Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/HqnftrYyJ1yAgfQwEdd5tsHdCfE.roa
File: HqnftrYyJ1yAgfQwEdd5tsHdCfE.roa (raw, json)
Hash identifier: jbicct1WtkpH6m3I8jzSkrKJ8f1H+aOQwTwlTyII9Ss=
Subject key identifier: 1E:A9:DF:B6:B6:32:27:5C:80:81:F4:30:11:D7:79:B6:C1:DD:09:F1
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D10D380EEB3BE29691B13BC7A84D4BAFB
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/HqnftrYyJ1yAgfQwEdd5tsHdCfE.roa
Signing time: Sat 21 Mar 2026 14:36:29 +0000
ROA not before: Sat 21 Mar 2026 14:36:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 87.232.82.0/24 maxlen: 24
89.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:d3:80:ee:b3:be:29:69:1b:13:bc:7a:84:d4:ba:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 21 14:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ea9dfb6b632275c8081f43011d779b6c1dd09f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:f8:33:3f:25:d4:33:9e:31:db:d1:f6:8f:
73:f5:8a:25:ac:b1:f2:a0:b0:41:d8:0d:6b:ec:0b:
53:a9:99:0d:1f:aa:9d:09:e0:55:cf:7a:64:39:a0:
15:4c:4e:b7:75:7f:11:f3:33:9d:33:d6:6f:d3:9c:
6f:f5:c1:98:e6:ef:6c:77:ee:b6:c9:67:2c:a5:77:
de:93:53:c7:a2:14:2b:47:29:91:ff:7f:59:86:78:
14:33:a3:03:14:53:14:8d:5a:1d:78:00:88:02:39:
b6:4a:64:d4:ea:7c:b1:49:1d:e9:82:d0:dc:b5:e5:
1e:8f:df:24:17:15:92:4f:9f:41:8a:49:68:a1:1b:
d7:3e:cb:f2:90:31:6d:ed:e2:94:d8:ac:34:d2:ce:
7e:88:05:dc:be:68:b2:65:c4:8d:64:9d:92:68:fa:
35:8d:fa:63:b8:28:52:bc:0c:bc:8c:86:d1:b1:a8:
43:c0:a2:07:3e:41:63:64:13:a2:72:4d:f3:64:cd:
7f:c7:58:3a:4c:04:ca:cf:f5:3b:28:48:e6:f6:21:
99:33:bc:e4:c4:57:b3:71:51:aa:ae:a3:c9:8b:78:
3b:87:bd:66:64:bb:38:e8:c2:57:f9:bf:43:63:fb:
58:88:77:52:c6:cd:5c:0d:0e:b1:c8:f2:f6:a7:1c:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A9:DF:B6:B6:32:27:5C:80:81:F4:30:11:D7:79:B6:C1:DD:09:F1
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/HqnftrYyJ1yAgfQwEdd5tsHdCfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.82.0/24
89.126.226.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b4:62:e0:2f:8a:86:c6:73:c3:a7:29:4c:d0:3a:66:df:34:
19:9f:35:21:fa:15:1d:eb:51:02:fc:4d:23:1f:7a:47:0c:14:
a2:e0:e6:83:a9:b5:38:30:25:33:28:9a:2d:0e:2c:5d:da:41:
eb:fb:bb:12:ac:5f:5f:16:2a:c9:03:16:1b:8c:83:55:6f:1e:
b7:b8:c0:fe:05:97:58:71:4a:19:6c:a0:9d:c9:ac:c7:1c:47:
04:b8:00:7c:15:81:03:9a:5c:ef:df:29:18:95:3b:24:d0:d4:
bd:72:b6:2d:4e:aa:bd:fd:c3:6d:ce:38:11:5e:02:f5:81:b1:
f4:cb:8c:f3:f0:11:78:e6:5f:b4:10:cc:95:89:a7:85:12:7b:
b8:87:d0:52:eb:cf:c7:30:dc:43:41:4d:a7:a3:aa:dc:61:24:
cb:ea:e4:68:68:14:95:8f:78:7e:e7:b1:d2:48:36:01:77:fe:
f7:b4:07:02:44:c6:f5:19:64:fc:37:0f:fc:f5:f1:b9:8f:6a:
8c:75:43:49:c9:95:8f:d7:b0:49:a0:2d:c1:f3:ad:de:04:d3:
b5:9b:e1:42:f4:c9:8a:82:24:06:34:34:fa:41:eb:4c:b2:82:
ef:4a:0f:df:6f:fe:75:e4:fc:f3:39:b7:0b:c1:4d:08:b9:f4:
72:df:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:02:40 2026 by rpki-client