Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/HRbZcpNX73J-aDhTJXzQvRXnrLs.roa
File: HRbZcpNX73J-aDhTJXzQvRXnrLs.roa (raw, json)
Hash identifier: 2dvk2gD+UN1JnzRDk75YIunRvjED12Z3np2jbT3pSVo=
Subject key identifier: 1D:16:D9:72:93:57:EF:72:7E:68:38:53:25:7C:D0:BD:15:E7:AC:BB
Certificate issuer: /CN=99f60c11ffde1874c8a0fc40ac72f157ad37d631
Certificate serial: 019FCC0202C9242A5BFC387211E57CA39DAB
Authority key identifier: 99:F6:0C:11:FF:DE:18:74:C8:A0:FC:40:AC:72:F1:57:AD:37:D6:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfYMEf_eGHTIoPxArHLxV6031jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/HRbZcpNX73J-aDhTJXzQvRXnrLs.roa
Signing time: Tue 04 Aug 2026 09:01:51 +0000
ROA not before: Tue 04 Aug 2026 09:01:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15504
IP address blocks: 91.213.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfYMEf_eGHTIoPxArHLxV6031jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:02:02:c9:24:2a:5b:fc:38:72:11:e5:7c:a3:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f60c11ffde1874c8a0fc40ac72f157ad37d631
Validity
Not Before: Aug 4 09:01:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d16d9729357ef727e683853257cd0bd15e7acbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:35:db:5f:24:d4:66:63:51:d4:42:23:ce:
ac:d3:d8:23:c2:f5:fe:11:fd:c9:75:d1:b5:22:d6:
d2:22:40:c8:e7:d5:6b:a4:da:a3:c3:3d:b6:8e:6e:
86:c8:82:60:9a:3c:ed:6b:37:ab:4a:07:73:c5:2f:
b4:3d:0d:4b:80:15:ab:28:3d:e4:2c:79:47:ba:60:
7f:8f:85:2c:5f:a2:b3:67:09:14:4b:09:7a:f2:91:
bf:5d:df:e2:10:ba:0b:b9:f0:b1:87:12:f5:95:cb:
a6:ab:43:8b:71:c3:a4:c5:81:cd:e4:c9:c3:89:24:
5e:3f:c9:2e:5f:ae:4b:0d:43:b3:a3:1b:e3:e6:ea:
2a:6e:e5:52:b5:91:d1:f8:d1:8a:23:55:bd:50:4e:
63:fc:8a:8b:d4:74:d4:42:e5:46:2f:d2:fe:59:1b:
33:4f:16:e8:e9:d0:d6:eb:cb:fd:0e:2b:a3:35:e7:
35:da:0d:0a:cd:c5:a4:85:df:bd:49:c8:b4:f3:7a:
91:ef:e1:e3:bd:ce:45:e4:39:67:80:13:e3:d3:73:
89:ad:b4:35:b2:da:52:88:b0:cf:62:bb:be:96:b2:
ed:b4:25:19:9f:e0:2f:07:3a:0c:b9:a9:51:ce:5a:
4c:bb:b4:9a:eb:42:ae:51:2a:b4:ca:c2:a4:d0:e7:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:D9:72:93:57:EF:72:7E:68:38:53:25:7C:D0:BD:15:E7:AC:BB
X509v3 Authority Key Identifier:
keyid:99:F6:0C:11:FF:DE:18:74:C8:A0:FC:40:AC:72:F1:57:AD:37:D6:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfYMEf_eGHTIoPxArHLxV6031jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/HRbZcpNX73J-aDhTJXzQvRXnrLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/26f4df-70a9-4261-b2da-906c4798ed43/1/mfYMEf_eGHTIoPxArHLxV6031jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b9:41:e9:95:65:dd:6b:1c:4f:95:e0:44:22:a2:f0:ef:bc:
2f:57:1b:e5:17:90:88:32:68:eb:3c:48:8f:6d:43:ec:54:e1:
2b:98:e7:4e:b6:c0:5c:c4:22:bb:4e:ed:e5:13:f8:da:8f:0c:
10:32:c3:bb:ea:be:f1:98:08:6b:0e:1b:d5:c3:b2:e5:39:23:
ac:05:d9:3a:46:c5:27:f0:dc:dc:c7:12:91:95:10:7c:94:29:
19:a9:1c:9c:e1:65:b9:2e:d6:7c:69:8a:1f:7d:aa:8a:38:0d:
6e:c0:de:70:80:4b:b1:b9:1e:de:ff:97:ae:4f:3d:8e:58:5f:
f5:30:70:c2:05:60:13:e9:9b:19:a8:4d:71:07:5d:82:14:1d:
40:93:ad:6f:52:7f:27:89:25:6a:c1:75:93:37:17:d4:92:5f:
90:bc:a1:cf:b2:29:1d:40:30:f1:d4:c0:88:d3:a3:28:d3:ad:
72:c3:25:44:06:d9:2a:89:26:d6:33:8c:d8:84:6b:25:0d:d9:
e7:70:0a:f3:a3:db:ab:7e:6b:43:a1:cb:34:5c:df:6c:b3:56:
1b:5d:59:41:03:8b:eb:7f:c4:c7:21:aa:eb:cb:2e:2b:0c:6f:
ac:a1:d9:1e:b4:3a:12:a4:6d:17:fb:8c:07:09:07:97:4b:ec:
5e:c2:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 20:10:01 2026 by rpki-client