Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kHVXVhV-oDdMKrZ_tvvbXzZUuGs.roa
File: kHVXVhV-oDdMKrZ_tvvbXzZUuGs.roa (raw, json)
Hash identifier: AOdYhnaRy3xhsfOQ1QXZVlRft2TeKdQsihBblXVoCrw=
Subject key identifier: 90:75:57:56:15:7E:A0:37:4C:2A:B6:7F:B6:FB:DB:5F:36:54:B8:6B
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019EC9EE35105F79BDF9EA53045ED9F1C5AA
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kHVXVhV-oDdMKrZ_tvvbXzZUuGs.roa
Signing time: Mon 15 Jun 2026 06:18:12 +0000
ROA not before: Mon 15 Jun 2026 06:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203638
IP address blocks: 5.160.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:ee:35:10:5f:79:bd:f9:ea:53:04:5e:d9:f1:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jun 15 06:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90755756157ea0374c2ab67fb6fbdb5f3654b86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:65:00:88:00:2f:11:6e:73:2e:3c:c6:9b:
e0:17:17:82:ad:3f:6f:05:6d:3f:5b:58:29:5c:02:
b6:eb:17:3e:a3:df:70:19:75:5c:f2:41:51:d2:50:
48:e1:18:af:f0:24:51:bc:59:00:36:1f:94:51:f7:
40:61:d0:95:b2:24:d0:3c:91:6b:ff:11:94:46:59:
10:13:4e:e8:c3:87:c2:22:50:84:b3:99:2e:4e:07:
01:b2:40:82:97:cb:4e:f1:1b:0c:80:dc:69:c5:4f:
02:87:79:65:93:bc:66:48:1c:25:69:b5:27:d1:2e:
35:d7:04:ba:bc:5e:ec:7d:a3:c7:7c:9e:9b:e9:2e:
61:ed:ab:29:c0:aa:9f:21:10:99:57:6d:a0:28:06:
59:47:67:48:2d:98:05:69:63:d4:fc:fc:d2:3e:4f:
bd:f9:fb:a6:a3:9a:7b:eb:94:a8:14:72:ef:4a:40:
7c:ef:f4:c8:b5:7e:30:8f:f5:93:c6:ff:cc:8e:ba:
97:21:f6:d7:20:f5:e2:67:57:2e:5c:5d:aa:cc:b7:
d1:06:40:21:8a:b6:4b:92:67:54:87:0c:9b:46:06:
a1:22:ce:c6:d8:17:2d:9f:49:8a:f6:34:a1:c0:20:
cd:87:3f:1c:fb:35:2c:66:15:87:11:57:56:a0:08:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:57:56:15:7E:A0:37:4C:2A:B6:7F:B6:FB:DB:5F:36:54:B8:6B
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/kHVXVhV-oDdMKrZ_tvvbXzZUuGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.41.0/24
Signature Algorithm: sha256WithRSAEncryption
03:af:4e:00:83:40:53:8c:41:c0:47:1e:85:5f:6d:f6:67:74:
95:2e:28:70:4e:b0:f5:79:f1:fa:06:db:40:81:c7:f0:9e:2c:
72:be:aa:ef:86:72:37:4a:9d:37:14:34:2d:ad:00:a0:62:fd:
4b:1b:8f:95:55:e5:ec:87:c7:7c:ba:d8:66:51:93:e1:ca:9a:
23:3f:31:e1:a6:ae:8a:39:dc:67:71:df:5a:9a:9e:56:71:0f:
ae:fc:60:4d:e0:ca:33:2f:93:fb:33:92:33:80:95:e4:c0:33:
4c:f9:c9:92:ef:ef:ae:f6:25:71:4d:b2:6f:d1:2f:c6:cd:77:
cf:55:37:32:ca:4f:df:19:c1:70:27:f1:e9:e9:55:63:70:82:
c7:d0:02:b5:55:5e:64:80:16:83:18:56:2a:5b:43:04:c3:bf:
54:b5:36:fa:2d:83:9a:aa:f2:12:e4:6c:fa:d7:5e:3a:fa:aa:
54:13:50:99:b0:9d:63:2c:96:ab:1a:77:9d:61:b9:d1:b4:65:
f7:1d:88:31:9f:e0:54:c8:16:ce:6b:61:22:f6:f9:64:01:1a:
74:ad:7d:f4:bc:5d:b2:df:fa:ae:2c:3c:25:ef:ef:c3:41:e5:
ff:16:61:f2:b4:e0:13:ee:90:d8:34:e1:05:4b:4d:2c:d5:52:
66:e3:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:58:10 2026 by rpki-client