Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HoKjV_CsZjswKT90n0Sbj71fbmc.roa
File: HoKjV_CsZjswKT90n0Sbj71fbmc.roa (raw, json)
Hash identifier: uWsFASaQTDGgYVwpB5DSGoZzF57ocKbJYTEelrFXBLM=
Subject key identifier: 1E:82:A3:57:F0:AC:66:3B:30:29:3F:74:9F:44:9B:8F:BD:5F:6E:67
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F17DD927C572C10DFEF7A56B2123D8965
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HoKjV_CsZjswKT90n0Sbj71fbmc.roa
Signing time: Tue 30 Jun 2026 09:30:24 +0000
ROA not before: Tue 30 Jun 2026 09:30:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26666
IP address blocks: 2a10:fa81:e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:dd:92:7c:57:2c:10:df:ef:7a:56:b2:12:3d:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 30 09:30:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e82a357f0ac663b30293f749f449b8fbd5f6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:d4:b7:16:8f:70:18:5d:ed:3f:27:22:4b:
dd:67:63:20:63:35:eb:ee:09:0e:d3:08:54:a2:74:
b2:6f:70:70:4e:7c:5b:d5:74:4b:e1:c5:a2:17:be:
c2:3f:7b:a1:f8:2e:76:c9:c6:e3:4d:f9:df:25:8b:
4e:13:78:5d:87:ef:5e:c5:44:0b:fa:e2:68:05:a0:
0a:fb:5b:44:ed:ab:50:55:83:cf:9f:c6:07:6e:e0:
54:44:8e:dd:ae:f6:82:45:d5:bb:d9:ae:3a:b8:11:
ba:f7:13:75:ae:08:09:f8:ee:a6:8f:84:9c:1b:78:
ee:75:af:9c:5e:c7:e2:04:ed:5a:86:c2:6b:e2:ee:
fe:f2:c3:af:3f:df:03:c6:84:09:71:64:57:77:6f:
4a:3f:49:01:a6:91:bf:7c:37:80:4b:5e:73:a2:10:
65:7a:de:a4:c7:79:22:d2:9f:1b:a7:1d:da:48:49:
56:eb:f9:f4:ad:f4:88:24:85:4c:8c:1e:ea:1c:9e:
ef:3d:d3:c0:55:5c:23:27:45:51:c0:62:e0:90:96:
fb:36:80:ad:de:29:14:5e:d2:d6:35:13:ea:ca:93:
14:c8:30:2a:c6:4a:bd:de:7d:e4:db:43:84:bf:5d:
d7:f8:76:a3:41:f9:b4:3e:7e:29:05:75:30:21:c4:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:82:A3:57:F0:AC:66:3B:30:29:3F:74:9F:44:9B:8F:BD:5F:6E:67
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HoKjV_CsZjswKT90n0Sbj71fbmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:e00::/40
Signature Algorithm: sha256WithRSAEncryption
07:b8:72:83:54:88:6a:1a:80:75:87:8d:52:a1:cd:1f:7c:c4:
13:34:96:89:b0:6c:46:63:5c:20:23:24:1e:06:cf:f5:b2:2b:
e9:4e:00:22:2b:ec:06:f3:fb:29:a8:5a:5c:27:6a:68:6c:30:
d0:1b:0b:3c:0b:c1:2a:1e:3e:6f:f6:00:fb:3c:9c:0b:af:fa:
ab:70:72:e6:ed:e6:dc:7b:b7:e6:7a:15:0c:de:e4:4c:f0:23:
43:2a:03:7e:ea:3d:58:25:c2:52:f3:60:b7:75:13:a7:9b:8a:
82:56:39:da:94:1b:2e:d5:f6:ea:83:2a:bc:6c:05:68:27:0c:
51:c8:a2:40:1e:89:9c:f4:b9:36:08:c1:09:32:84:20:47:47:
9a:57:de:d1:b3:bb:ed:19:42:b5:2d:de:3e:74:3d:6a:26:41:
15:2d:98:c5:a6:21:b5:0d:d5:24:7a:96:a2:0d:cf:aa:80:a4:
5e:eb:1c:08:4f:2e:06:10:18:3c:55:f3:89:4e:26:24:67:75:
6c:89:3c:71:85:91:0c:3e:f4:9d:85:9a:7b:ee:02:7b:84:c1:
c0:bc:cb:f1:56:d9:fc:23:c7:41:2e:2a:56:a6:4b:0b:44:e2:
6e:55:70:9e:5a:3d:d6:18:41:7c:94:06:7f:cb:66:81:33:d6:
76:b8:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:36:34 2026 by rpki-client