Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/HKHT4rK8NXEjroeeAx6RNHJmMQk.roa
File: HKHT4rK8NXEjroeeAx6RNHJmMQk.roa (raw, json)
Hash identifier: uC0JVJBqJcm8UsFvJRm1kD9odmzXPiQVWmAXerelwgs=
Subject key identifier: 1C:A1:D3:E2:B2:BC:35:71:23:AE:87:9E:03:1E:91:34:72:66:31:09
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 01A0F713B4D9451DBABCDA28F74C6E4DF75C
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/HKHT4rK8NXEjroeeAx6RNHJmMQk.roa
Signing time: Thu 01 Oct 2026 10:47:38 +0000
ROA not before: Thu 01 Oct 2026 10:47:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216024
IP address blocks: 188.124.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:13:b4:d9:45:1d:ba:bc:da:28:f7:4c:6e:4d:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Oct 1 10:47:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ca1d3e2b2bc357123ae879e031e913472663109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:f0:ab:00:05:24:ef:19:86:5d:69:b7:9b:
3a:13:10:36:6c:42:2b:bb:f5:01:33:b2:e0:87:1b:
19:14:e3:e5:c7:7f:3a:de:e5:92:a3:a4:a1:74:89:
c5:3f:8f:c5:4b:af:54:e6:f4:92:13:b6:74:90:3f:
8e:b3:dc:c9:e2:77:e8:61:c0:31:d1:db:95:4f:ff:
fc:99:3f:59:4d:25:ff:3b:c2:e7:db:78:bb:a9:1d:
5f:a1:14:5e:c1:97:b3:b5:96:e4:13:f2:ac:0d:5e:
6b:16:57:47:c6:84:44:79:0c:f6:fc:08:3e:c9:8f:
17:75:23:75:8a:97:72:24:9b:ea:eb:1b:b3:54:48:
10:13:eb:6c:bc:a2:47:20:61:e1:2f:98:ea:17:f1:
a1:52:c7:d8:73:c4:02:0e:8d:a4:14:d5:99:8f:b7:
d8:a3:3b:fc:cd:07:3d:df:9a:a0:c5:ad:43:0a:f2:
1f:41:e6:32:d7:e6:b2:3b:f5:3b:1f:61:88:aa:52:
72:18:8c:05:81:78:20:a0:13:df:50:ea:24:46:4b:
8b:66:d3:2c:fc:14:4a:a7:46:aa:f1:e6:a4:ba:a6:
2b:b9:f8:03:89:6e:27:8d:49:d8:3f:e9:60:63:08:
20:d0:5e:79:6f:12:50:8c:1d:86:93:34:56:04:20:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A1:D3:E2:B2:BC:35:71:23:AE:87:9E:03:1E:91:34:72:66:31:09
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/HKHT4rK8NXEjroeeAx6RNHJmMQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.59.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f7:25:6f:08:59:92:77:29:35:5e:ba:e0:8e:db:7d:55:da:
e5:9c:a9:17:b2:8c:84:f1:59:5c:bb:f3:39:cb:7a:47:5c:c0:
f2:91:ae:5c:95:d9:f3:f5:2c:61:66:73:3e:57:09:7c:dc:fd:
ea:6e:79:db:44:a5:db:56:8d:01:74:12:73:ff:48:99:e5:fa:
f2:a9:22:00:09:52:a6:cb:3a:b8:e9:d6:9a:c2:0c:68:bc:34:
d1:31:e9:36:8c:0c:78:79:13:2f:d4:d3:bc:61:78:6e:63:4a:
27:e2:f1:6e:2a:49:69:0d:35:4b:f7:8f:bf:d4:b9:fd:be:6e:
b1:94:93:aa:34:3a:ac:fd:fb:e7:25:34:0c:8d:7c:cf:08:c8:
7e:f6:6b:e0:53:73:58:46:24:de:a8:37:b8:e1:62:00:f1:67:
9d:cb:e4:aa:01:9f:04:34:2b:b0:a4:1e:63:57:d0:47:38:a0:
e5:ca:9f:1c:90:5c:7f:63:1a:c1:91:14:4f:22:3e:86:72:07:
31:7b:3b:1a:86:28:48:1f:c7:4f:37:87:4c:12:86:e2:ff:4d:
bc:91:14:b2:ba:48:b4:99:23:ef:98:f6:cf:af:1f:8b:33:6c:
e2:2d:e5:d4:e6:23:51:b5:09:ea:36:23:8b:92:ed:5b:44:4f:
74:09:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:05 2026 by rpki-client