Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/HiYrKV9PWfW9VMwv69fUaqLEuLs.roa
File: HiYrKV9PWfW9VMwv69fUaqLEuLs.roa (raw, json)
Hash identifier: knibpBYB1VOhg3NmwQyS9JfIt1K5oIBjdfIcH/K2+Io=
Subject key identifier: 1E:26:2B:29:5F:4F:59:F5:BD:54:CC:2F:EB:D7:D4:6A:A2:C4:B8:BB
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019DAD051E0ADA42F5CFC66DE39A3ADC1CF1
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/HiYrKV9PWfW9VMwv69fUaqLEuLs.roa
Signing time: Mon 20 Apr 2026 22:31:26 +0000
ROA not before: Mon 20 Apr 2026 22:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30644
IP address blocks: 185.73.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:05:1e:0a:da:42:f5:cf:c6:6d:e3:9a:3a:dc:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Apr 20 22:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e262b295f4f59f5bd54cc2febd7d46aa2c4b8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:fa:26:eb:23:df:e2:f8:30:6f:d7:65:76:
07:03:20:73:2b:7b:ca:6f:ae:a5:c9:39:65:91:e7:
a4:9c:fe:cc:58:d5:f2:b0:f3:90:f1:c2:51:3c:91:
a5:45:f6:d7:73:af:43:23:92:1c:94:dd:4d:f5:5e:
2a:4c:a9:f1:34:0b:aa:e0:b9:ac:e1:83:7f:52:21:
3e:c6:7e:06:f8:ca:78:87:3f:b8:dc:29:70:a3:e9:
ff:f8:99:47:01:00:b4:6c:19:da:be:9b:4e:e8:4d:
85:45:69:a3:5b:e5:80:97:ca:95:8d:c6:e2:12:b3:
ff:dd:fb:df:45:a9:c9:2e:2c:8c:68:52:97:b0:4a:
ee:79:65:a1:73:8f:9b:08:5c:d0:8f:ec:81:4b:24:
33:75:95:5d:40:7b:ab:a9:c5:96:af:29:40:b2:b9:
4a:fe:18:7f:f6:15:55:16:e2:97:e1:45:2b:80:d9:
90:a7:46:a8:2f:d5:c0:d3:e1:b6:14:00:ba:bc:3d:
54:98:63:77:b4:6f:97:5e:5c:f5:60:be:0b:16:64:
68:80:ce:40:a0:84:fa:08:26:b3:84:2e:ec:e3:fa:
c1:df:16:ad:4b:0b:2c:0b:c0:6e:bf:79:9c:01:55:
ff:9f:a0:d4:eb:fc:4b:86:33:54:fe:a1:1e:0f:3d:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:26:2B:29:5F:4F:59:F5:BD:54:CC:2F:EB:D7:D4:6A:A2:C4:B8:BB
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/HiYrKV9PWfW9VMwv69fUaqLEuLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.125.0/24
Signature Algorithm: sha256WithRSAEncryption
69:93:4c:4a:d4:73:47:91:90:ef:d7:33:1f:a5:13:75:75:25:
52:01:47:6a:ea:fa:00:af:04:1b:66:39:fd:06:e4:b6:9c:5a:
58:97:a0:27:70:2e:e1:a9:14:27:93:78:ae:4f:86:4a:f0:ba:
07:7f:1d:fe:6a:e5:6d:6f:c1:db:21:6b:1d:c0:4f:af:2b:2b:
81:28:4b:05:59:3d:91:1a:47:62:89:37:90:fb:b1:bf:24:81:
c7:3c:4f:12:8f:86:64:ce:08:f3:03:d6:75:9f:38:0a:99:a3:
ce:c6:9c:e3:1c:1d:02:c5:9b:23:f7:37:1d:57:b7:f1:49:70:
85:f2:06:58:b9:ca:18:ff:c0:c1:c3:32:9b:7a:e3:b1:73:ce:
b3:e7:c4:76:04:83:74:c6:99:7e:97:4a:8e:02:b7:8a:a6:e0:
e1:07:91:8f:27:29:69:00:b9:f7:7b:68:9e:44:50:6f:a3:39:
9f:e7:a3:82:d7:6e:41:71:f2:5b:89:40:a2:b6:c1:c7:fb:6b:
65:a9:c3:03:f8:5e:bd:05:d6:f0:21:64:59:ee:26:28:b4:04:
30:f8:0b:eb:52:ab:41:49:e9:2e:92:80:50:75:28:49:80:2f:
01:e1:d2:2e:22:e2:21:f4:48:b7:02:93:6a:04:32:fb:33:8b:
fa:b8:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:47:55 2026 by rpki-client