Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HtEHmXnIhuT3vxinVu4aLPr0NH4.roa
File: HtEHmXnIhuT3vxinVu4aLPr0NH4.roa (raw, json)
Hash identifier: CfdKQeRepvQsEbdqVEV8ol1mKnVswtKV7Rb2ATxFnl8=
Subject key identifier: 1E:D1:07:99:79:C8:86:E4:F7:BF:18:A7:56:EE:1A:2C:FA:F4:34:7E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019DA97354C6CE90801AD9888B3EF3A4069F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HtEHmXnIhuT3vxinVu4aLPr0NH4.roa
Signing time: Mon 20 Apr 2026 05:53:20 +0000
ROA not before: Mon 20 Apr 2026 05:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401937
IP address blocks: 89.42.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:73:54:c6:ce:90:80:1a:d9:88:8b:3e:f3:a4:06:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 20 05:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ed1079979c886e4f7bf18a756ee1a2cfaf4347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:53:40:00:dd:d2:17:28:13:46:df:0e:7a:
60:86:af:0c:8d:a2:f6:e2:90:72:e6:53:f1:3f:7c:
74:0f:ad:78:36:53:e8:83:aa:79:16:73:9f:6e:81:
af:b3:63:0e:b1:95:13:37:37:c4:5a:64:54:a8:91:
5f:94:d4:ce:6e:cb:43:1f:eb:77:64:df:39:7c:c8:
1a:d2:31:ff:3c:11:9d:6f:60:3d:42:ac:0c:f2:19:
78:4f:3e:d6:71:a6:18:45:94:a6:f1:37:94:63:b4:
52:d6:36:16:5f:d2:58:b3:6f:d6:89:ee:db:8a:2d:
57:a2:bc:ff:cb:1b:8a:98:c8:88:6a:69:e4:a9:31:
25:23:cd:2c:20:93:80:39:7f:de:8e:87:fd:58:bd:
db:f8:e5:6d:53:2c:1d:c7:78:1e:9a:db:ef:84:5e:
13:6f:a6:8c:b7:a6:e1:e0:32:e3:88:52:8b:75:9f:
cb:b2:00:46:7e:c5:60:4c:5b:f0:91:ed:a6:ce:ff:
f5:13:6e:41:92:c6:c9:01:c4:13:c5:d2:ed:07:97:
ae:55:d4:17:53:25:94:04:9d:1e:c4:04:92:54:29:
bd:ef:97:9f:89:16:36:b5:a3:eb:2e:d6:29:c4:d0:
c3:91:24:4f:ed:04:39:b3:6f:0c:34:37:e9:53:34:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:07:99:79:C8:86:E4:F7:BF:18:A7:56:EE:1A:2C:FA:F4:34:7E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HtEHmXnIhuT3vxinVu4aLPr0NH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/24
Signature Algorithm: sha256WithRSAEncryption
59:27:d2:12:05:38:70:c1:35:51:6a:33:86:3c:29:2e:49:cc:
db:5d:fa:d9:3d:c6:c2:d0:e9:ab:ef:af:0a:5a:a7:b2:8a:72:
c9:68:aa:11:2d:3f:50:66:98:ee:8c:f7:93:93:f8:00:58:93:
cf:69:9c:f7:ee:90:82:aa:ec:47:ca:24:10:03:92:40:46:25:
56:3a:21:61:ed:18:14:f5:9a:99:7b:70:7e:5e:90:71:ff:5a:
bb:ae:b5:21:db:c2:b8:d6:27:de:a7:5d:b6:1c:b3:d1:94:14:
0f:89:74:82:68:c6:2c:4c:2a:cf:e4:a3:31:de:8f:f7:36:a8:
da:85:cf:91:ce:5a:75:8e:92:71:4e:52:22:b2:b4:31:ae:a1:
07:11:07:f4:67:ee:c5:5c:db:2c:1a:e0:6f:67:61:88:3f:09:
e7:79:c4:57:a8:95:ae:50:5e:28:93:5a:da:4d:7a:aa:07:ba:
d0:5b:b4:3c:b6:30:3d:3e:d7:aa:65:69:2f:a4:60:e0:e8:4f:
9f:e6:34:1b:4d:63:75:35:75:45:4f:c8:c1:81:2b:79:58:bb:
7e:2f:40:f9:00:2c:23:e6:23:47:df:f4:12:7c:6d:56:2f:47:
1b:29:ee:66:9a:12:9f:a9:a0:a8:2a:b5:2a:b7:05:99:30:64:
b7:8e:b6:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2pc1TGzpCAGtmIiz7zpAafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNDIwMDU1MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWQxMDc5OTc5Yzg4NmU0ZjdiZjE4YTc1NmVlMWEyY2ZhZjQzNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HZTQADd0hcoE0bfDnpghq8MjaL2
4pBy5lPxP3x0D614NlPog6p5FnOfboGvs2MOsZUTNzfEWmRUqJFflNTObstDH+t3
ZN85fMga0jH/PBGdb2A9QqwM8hl4Tz7WcaYYRZSm8TeUY7RS1jYWX9JYs2/Wie7b
ii1Xorz/yxuKmMiIamnkqTElI80sIJOAOX/ejof9WL3b+OVtUywdx3gemtvvhF4T
b6aMt6bh4DLjiFKLdZ/LsgBGfsVgTFvwke2mzv/1E25BksbJAcQTxdLtB5euVdQX
UyWUBJ0exASSVCm975efiRY2taPrLtYpxNDDkSRP7QQ5s28MNDfpUzRgIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB7RB5l5yIbk978Yp1buGiz69DR+MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvSHRFSG1YbklodVQzdnhpblZ1NGFMUHIwTkg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpQMA0G
CSqGSIb3DQEBCwUAA4IBAQBZJ9ISBThwwTVRajOGPCkuSczbXfrZPcbC0Omr768K
WqeyinLJaKoRLT9QZpjujPeTk/gAWJPPaZz37pCCquxHyiQQA5JARiVWOiFh7RgU
9ZqZe3B+XpBx/1q7rrUh28K41ifep122HLPRlBQPiXSCaMYsTCrP5KMx3o/3Nqja
hc+Rzlp1jpJxTlIisrQxrqEHEQf0Z+7FXNssGuBvZ2GIPwnnecRXqJWuUF4ok1ra
TXqqB7rQW7Q8tjA9PteqZWkvpGDg6E+f5jQbTWN1NXVFT8jBgSt5WLt+L0D5ACwj
5iNH3/QSfG1WL0cbKe5mmhKfqaCoKrUqtwWZMGS3jrZV
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:15:30 2026 by rpki-client