Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/HB0wEFHQqsznJtHWSGVIy1HtmU0.roa
File: HB0wEFHQqsznJtHWSGVIy1HtmU0.roa (raw, json)
Hash identifier: PxSsjONzT5IwaZEdbpKBuHVjcUMFikrQ+hvBI+yX+F4=
Subject key identifier: 1C:1D:30:10:51:D0:AA:CC:E7:26:D1:D6:48:65:48:CB:51:ED:99:4D
Certificate issuer: /CN=b91696a81c0ba1e61d0ebafa6dc8425c3e1e0391
Certificate serial: 019F2368323FFA16F3A031E64EEB8DDCBC09
Authority key identifier: B9:16:96:A8:1C:0B:A1:E6:1D:0E:BA:FA:6D:C8:42:5C:3E:1E:03:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRaWqBwLoeYdDrr6bchCXD4eA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/HB0wEFHQqsznJtHWSGVIy1HtmU0.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42573
IP address blocks: 91.199.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRaWqBwLoeYdDrr6bchCXD4eA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:3f:fa:16:f3:a0:31:e6:4e:eb:8d:dc:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91696a81c0ba1e61d0ebafa6dc8425c3e1e0391
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c1d301051d0aacce726d1d6486548cb51ed994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:b3:df:86:f2:e6:dd:a9:54:dd:4b:64:9f:
53:56:f2:91:f3:82:48:9b:4a:e0:77:66:be:64:13:
67:53:25:6b:4c:76:71:33:3b:0d:08:24:a6:72:b9:
3c:8a:8d:b0:c4:c5:da:a9:64:fb:e2:02:ed:b6:db:
3f:c3:45:cc:92:8d:16:87:06:cb:6f:2c:7c:fc:e3:
26:6a:fa:fe:f8:ac:19:f4:fd:07:3f:59:07:71:88:
03:db:d4:cc:8d:62:9b:05:82:87:89:79:16:bc:b8:
c1:1d:52:f7:a7:68:87:6a:fc:ba:5e:51:57:1b:f1:
86:2c:a1:96:48:c8:62:ff:e9:cf:fc:41:7f:bb:be:
7b:ce:ac:f5:88:55:1f:83:2c:97:8a:bb:3b:23:69:
ad:85:c4:48:b9:98:a2:d7:6f:cb:c7:c8:8c:ec:00:
93:1d:87:4e:23:14:bc:25:d1:3a:6f:c0:58:17:4e:
91:bf:4b:14:58:c0:c9:89:38:d7:6e:38:8b:b8:33:
83:c6:6e:c9:85:a5:46:bc:59:93:59:13:35:bf:c4:
fe:bc:91:fb:ba:ae:6d:3b:21:81:75:90:80:bb:9e:
bb:48:89:ee:23:61:0b:01:59:aa:59:56:77:14:c5:
02:8a:ad:3a:6a:46:cd:71:a0:c8:a8:f2:24:af:af:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:30:10:51:D0:AA:CC:E7:26:D1:D6:48:65:48:CB:51:ED:99:4D
X509v3 Authority Key Identifier:
keyid:B9:16:96:A8:1C:0B:A1:E6:1D:0E:BA:FA:6D:C8:42:5C:3E:1E:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRaWqBwLoeYdDrr6bchCXD4eA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/HB0wEFHQqsznJtHWSGVIy1HtmU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c5:e7:d5:54:ee:7f:9a:9c:8b:6d:32:f0:e4:bf:a0:7f:3c:
9f:4d:f6:7e:4a:d1:1d:ef:00:1a:62:8c:c2:7a:a3:26:6f:0f:
2e:05:72:9c:2c:d7:92:51:d3:25:8e:90:04:b6:db:59:b1:0c:
b7:98:10:36:d3:34:ea:d4:44:64:c2:a8:f0:40:9e:1b:6b:aa:
f3:4d:c9:6b:1f:97:c5:aa:56:db:df:3e:2e:a6:53:f5:ed:c7:
fd:37:53:e8:25:88:8f:ea:c7:c8:c3:18:58:10:ea:dd:45:e7:
c1:18:2b:f6:78:9f:d3:7d:4f:2b:d0:76:ff:cf:68:af:db:df:
c2:d8:3b:7e:ce:a6:1a:06:04:55:66:28:ef:58:9f:c0:63:ac:
3f:78:a4:ec:44:c4:58:66:38:f5:43:c2:3c:7e:b3:43:99:0a:
80:b5:bc:2c:cc:21:e0:49:ee:f9:2a:2c:9c:43:c0:1f:59:a5:
c9:e8:40:52:27:97:58:22:89:6b:62:b8:9b:0f:75:e1:a4:b0:
a1:3d:2a:ad:b7:76:85:80:6f:a3:71:1d:08:d0:ea:e8:80:50:
9a:f5:31:03:5b:3e:ed:e3:c5:b7:8d:96:81:13:5a:a5:7d:24:
b6:f3:1a:02:48:0b:4c:9b:1f:37:d4:aa:c6:d3:84:34:47:7a:
ba:1a:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:52:03 2026 by rpki-client