Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HY438S56NJo7jnpyMDIqB6pm114.roa
File: HY438S56NJo7jnpyMDIqB6pm114.roa (raw, json)
Hash identifier: HNkuzKEBNuYMXckbNBvuPho2yIIGarJpOf9USFXOCns=
Subject key identifier: 1D:8E:37:F1:2E:7A:34:9A:3B:8E:7A:72:30:32:2A:07:AA:66:D7:5E
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A1694C5A77F54FE51860618CD5E912E4A3
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HY438S56NJo7jnpyMDIqB6pm114.roa
Signing time: Fri 23 Oct 2026 15:06:13 +0000
ROA not before: Fri 23 Oct 2026 15:06:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 194.152.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:4c:5a:77:f5:4f:e5:18:60:61:8c:d5:e9:12:e4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 23 15:06:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d8e37f12e7a349a3b8e7a7230322a07aa66d75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:54:3c:e2:7a:43:2a:10:c1:a0:5d:df:45:
fd:c7:08:cb:88:6d:84:0d:e7:7e:3e:d6:be:fc:28:
3e:37:2f:5a:e6:51:c7:3e:03:d5:ea:14:9d:ac:c6:
ca:14:9f:ea:c0:6d:96:a6:a2:88:a1:44:59:55:af:
aa:7d:3d:f0:a2:5a:03:1f:b6:a1:9e:17:5e:01:72:
b4:bc:05:ae:f7:19:5e:68:32:82:86:bd:26:c0:a8:
aa:6e:36:e8:83:c0:ba:3c:ca:5c:97:6d:5b:83:c5:
52:59:20:ef:45:aa:bc:c5:6f:f1:9f:0d:c9:8c:b3:
eb:cb:5d:c7:98:c0:cc:d7:ef:ee:13:3f:0c:84:68:
ad:2a:3b:53:c1:3b:81:1e:3d:b3:ea:be:c2:9c:2e:
cf:7d:b5:d2:e3:e3:8d:d4:58:93:11:c5:b2:25:32:
3f:13:f3:f5:44:05:d1:66:94:88:ba:61:10:9a:c4:
51:9a:13:f0:30:65:8f:d4:27:1a:c3:2f:74:20:f9:
d1:db:0c:30:eb:bc:81:02:31:46:de:24:2b:da:f7:
bc:3c:f1:03:a2:4d:06:cd:ad:aa:4a:ba:26:5d:36:
15:ba:c2:78:fb:4e:6e:d3:db:37:65:a0:0f:4d:32:
ac:c9:04:18:c3:1b:3f:c8:f9:7a:89:45:b5:4a:33:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:37:F1:2E:7A:34:9A:3B:8E:7A:72:30:32:2A:07:AA:66:D7:5E
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HY438S56NJo7jnpyMDIqB6pm114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.146.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8a:90:1a:e0:27:54:4d:f2:cc:58:ba:16:75:bb:a1:33:e7:
97:d4:fb:51:8f:84:f1:50:3c:9f:3f:d3:d3:4a:7e:d0:dd:d6:
2f:fc:ba:9f:88:60:a9:0e:03:d5:6f:84:4e:0b:90:87:ea:04:
49:80:21:40:91:92:40:c3:0e:c4:11:14:a3:8a:4a:f7:7a:03:
1c:a7:d3:82:e7:03:c1:e5:77:51:fa:9d:4c:3a:16:42:09:3e:
af:c2:c2:a4:7d:ce:1f:53:df:58:85:97:f5:f3:ff:ce:0a:c8:
59:f9:64:1d:5b:88:c7:1a:bd:e2:64:9e:25:cc:0d:c9:0a:95:
81:95:86:a8:92:cd:49:02:99:ae:70:fa:c7:76:8f:ee:7d:cd:
4b:53:bc:a6:cf:2b:19:d8:8c:4f:8e:29:33:f7:38:66:a4:c3:
7c:ee:24:18:ca:ff:5e:5e:a4:0d:13:6b:70:74:b6:ef:b0:79:
28:4e:f5:3b:b6:25:b1:f4:8e:7a:f6:d3:62:34:6d:3c:2d:bd:
38:72:44:f8:44:15:f2:e2:2d:19:bb:2e:96:52:63:ab:6e:c3:
10:fb:7a:29:64:57:7e:cb:c2:62:41:81:d3:e2:a5:89:87:18:
96:99:77:65:15:d8:fb:16:5f:64:7c:42:31:ff:5c:eb:70:10:
3d:a1:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:19 2026 by rpki-client