Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/HvPJromQatJpK21zTf_zEWzRrcs.roa
File: HvPJromQatJpK21zTf_zEWzRrcs.roa (raw, json)
Hash identifier: MlXOal2TwzQ7NF4YnJ7EYZ0o/+GTjGWME37sNwfO/wU=
Subject key identifier: 1E:F3:C9:AE:89:90:6A:D2:69:2B:6D:73:4D:FF:F3:11:6C:D1:AD:CB
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019F3C92D5646B91BB92C21596BF7CFC3795
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/HvPJromQatJpK21zTf_zEWzRrcs.roa
Signing time: Tue 07 Jul 2026 12:34:43 +0000
ROA not before: Tue 07 Jul 2026 12:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 46.34.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:92:d5:64:6b:91:bb:92:c2:15:96:bf:7c:fc:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 7 12:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ef3c9ae89906ad2692b6d734dfff3116cd1adcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:b1:59:7c:ce:8f:1b:82:40:78:03:74:9d:
1c:98:5b:17:88:65:07:15:35:43:c2:3c:ca:16:94:
f8:91:65:68:36:b5:9b:ed:43:0e:11:c1:ec:8c:f9:
65:80:a5:56:25:a5:e7:b7:4d:dc:a6:fc:4b:31:f4:
4e:23:16:20:f4:60:fd:1a:64:32:65:1e:2b:6a:c7:
d6:ee:af:33:59:d0:89:fe:1e:73:31:73:29:eb:36:
11:31:e5:6a:42:d4:ff:4a:4d:9a:eb:c0:06:3e:5d:
49:e2:67:80:50:b0:db:d8:6d:65:ed:34:ab:61:4d:
7e:0b:6f:88:e6:c4:35:f7:dd:db:28:e6:1f:2c:62:
2a:0d:a6:0b:7f:0f:92:58:df:c1:64:64:58:7e:b2:
28:bb:24:a5:89:05:4f:3a:0f:e0:7a:f8:1e:65:98:
bc:d6:84:06:2f:4c:af:42:40:e9:d4:f2:4c:af:aa:
61:45:41:99:12:98:77:14:d8:d2:67:7e:8d:5d:4b:
ef:be:20:33:81:28:5f:28:21:a3:57:e0:52:65:ac:
f3:e6:c8:74:e7:c2:92:dc:6f:61:5a:90:98:e3:b2:
b2:d2:ee:8a:2e:cc:96:a0:52:60:5d:ba:25:ba:36:
cb:4e:09:d9:da:7d:2c:bb:21:62:5d:82:a1:f5:91:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F3:C9:AE:89:90:6A:D2:69:2B:6D:73:4D:FF:F3:11:6C:D1:AD:CB
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/HvPJromQatJpK21zTf_zEWzRrcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:96:d2:aa:5b:c5:56:50:c1:ad:30:af:83:e9:0c:01:88:c7:
7b:b6:11:37:b7:ed:b2:e0:fc:0e:0e:8b:d6:59:da:a2:85:3c:
3d:6a:3a:17:0e:eb:ef:73:85:d7:ee:c6:fb:76:1b:5e:ee:db:
1a:98:ca:cb:47:7a:0c:51:9a:e7:12:64:1d:77:38:1a:24:bc:
27:51:87:40:7a:fb:cd:ce:00:4f:b4:fc:57:d2:49:69:90:7b:
cf:c3:d7:f5:14:14:86:29:40:a1:6d:71:c4:fa:a4:9d:94:ee:
cc:a3:0b:23:6e:cd:ed:37:bf:59:8c:46:da:a1:69:de:99:d4:
2f:ad:7f:a5:42:17:8c:59:41:0e:9f:7e:26:2e:5c:71:15:3f:
3f:d3:76:83:d1:dc:07:69:9c:ce:74:94:39:ee:e3:7a:2e:f2:
02:86:18:84:e1:68:56:9c:cf:b7:2b:c4:56:1f:b2:cc:7c:a9:
e4:79:68:7f:b5:47:7a:11:f7:54:19:21:e0:b0:e5:7b:fe:5d:
87:df:23:e3:45:cc:8c:28:d7:2e:da:0e:58:97:90:0d:8a:3b:
98:68:f1:40:bf:4d:65:da:20:45:03:ca:21:00:07:96:8d:8c:
df:d0:c2:cb:37:c7:44:62:f9:f9:a3:87:23:e1:a2:68:85:a0:
8f:86:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:53 2026 by rpki-client