84:73:6f:92:5e:03:17:6d:4c:20:7a:80:
3a:44:e4:d3:b0:55:72:ac:5a:af:2e:1f:f7:4e:25:
77:3c:ea:c9:5f:30:84:f2:77:a7:6e:0d:4a:69:38:
fa:a4:0c:2c:23:f4:26:2f:d1:f3:b5:bf:d7:a0:c2:
83:74:0e:a3:e1:d3:ca:1d:77:9d:01:d3:14:61:2c:
d6:c7:b2:5a:fc:21:bf:8e:3a:2b:ba:30:1b:ba:c4:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:28:A1:50:5F:F9:84:3A:48:A9:7A:98:50:9A:F3:04:9B:A6:79:42
X509v3 Authority Key Identifier:
keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/HCihUF_5hDpIqXqYUJrzBJumeUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7740:1::-2a0a:7740:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:c8:a0:32:f7:7f:c3:c3:8b:83:60:a7:f0:52:7f:4d:6a:8a:
94:12:76:4d:94:1e:41:3b:2f:6c:5d:22:ac:5c:8d:db:a6:75:
c3:e8:66:30:1e:cf:a1:ca:09:07:02:a0:a4:a8:66:56:67:29:
81:7d:7c:75:7c:8e:f6:b6:a8:3b:6d:07:e1:67:7a:0c:cc:bf:
66:29:4c:64:d5:4e:82:87:49:d7:51:5e:05:76:2e:be:25:25:
04:d3:50:59:dd:d2:4f:8a:67:11:a9:4f:97:ec:2d:73:be:6f:
60:76:84:c5:31:8e:9f:f8:d2:d7:00:74:43:35:93:b6:f9:e0:
b1:d8:26:77:a1:9b:5b:83:ba:5c:12:2e:56:d6:bb:3d:fd:e6:
3c:b7:83:f0:3e:5e:6d:79:c3:1e:7b:70:cd:13:ad:6b:36:e7:
1c:c9:23:be:b7:19:25:4c:f7:39:e5:e6:85:30:45:8c:5e:3b:
2f:95:ad:a9:8a:98:eb:27:1c:be:b5:59:a0:b7:bd:fc:2a:dc:
aa:30:e3:d0:29:2f:e6:a5:5b:53:f1:b0:26:83:42:bc:c1:02:
56:94:ad:96:a8:3a:96:d3:e6:8c:de:b1:f4:30:6f:e0:5c:e1:
27:2b:02:e5:a5:3a:da:e8:92:f4:8f:0c:e5:58:0c:b5:8a:00:
c0:70:97:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:30 2026 by rpki-client