Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa
File: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (raw, json)
Hash identifier: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=
Subject key identifier: 1C:0B:7F:FE:FA:F0:E7:65:6E:66:4A:4F:0C:68:72:27:54:AA:AB:A5
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691BD61229E693379FC9D65C389705
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15395
IP address blocks: 193.138.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1b:d6:12:29:e6:93:37:9f:c9:d6:5c:38:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c0b7ffefaf0e7656e664a4f0c68722754aaaba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:96:a6:2f:ba:48:fc:07:fe:19:88:a6:86:
7c:59:fe:aa:63:dd:07:73:fb:20:3e:32:b6:ac:2c:
1c:79:48:09:ce:b4:85:4b:0e:ec:7d:c7:ec:d6:5a:
8e:16:1f:6b:c8:0e:99:1c:cf:16:16:e5:37:a5:28:
16:c3:40:f0:6c:db:d4:2f:e8:3f:a1:79:f8:ea:5d:
46:c6:9c:3a:69:ec:b3:8a:7c:98:95:3e:93:55:04:
ee:e5:5a:61:bc:0f:32:3f:bb:6e:23:24:be:43:3d:
76:b5:e1:46:11:88:66:38:51:c4:fa:99:9b:3b:f4:
33:e5:9a:3a:23:7f:47:b9:35:e0:3f:df:ff:10:86:
5d:51:d6:c8:f3:fb:da:d9:3c:20:20:62:5f:2e:fc:
9c:2d:e5:8d:e7:dc:8e:e9:1a:9f:57:60:80:88:46:
84:35:f8:e3:7c:b9:f3:ed:80:62:6d:7b:0a:ab:df:
17:11:8c:f9:5d:cb:f3:41:ed:42:8c:ab:83:1f:7d:
2d:fa:42:9c:8f:5a:ec:50:40:be:2b:47:64:db:43:
7a:1e:62:db:64:35:c4:64:9a:5f:4f:6d:05:c7:08:
af:0d:2d:cf:d0:78:8e:dc:cb:ae:7b:64:cf:0b:46:
af:76:8e:be:63:c6:99:a5:2a:ec:c3:0e:c9:e9:bf:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:7F:FE:FA:F0:E7:65:6E:66:4A:4F:0C:68:72:27:54:AA:AB:A5
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
97:36:da:63:c1:51:95:9e:b3:66:8b:41:8d:17:aa:e9:98:40:
33:c6:2e:d6:bd:0f:ca:6f:e8:77:e4:c2:49:6c:ab:75:5f:24:
6f:f4:56:2f:9c:63:b4:ff:16:e5:61:f8:d7:3a:41:c3:d4:a1:
1e:cf:89:9a:06:89:6b:c2:4c:33:fd:ba:e8:a7:62:e1:ee:39:
b8:ec:54:53:50:9f:8d:10:55:6d:68:b0:86:30:b4:35:cf:c1:
ad:0d:49:21:e2:2f:f3:64:d4:e6:15:45:a2:3e:92:0b:97:e0:
fe:1b:71:e2:81:58:da:af:71:bf:60:b2:5f:51:0f:58:25:fe:
3e:7c:d9:82:7a:44:cb:9e:a9:65:a5:08:00:f0:19:ed:22:93:
99:82:3d:01:96:98:6b:88:46:71:29:33:03:e8:65:32:9e:50:
62:94:9c:7c:c8:59:9b:29:0e:bc:dc:54:02:87:70:71:78:c7:
68:9c:6d:51:6e:88:74:63:31:97:41:a3:3d:97:ab:15:3e:30:
18:8e:fb:b1:2c:02:d1:1c:3e:cb:d9:79:1f:7d:2c:b1:f2:48:
f4:27:e2:8d:bb:b1:39:b1:70:05:a6:21:bc:35:63:e0:69:e4:
7b:8f:de:48:10:89:20:9a:fe:4b:65:a1:4d:7e:46:be:38:e8:
91:92:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:31 2026 by rpki-client