Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/HZKZt3i0tjhRATmGdiaaPS481ik.roa
File: HZKZt3i0tjhRATmGdiaaPS481ik.roa (raw, json)
Hash identifier: VGXONJbfgCWkz7Yv9blCEOKW4j+yHw/XZ24zEdm0ahs=
Subject key identifier: 1D:92:99:B7:78:B4:B6:38:51:01:39:86:76:26:9A:3D:2E:3C:D6:29
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 01A00485B90E1149685A96CD16121D7BE29C
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/HZKZt3i0tjhRATmGdiaaPS481ik.roa
Signing time: Sat 15 Aug 2026 08:24:27 +0000
ROA not before: Sat 15 Aug 2026 08:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.11.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:85:b9:0e:11:49:68:5a:96:cd:16:12:1d:7b:e2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Aug 15 08:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d9299b778b4b6385101398676269a3d2e3cd629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:71:8b:03:f8:8a:74:eb:c3:d3:b7:2e:22:
3f:ed:2f:ba:3a:b3:75:f9:a1:b5:62:af:2b:a6:90:
3e:da:7b:db:96:c6:5e:39:9e:e1:4e:1d:dd:9a:05:
75:34:0c:c6:09:37:41:db:ae:41:d5:9b:99:25:de:
c0:f3:6e:3b:1d:1e:18:3f:79:fd:2e:8a:b5:94:0c:
e2:01:a1:a5:f3:53:b5:de:4c:4b:06:6d:17:86:fa:
9f:1f:e0:0b:ad:34:bd:0d:d0:91:f4:2e:87:5d:84:
2b:6d:13:83:0c:2e:6c:16:61:58:3f:40:d3:fc:4d:
83:85:7a:61:ae:1d:c3:34:08:27:8b:04:92:bf:63:
be:2f:39:47:58:39:c2:eb:d9:7d:ec:78:08:d4:b5:
28:dd:56:71:05:f7:8e:3b:7d:aa:36:08:b0:7b:13:
e0:d6:a2:54:f8:71:fb:e6:36:c3:a6:eb:c0:a1:ee:
b2:d3:37:97:0d:42:32:2e:60:0e:ef:b1:dc:fe:2e:
35:7b:6d:ee:f6:0d:b9:31:5a:84:23:e4:e4:84:a8:
c8:65:1c:a6:5e:fa:4d:11:be:02:25:17:ff:f5:16:
f4:a6:3b:73:12:1b:53:04:f8:4d:58:ff:01:84:ba:
3d:8a:20:4c:19:fe:9b:3d:45:7b:70:a4:ff:c5:4e:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:99:B7:78:B4:B6:38:51:01:39:86:76:26:9A:3D:2E:3C:D6:29
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/HZKZt3i0tjhRATmGdiaaPS481ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.218.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1b:41:e9:5a:9a:bb:11:47:7a:af:fa:75:cb:e2:43:f3:03:
44:05:0e:95:04:1e:89:d3:b2:3a:ac:58:ed:14:95:2a:99:7a:
72:61:f6:df:a1:fb:cb:4e:5a:0a:9c:31:af:26:e0:30:48:b2:
62:a9:a7:05:78:ad:89:da:e7:bd:82:41:c6:55:9b:5a:17:8c:
07:d5:fe:15:88:27:22:7c:cf:e2:20:d0:16:f4:13:9d:de:25:
3b:ea:8e:6d:2b:66:96:3d:06:81:11:bf:fb:7f:c6:f7:01:d7:
6e:52:66:06:4d:23:c3:04:ef:6d:bb:1b:33:78:11:cf:e1:cb:
93:1d:0e:38:d2:78:2a:cc:b2:1a:25:03:7f:71:c9:d7:f6:74:
65:25:73:2a:84:e4:33:ba:7e:de:c5:31:ed:84:76:87:22:63:
20:f2:ad:9f:02:ba:8f:d7:1a:14:30:9d:af:49:d3:5c:70:b6:
23:00:41:9b:5a:21:74:15:4c:5c:77:38:40:80:48:0f:54:66:
dc:c5:90:02:3f:d9:3f:58:a4:b3:25:e1:ef:84:0c:d3:55:e0:
86:a3:93:53:59:e9:d7:f2:e0:17:66:1b:c2:9a:b6:0c:2e:b8:
b3:d3:16:c9:ad:6e:a9:c3:02:4d:cd:93:b3:4b:5c:55:7d:1c:
c0:6b:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:34:49 2026 by rpki-client