Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HlvYVegRJVGcXfzXBQ717_NU0JI.roa
File: HlvYVegRJVGcXfzXBQ717_NU0JI.roa (raw, json)
Hash identifier: XmK97MZKrh3Rb6rRXog3B4sQUY8RpZIptvYFxsi6KII=
Subject key identifier: 1E:5B:D8:55:E8:11:25:51:9C:5D:FC:D7:05:0E:F5:EF:F3:54:D0:92
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0CB9E2B11729277F9964CBBBEE8456FC3
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HlvYVegRJVGcXfzXBQ717_NU0JI.roa
Signing time: Wed 23 Sep 2026 00:15:35 +0000
ROA not before: Wed 23 Sep 2026 00:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197871
IP address blocks: 2a10:fa80::/48 maxlen: 48
2a10:fa80:1::/48 maxlen: 48
2a10:fa80:130::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:9e:2b:11:72:92:77:f9:96:4c:bb:be:e8:45:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 23 00:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e5bd855e81125519c5dfcd7050ef5eff354d092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:a8:51:2a:d8:3b:1b:78:d1:34:c7:f0:16:
95:c6:a2:87:48:a9:32:a2:a2:75:25:b6:67:31:fa:
75:c3:6a:65:5c:10:18:a1:8f:93:97:ec:e3:5b:07:
1d:af:e3:1e:aa:51:ae:53:6e:70:4b:20:38:a2:96:
33:c3:08:3c:30:74:7a:13:8b:fb:c2:92:de:0d:41:
af:eb:c6:af:89:de:b6:c4:22:a5:43:65:1f:11:0e:
be:d4:db:b5:ef:0a:84:5a:9c:9c:34:f3:b4:14:74:
68:f1:99:f5:c4:72:2b:e6:33:96:26:ff:9b:2b:75:
0d:cb:ad:44:85:fa:24:19:ad:28:dc:a3:ba:88:7a:
e0:cc:a5:72:8a:83:e7:7d:c6:a5:93:9d:1c:f0:15:
64:72:b1:59:3c:d0:fa:0d:6d:04:c7:a8:52:c5:f2:
2f:ae:17:27:30:e0:13:44:ff:ec:fe:ec:ac:bf:73:
ab:fb:52:27:1d:a1:96:57:a1:e3:7c:a7:48:04:75:
eb:44:f0:2d:1c:e3:93:31:be:2c:ab:4a:74:9e:78:
c6:4f:15:ea:e1:02:3a:47:6e:54:ee:f3:c5:c3:72:
16:d8:76:89:69:6c:63:cc:6d:57:62:97:09:eb:4c:
65:5b:21:f9:a8:c2:75:f9:21:c1:d4:b5:1b:4f:4e:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:D8:55:E8:11:25:51:9C:5D:FC:D7:05:0E:F5:EF:F3:54:D0:92
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HlvYVegRJVGcXfzXBQ717_NU0JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80::/47
2a10:fa80:130::/48
Signature Algorithm: sha256WithRSAEncryption
45:b6:98:ea:b5:6c:fc:77:91:e7:8d:dc:85:23:db:e1:34:9b:
86:2c:71:9f:93:3a:c0:76:80:10:2e:53:a5:82:24:32:ac:84:
06:28:14:39:de:d3:be:e8:56:61:34:31:5a:03:10:e2:16:9d:
24:86:b1:9a:0d:a2:1b:9a:7c:5b:e3:2d:bd:b5:04:54:d4:43:
c7:63:dc:79:72:c2:e9:be:0c:b6:f5:7f:02:87:31:6c:b1:37:
19:a8:7d:fe:6d:35:00:35:97:dc:b7:fd:1f:2e:61:36:d7:6d:
03:2a:47:95:85:64:44:ad:57:fa:35:01:14:e6:8d:fc:21:e0:
2e:65:e1:c7:5a:95:aa:5d:98:97:72:2f:5a:14:c3:b5:88:f0:
0c:1c:a9:f3:82:6e:f4:2c:29:de:27:70:42:0a:d8:55:06:f4:
4a:13:b6:f1:d2:25:cf:e6:fd:6a:c9:06:0c:57:01:14:ba:02:
09:a5:e7:87:4e:4d:3f:fb:34:cd:75:ab:97:6e:16:bd:ab:23:
8e:93:ec:d8:53:07:4d:93:ac:49:95:f8:48:4e:78:bc:63:0f:
67:9f:b7:03:1e:9a:85:ad:f6:24:b8:79:38:1f:04:88:0c:26:
8d:bc:69:f8:1c:75:ad:39:d2:92:a0:ba:87:43:84:82:24:9a:
00:7f:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:09:13 2026 by rpki-client