Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa
File: Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa (raw, json)
Hash identifier: qxptTNT2o/4UgSRP/kpcf65j1wxXKH/EWbmmjxAt01o=
Subject key identifier: 1E:CE:75:C2:AD:BF:48:84:09:D6:77:6C:D6:E8:7C:17:A0:F1:DE:29
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019E4532C9C66D7A634AD9C672A58EE7AB94
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa
Signing time: Wed 20 May 2026 11:43:36 +0000
ROA not before: Wed 20 May 2026 11:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203545
IP address blocks: 185.73.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:32:c9:c6:6d:7a:63:4a:d9:c6:72:a5:8e:e7:ab:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: May 20 11:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ece75c2adbf488409d6776cd6e87c17a0f1de29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:ae:4e:47:ff:5d:b4:27:dd:0d:6c:25:39:
36:95:67:9f:c3:71:8d:aa:a2:17:b4:bb:ce:da:fb:
3c:91:90:7d:37:ce:14:40:e5:c1:99:b7:2a:2e:e9:
1f:e7:93:23:9e:9b:67:c0:4d:c5:2d:3c:76:cc:c9:
af:81:69:cc:00:46:99:c9:e3:0b:ac:fd:14:2b:98:
d5:4e:13:3e:16:09:8d:e9:ac:74:22:8f:f3:f7:8b:
73:4f:ae:87:b0:1f:5a:64:c1:ea:54:7a:9f:92:1b:
6a:30:0a:2a:d8:e0:c7:38:04:09:91:ed:bc:ba:26:
dc:95:dc:9f:53:41:e4:5a:b5:f2:05:ae:64:05:80:
94:8c:61:6d:5d:d2:23:8e:07:c6:b1:10:ef:3a:ce:
74:03:0f:3d:8c:05:52:15:2a:87:87:c8:5b:57:19:
b7:ac:6d:fe:e3:20:40:65:c7:4a:4c:84:1c:91:51:
91:f3:bc:88:7f:37:60:c6:3d:4b:5b:1e:c6:3f:85:
7c:8f:40:59:2a:aa:7e:c1:21:76:26:b6:cf:89:75:
0b:e2:2b:69:3d:28:39:cf:4d:49:32:96:f0:99:a3:
27:b0:13:ea:1f:1e:9e:0c:2f:29:53:9a:10:c6:cc:
cf:a0:a0:d8:5c:b5:02:6a:4c:fe:69:a4:f5:9f:15:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:75:C2:AD:BF:48:84:09:D6:77:6C:D6:E8:7C:17:A0:F1:DE:29
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.125.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:60:76:24:7d:76:90:b3:75:c4:72:39:43:36:7b:85:67:09:
d6:80:ff:7c:70:a5:d3:65:d9:6a:36:2d:48:74:fd:22:e5:8c:
21:ab:24:9b:62:70:aa:fd:db:4b:05:e4:cc:77:36:f0:d8:d0:
0f:35:de:6b:e2:9d:c6:1b:14:74:7a:43:8f:63:ce:92:c9:d9:
f7:64:fa:5c:11:21:b0:a3:74:6b:f7:f6:6d:78:32:cd:dd:db:
81:1d:66:18:04:aa:ac:16:d0:36:a0:6d:2b:23:f4:41:49:6d:
9a:66:5e:7f:dd:44:e6:18:29:06:e7:81:e1:98:f1:6d:67:8e:
20:de:2e:c4:11:3c:a1:22:e8:f8:88:89:c2:99:70:1a:c2:a6:
11:fe:95:5f:f7:0f:f3:38:74:d5:d6:ef:4b:18:65:97:f2:fb:
12:95:d8:80:1c:ba:04:8e:67:99:30:3e:f0:74:c7:32:c1:1b:
db:a5:8a:f8:91:92:5c:98:43:f1:74:9a:af:7c:bd:bc:63:c4:
3c:6f:a2:63:5f:d5:73:e4:f0:a7:7c:68:51:a8:f9:b1:6e:1a:
fd:ee:fe:3a:a2:cf:f3:ea:74:31:cc:56:c7:2d:a9:b6:a5:81:
ac:25:ff:c3:a9:74:93:3f:b6:f6:56:2e:71:d2:84:a8:e0:eb:
96:ca:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:48:08 2026 by rpki-client