Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/H0lpoysU0YGH94djSvFxKyePA5M.roa
File: H0lpoysU0YGH94djSvFxKyePA5M.roa (raw, json)
Hash identifier: zJQXDRuXn6n9pBy4PVgbOCRXOyBiS23mKSUawMbQtI8=
Subject key identifier: 1F:49:69:A3:2B:14:D1:81:87:F7:87:63:4A:F1:71:2B:27:8F:03:93
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019FE7DD0CB79DE0AF19FEE9292B29B1A063
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/H0lpoysU0YGH94djSvFxKyePA5M.roa
Signing time: Sun 09 Aug 2026 18:50:51 +0000
ROA not before: Sun 09 Aug 2026 18:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a10:fa86:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:dd:0c:b7:9d:e0:af:19:fe:e9:29:2b:29:b1:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 9 18:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f4969a32b14d18187f787634af1712b278f0393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:c5:6a:6f:0e:53:e1:10:fe:fa:f2:12:e5:
38:bc:49:e6:5f:4b:c2:28:93:df:b8:ad:86:92:e3:
dd:fd:22:f0:c4:7e:6a:09:55:ff:3c:1b:40:bb:14:
c5:e3:74:fc:13:05:5e:dd:fa:67:bd:53:b1:79:8a:
1b:ba:c3:61:6a:2c:00:e6:fe:0a:0d:a0:80:55:37:
95:e5:55:5c:27:c9:d6:ac:da:ee:11:ce:07:88:3d:
8e:86:85:73:f9:16:a9:cf:fa:ac:cb:12:f1:ea:f7:
ae:6e:b9:58:b8:ba:2d:68:86:39:ff:46:cd:e8:52:
d7:d5:a4:c8:85:7d:c4:50:ff:cd:c6:f3:fc:9a:94:
9d:39:99:92:3e:12:2e:54:bf:03:94:38:4f:b1:24:
5d:87:fd:5b:a0:2c:a1:a8:23:37:65:a0:a5:2a:b7:
a2:c4:a6:aa:e5:fe:38:7b:15:57:de:dd:f2:fc:21:
91:01:86:b1:10:48:fc:c7:dc:d2:7e:10:ca:c3:33:
6a:ec:99:bd:bd:70:bc:6b:fc:45:d7:c0:c6:5c:5b:
6d:c7:d8:c8:35:ab:fe:d9:c8:51:eb:1c:dd:4a:ce:
d8:84:ac:35:82:65:86:1f:2b:d0:0f:34:68:10:60:
66:89:6d:f0:8c:77:2e:b4:41:18:12:ee:a0:b2:86:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:69:A3:2B:14:D1:81:87:F7:87:63:4A:F1:71:2B:27:8F:03:93
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/H0lpoysU0YGH94djSvFxKyePA5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa86:3000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:af:f2:78:70:f4:2e:7c:9f:9e:3a:b1:d0:15:b2:00:2f:9b:
cb:a7:7c:c5:11:d8:2b:f7:f2:ee:5a:c1:76:20:b2:11:63:42:
eb:4b:99:e2:43:93:0b:0b:5b:f4:4e:d1:4d:05:63:46:53:4c:
af:e3:9e:e3:c6:cc:86:52:b7:2f:eb:0b:8d:e1:70:a4:40:06:
20:50:22:64:36:cf:24:db:98:27:40:0d:53:84:aa:8e:b2:d8:
20:0b:ec:9b:be:3d:3d:87:aa:14:38:1f:f4:d1:43:7b:2c:06:
e4:75:18:66:cd:55:02:c5:c4:c2:be:8a:8a:2d:d9:ac:27:21:
ec:45:37:0e:d2:8e:ae:83:54:f2:33:cc:69:3f:56:a7:e7:22:
31:d2:7c:95:2c:90:55:45:7c:f5:c6:b2:19:d1:71:72:49:eb:
e8:d4:78:48:20:20:ff:75:42:58:29:52:97:35:b4:63:ae:3a:
4b:71:97:6b:cb:49:42:30:c1:95:6d:a5:9f:83:e3:73:17:a9:
d6:d4:c4:11:43:fb:14:17:62:01:92:b6:36:29:62:31:4a:0e:
2b:33:5a:46:2c:b5:3e:1a:9d:3b:3b:c8:ea:70:53:16:89:d0:
6d:70:39:0d:a7:ca:75:32:1f:02:cf:98:cb:67:3c:59:07:65:
1e:06:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:13:10 2026 by rpki-client