Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HoJn2zB_s2Ok64zl5_FXL6_Srtk.roa
File: HoJn2zB_s2Ok64zl5_FXL6_Srtk.roa (raw, json)
Hash identifier: m1pHoLysIw8FecKmMesLA2SHoqdj8aOcoENVtRvJDBI=
Subject key identifier: 1E:82:67:DB:30:7F:B3:63:A4:EB:8C:E5:E7:F1:57:2F:AF:D2:AE:D9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A12C89DFBB7FFC8AE62461D9D0C315B39D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HoJn2zB_s2Ok64zl5_FXL6_Srtk.roa
Signing time: Sun 11 Oct 2026 19:56:35 +0000
ROA not before: Sun 11 Oct 2026 19:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 45.90.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:89:df:bb:7f:fc:8a:e6:24:61:d9:d0:c3:15:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 19:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e8267db307fb363a4eb8ce5e7f1572fafd2aed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:cd:3f:1d:e7:21:a6:3d:10:e1:32:bf:36:
71:57:1c:46:4a:33:c7:02:98:ab:45:28:7e:22:1b:
bc:65:a1:46:64:9c:3a:2d:cd:5c:3f:4f:37:c9:4a:
41:26:44:c2:b8:1e:4a:b4:1b:4c:05:9f:f5:72:28:
5b:86:86:f9:9e:95:4b:f1:eb:3a:ee:b4:d0:f4:45:
cf:f6:f5:4b:56:7c:0e:76:be:a4:03:b9:f6:28:4a:
b9:d6:42:fd:13:c2:8c:4b:32:fd:aa:a4:d6:e4:2e:
6d:f8:0f:27:99:f2:84:8c:b8:bd:37:be:7e:36:7b:
3a:49:52:bd:99:03:5a:97:dd:cb:0c:94:79:e3:22:
c4:4d:79:b2:ef:e7:f5:8d:b2:d2:b9:6a:ee:8b:a9:
ad:26:63:bf:bc:52:85:b5:83:67:86:85:5a:38:d1:
f1:95:e6:ce:ab:3c:19:b3:d0:28:ec:58:08:f4:a5:
57:52:0c:2a:f9:d0:c6:1e:d7:9a:4b:e9:3f:d4:1e:
4e:ab:75:74:3a:d7:e8:c2:8a:47:5d:63:32:87:7d:
dc:46:5d:f5:65:5c:61:f4:30:9d:9a:5b:3d:4a:35:
cb:68:bd:88:f0:bc:ce:ed:d4:dc:8c:7a:e3:4b:11:
de:b3:13:f7:63:93:3e:7e:3e:e4:10:07:6c:35:31:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:82:67:DB:30:7F:B3:63:A4:EB:8C:E5:E7:F1:57:2F:AF:D2:AE:D9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HoJn2zB_s2Ok64zl5_FXL6_Srtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
15:16:1c:dd:ac:64:4e:c2:f9:d6:fb:72:bc:ad:8a:59:01:6c:
ee:33:c7:6f:3f:29:27:9d:26:dd:dd:a1:31:3f:43:76:b0:a3:
72:25:29:f7:3d:41:38:db:a0:25:30:3b:85:6c:0d:7f:66:39:
8d:a9:91:78:45:e2:e4:06:5d:33:5b:ee:f7:9c:3a:98:d8:bb:
90:f3:38:e6:cb:cc:04:6c:18:fc:d7:4c:87:21:34:df:da:32:
df:3b:3f:1e:f4:c8:5a:da:30:e7:4c:9d:15:99:6d:ee:9d:ae:
0f:bd:5a:6c:04:c4:49:82:d9:f6:1a:65:cf:e9:cb:6a:f5:16:
77:f0:05:37:ef:30:3a:42:db:df:54:af:f3:fa:60:e3:af:48:
01:98:c0:5b:a8:c6:8e:fc:7f:91:63:4b:88:46:28:14:2f:64:
d9:66:0c:ce:db:3f:56:e0:6f:91:9f:2a:1d:01:e2:71:4c:4f:
ba:88:b1:e9:f9:62:f1:85:ea:90:57:d9:d9:e3:dc:1b:59:e0:
08:ee:b1:c0:ba:b8:bd:f1:62:a6:ee:2d:97:95:41:cb:4d:89:
6d:7f:24:c9:4a:40:b2:55:c6:47:b4:12:bd:05:e6:d0:c1:2b:
b8:a4:08:8b:70:f7:53:fb:95:f7:08:1e:f6:b5:bc:83:ed:a5:
9e:2d:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:43 2026 by rpki-client