Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HkCnDFbZcJVC46vN8bHY96-TPbk.roa
File: HkCnDFbZcJVC46vN8bHY96-TPbk.roa (raw, json)
Hash identifier: 85Cl1uCm39EflxMKXO9f+deaBgoO5WQFlrI+5bXo6V4=
Subject key identifier: 1E:40:A7:0C:56:D9:70:95:42:E3:AB:CD:F1:B1:D8:F7:AF:93:3D:B9
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0F363343E58758DAC8F82970A6B950089
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HkCnDFbZcJVC46vN8bHY96-TPbk.roa
Signing time: Wed 30 Sep 2026 17:35:59 +0000
ROA not before: Wed 30 Sep 2026 17:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 192.144.78.0/24 maxlen: 24
222.167.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:63:34:3e:58:75:8d:ac:8f:82:97:0a:6b:95:00:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 30 17:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e40a70c56d9709542e3abcdf1b1d8f7af933db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:17:67:96:07:de:dc:2c:fd:6a:ab:52:6f:
7e:fb:2e:4e:ba:db:29:05:e4:7c:8b:d8:0c:0c:a3:
3e:fa:7f:f0:62:a6:be:4b:d3:55:b7:01:17:3b:10:
6f:64:bf:29:a9:dc:fa:4d:d2:18:62:6d:da:ac:0b:
f3:1c:32:54:a6:68:92:a1:bd:a2:d7:b5:ec:d2:aa:
b3:f4:ab:de:41:65:14:39:f2:a7:28:7b:b9:b0:36:
6f:63:6e:c5:53:50:f8:d5:c5:8f:ea:03:3b:fc:1e:
8f:1d:6a:bd:a7:de:a8:b0:64:df:74:3e:fa:31:e4:
ca:00:0a:31:69:4f:4d:cb:e5:ba:75:d7:b5:65:40:
00:45:b4:43:60:79:0b:c2:c0:6c:e8:8e:48:2f:b6:
28:f6:df:01:f8:f1:97:0a:24:6d:06:78:6a:a0:a8:
cd:2d:e4:5e:e3:64:fa:1d:c1:de:19:d1:d8:39:7f:
d1:e2:33:a0:f9:df:2f:5e:2c:bc:db:f0:91:86:83:
3a:fc:58:ef:eb:e6:92:47:09:56:ec:06:5c:ea:d4:
78:8f:a1:54:99:33:4c:36:79:53:7e:90:52:21:5c:
04:e1:1d:b1:57:71:f4:84:fa:c5:d3:39:3d:22:96:
43:b2:3d:c4:d1:22:7d:e5:d1:12:69:b6:33:8c:9e:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:40:A7:0C:56:D9:70:95:42:E3:AB:CD:F1:B1:D8:F7:AF:93:3D:B9
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HkCnDFbZcJVC46vN8bHY96-TPbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
222.167.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f2:94:73:0f:2f:eb:79:61:b1:63:ed:73:1f:f6:cd:30:e3:
34:77:4e:b3:c3:3f:7f:60:f1:3f:92:f4:af:b0:4d:0f:7a:a6:
91:7b:fe:73:91:88:00:64:15:2a:72:ac:fd:4f:cf:54:f2:ec:
e9:7e:ce:63:80:34:ab:97:53:5c:2b:db:c3:85:6f:35:f4:7e:
45:e4:e4:ab:c9:f2:81:b1:45:3b:99:c6:07:05:e1:4a:ce:02:
91:18:95:57:80:c2:91:f8:90:63:c7:16:17:fa:a7:af:b1:5d:
16:0e:09:54:fe:bf:92:61:1f:ed:aa:f4:4c:82:ef:a8:0b:df:
78:6b:a4:5e:d4:4c:65:7b:23:f8:0d:08:06:8a:48:5e:83:45:
04:c2:87:30:ba:a5:55:bc:c3:96:2a:dd:76:29:11:d5:9b:21:
78:d9:85:17:cd:5b:f4:8e:8e:99:1b:77:8b:25:3a:78:1a:e1:
ff:59:4c:d1:58:87:b6:d8:40:b6:bd:97:74:8c:6a:1a:a3:0c:
9e:ea:f9:d1:00:88:64:b8:62:04:70:71:10:1b:50:be:c4:92:
82:df:33:6d:03:6d:d8:55:9f:b3:9f:7c:45:eb:40:2e:46:e0:
1c:1e:5c:26:b4:5d:e5:8a:e5:86:38:6a:59:10:6f:9f:f1:bb:
76:a9:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:11 2026 by rpki-client