Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/Hp_WUbOhn2zAoO7EHoGoBET1CVY.roa
File: Hp_WUbOhn2zAoO7EHoGoBET1CVY.roa (raw, json)
Hash identifier: f3R4RclAY5m9pnFbK+tbWViF6ZaULHEZrjUnSSfF1J0=
Subject key identifier: 1E:9F:D6:51:B3:A1:9F:6C:C0:A0:EE:C4:1E:81:A8:04:44:F5:09:56
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 01A0D36DF76A8DA1098BA390EB05B04A1E95
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/Hp_WUbOhn2zAoO7EHoGoBET1CVY.roa
Signing time: Thu 24 Sep 2026 12:39:54 +0000
ROA not before: Thu 24 Sep 2026 12:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 194.180.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:6d:f7:6a:8d:a1:09:8b:a3:90:eb:05:b0:4a:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Sep 24 12:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e9fd651b3a19f6cc0a0eec41e81a80444f50956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:53:d0:e5:f5:71:1a:b4:c0:fc:ef:ed:cc:
33:1e:e0:b8:93:ef:c8:71:5f:67:84:a2:0c:8c:76:
b7:51:ab:8e:9a:49:84:fb:8e:8f:20:62:a1:d7:55:
24:f3:85:6e:8c:5c:59:ea:e5:45:05:b8:6d:26:79:
23:a6:a1:50:f2:5f:c6:b0:29:40:ad:c6:b8:50:1f:
39:10:6e:ca:4c:46:60:f9:39:18:db:bd:1a:bb:f1:
8f:4e:de:df:c2:3f:2e:91:fa:61:66:93:69:75:7b:
aa:c7:d5:a8:bf:cb:24:43:fc:1c:a5:44:2f:c3:e4:
28:91:97:d4:d3:c0:d2:1b:5a:31:fe:83:d5:a1:f1:
09:c7:62:a8:34:dc:c1:13:46:8c:25:bd:51:f2:24:
bf:32:ef:a9:3c:7b:6a:56:d0:f2:e9:38:01:ea:11:
26:dc:07:aa:8a:c6:5d:b3:18:d6:c4:c4:18:33:82:
f2:f4:f9:8a:98:f4:6d:83:c0:1d:8c:97:d7:b0:16:
8e:a8:8a:b5:b1:98:cd:96:30:93:b4:11:b1:e2:20:
0e:85:8f:68:2f:c8:64:46:e2:67:0e:b2:3f:e3:ea:
bb:fc:62:28:dd:92:26:c9:80:1a:2a:65:40:42:25:
8a:16:14:df:b0:38:41:a0:5f:73:b2:a3:6b:eb:ab:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9F:D6:51:B3:A1:9F:6C:C0:A0:EE:C4:1E:81:A8:04:44:F5:09:56
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/Hp_WUbOhn2zAoO7EHoGoBET1CVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.148.0/24
Signature Algorithm: sha256WithRSAEncryption
42:be:05:62:b3:ce:66:c1:38:dc:1b:7f:73:18:8b:4a:dd:c7:
e1:ff:3c:81:db:a5:34:60:e3:82:a8:93:0b:40:5c:34:ee:6d:
35:88:46:51:22:08:57:fd:b7:43:62:e9:09:f1:f7:9b:cf:18:
60:3f:62:84:fe:22:00:4c:79:d3:fd:a3:4b:ad:02:85:f6:ba:
53:5f:9b:a2:a5:4c:8c:8f:a2:fe:24:5b:fb:df:25:a8:4c:73:
4e:ff:25:1c:36:af:63:80:d4:41:b4:66:e7:82:6d:5a:db:93:
0a:b0:d7:2e:dd:3e:43:fd:83:b5:8a:6e:44:8e:6a:1f:ca:46:
b9:eb:2b:74:24:bf:d2:f9:b0:b7:71:10:6a:2b:91:08:cc:c1:
db:31:ce:76:01:fa:2f:3d:bd:9c:6f:58:15:41:e2:e4:e5:8b:
3a:c7:f9:57:33:af:4e:75:f5:0b:b7:fa:31:9e:8e:25:27:14:
7c:79:b5:d7:8c:e0:50:14:71:74:91:3b:5c:a4:5f:98:5e:b1:
64:26:1c:d3:f0:a4:36:89:44:8d:e4:bd:cf:76:ba:b2:f3:14:
86:b0:75:dc:69:64:a1:19:c2:0b:5f:a2:10:bc:98:c5:f8:76:
33:29:bf:77:0b:50:ab:72:82:2d:28:04:59:54:44:cf:09:d7:
3a:67:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:49:17 2026 by rpki-client