Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/HVlWlVCtHJkHXU7m7ctBNao19IY.roa
File: HVlWlVCtHJkHXU7m7ctBNao19IY.roa (raw, json)
Hash identifier: MMNvWbZm/oY3pLd0tkVHwkbv4AyKlSoDKH7h4UkUpas=
Subject key identifier: 1D:59:56:95:50:AD:1C:99:07:5D:4E:E6:ED:CB:41:35:AA:35:F4:86
Certificate issuer: /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial: 01A07B49AA22E96FE001A4902196B425C726
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/HVlWlVCtHJkHXU7m7ctBNao19IY.roa
Signing time: Mon 07 Sep 2026 09:53:40 +0000
ROA not before: Mon 07 Sep 2026 09:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 5.254.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 12:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:49:aa:22:e9:6f:e0:01:a4:90:21:96:b4:25:c7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Validity
Not Before: Sep 7 09:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d59569550ad1c99075d4ee6edcb4135aa35f486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:bf:c6:25:d2:da:47:17:0e:f0:ec:0e:83:
01:5f:f7:f0:74:76:20:fc:d6:7b:92:ff:49:94:ff:
87:54:54:43:7b:82:35:74:6c:3b:67:d2:61:16:95:
02:a6:4d:90:66:91:d3:ee:2c:fa:1b:f0:ac:88:00:
a4:ff:2b:1f:48:1c:43:f9:dc:1c:cf:3d:89:70:d3:
64:ea:ab:b9:1e:3a:d1:ea:5b:86:72:12:3d:29:7b:
0e:40:ae:17:36:9c:37:2b:c9:44:e6:58:34:b7:ab:
26:87:78:34:8f:1a:b1:45:0f:e7:31:fa:98:f4:61:
a5:1f:42:12:c9:f2:cd:d7:c5:c3:98:1f:8f:10:29:
25:86:2b:c9:fb:20:e8:c6:66:a5:72:03:20:51:ff:
ad:25:59:97:47:1b:51:33:86:ed:b9:b1:9d:6b:85:
50:a9:22:cc:48:aa:00:e8:ea:5b:98:ab:17:fd:31:
46:0a:43:16:5d:3f:2e:db:8f:9e:93:4c:a3:54:aa:
ce:9f:83:ed:10:2c:4d:df:da:c0:61:6a:51:6b:5d:
e0:7e:54:7e:87:a5:00:d5:1c:e3:d4:b1:68:34:a2:
aa:f6:68:0b:b1:ce:79:05:8e:45:c7:9d:42:b6:6b:
cd:27:dc:69:1d:e4:b4:b1:9c:31:b4:71:b4:de:02:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:56:95:50:AD:1C:99:07:5D:4E:E6:ED:CB:41:35:AA:35:F4:86
X509v3 Authority Key Identifier:
keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/HVlWlVCtHJkHXU7m7ctBNao19IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.166.0/24
Signature Algorithm: sha256WithRSAEncryption
05:01:fc:87:88:d4:de:49:29:41:c9:e6:89:31:76:ee:35:9d:
9a:ed:53:0e:89:dd:65:25:a1:1e:12:f2:35:7b:d5:2d:c4:ba:
e3:22:2d:27:f6:30:b1:66:7b:a4:a9:77:05:a2:6e:17:b1:37:
55:24:0b:f1:c1:92:ec:41:93:60:1a:51:f8:66:ca:42:e3:43:
ba:9c:40:94:b7:07:fb:a0:a0:77:f5:7f:5e:9c:be:ee:ea:25:
ed:9a:25:06:12:90:34:d3:f3:80:51:bd:95:ea:ba:28:87:6f:
a9:7f:ca:8a:0d:33:ee:92:93:35:c9:f8:0f:9e:61:cf:43:0e:
be:88:47:69:05:f4:6a:85:eb:21:4b:b1:8d:f7:53:e7:01:5a:
32:47:e4:4b:fb:b3:99:1d:5f:ac:6e:d5:06:5f:d3:bd:a9:80:
95:ac:43:9d:6c:22:b6:d6:96:ab:07:0c:5b:57:e2:55:b8:1e:
9f:b4:04:bd:17:de:50:a0:c1:02:96:55:88:20:8a:0c:ad:01:
08:85:c2:ae:49:83:49:5b:17:42:c0:ab:3f:c1:00:7b:50:64:
cf:83:4f:c0:bb:33:68:2e:15:68:bd:a1:df:8f:f1:b7:df:24:
a3:c7:cb:f6:56:13:2b:58:1a:fa:bc:9f:6e:cb:92:06:f6:4d:
97:9b:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 19:46:51 2026 by rpki-client