Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/H3C3dpxmxoEPm4q-lsESUA7g50I.roa
File: H3C3dpxmxoEPm4q-lsESUA7g50I.roa (raw, json)
Hash identifier: cMPN8JUjdDQs2joCm/GoDwJnVoSQGKblU1iqndJOxps=
Subject key identifier: 1F:70:B7:76:9C:66:C6:81:0F:9B:8A:BE:96:C1:12:50:0E:E0:E7:42
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 01A15A6ED177EA99B8548CB513304806B361
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/H3C3dpxmxoEPm4q-lsESUA7g50I.roa
Signing time: Tue 20 Oct 2026 17:49:34 +0000
ROA not before: Tue 20 Oct 2026 17:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211845
IP address blocks: 94.159.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:6e:d1:77:ea:99:b8:54:8c:b5:13:30:48:06:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Oct 20 17:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f70b7769c66c6810f9b8abe96c112500ee0e742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:26:87:41:61:aa:22:3c:df:53:ad:a9:d9:
9d:6d:73:95:30:05:e0:a5:6c:72:bb:87:2e:e2:70:
64:23:44:ba:95:50:e0:89:97:51:a9:b4:0f:23:c6:
8b:86:4f:73:c6:3f:ec:d6:5e:0f:b3:11:f2:ac:6b:
d8:d0:78:ec:9d:1c:82:37:5f:33:f9:f2:e5:15:09:
e9:c5:33:e2:6e:f9:5c:f1:3d:1d:dc:9f:a0:d2:e5:
1c:e4:ef:a3:cc:92:81:c6:2f:d7:d1:1a:6b:04:b4:
85:47:3c:f3:e4:ab:18:94:62:59:e0:79:17:db:16:
bf:93:fa:02:ef:00:17:f9:4a:c4:f9:77:d7:48:7f:
84:df:a4:77:b3:4b:15:3f:c0:54:e5:07:d4:c4:39:
e7:c7:c9:56:3f:db:f3:18:d7:40:eb:7f:66:dc:4f:
8a:f7:18:94:d6:74:20:70:18:5f:73:32:2d:43:0e:
01:ed:ab:28:f3:85:e6:59:18:63:20:ce:f1:c7:62:
d5:9b:12:aa:1d:ee:96:52:8d:d4:76:68:6d:a6:bf:
e4:78:43:8c:e3:ce:b2:36:f4:c8:df:bc:75:8a:41:
a4:b4:17:fe:26:34:ab:4c:d4:a5:d3:24:2f:4b:32:
95:31:54:fa:e8:a6:d9:eb:9b:83:2a:26:6c:cd:b4:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:B7:76:9C:66:C6:81:0F:9B:8A:BE:96:C1:12:50:0E:E0:E7:42
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/H3C3dpxmxoEPm4q-lsESUA7g50I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.95.0/24
Signature Algorithm: sha256WithRSAEncryption
77:21:fa:c7:85:b9:2c:b4:d8:4e:27:01:6c:7e:c2:29:be:77:
15:10:f4:62:5a:24:18:99:56:52:05:ed:0f:3a:86:97:08:ae:
d3:d4:8b:7c:2a:bc:a4:19:46:33:c0:9b:e1:23:c5:fb:3e:09:
eb:09:2b:83:7c:d8:a3:ea:e1:42:d2:1c:1b:8a:7a:58:72:2d:
ae:a3:4e:ac:0a:a5:63:41:ac:de:e5:c5:b8:4b:af:80:b1:da:
f7:3a:61:6f:22:ed:bf:a3:8e:9a:81:80:6c:29:07:a3:0a:d0:
86:7e:cf:e0:eb:3b:5d:1b:ef:72:fc:fb:05:ec:a0:a7:6c:ee:
8f:16:35:67:63:b9:19:18:61:ae:a2:c8:1c:de:c1:f8:5a:bd:
10:c9:2b:c9:f6:d3:55:72:6a:2b:2b:33:80:28:ce:e8:20:41:
da:85:9a:93:fc:ae:ea:7d:b9:84:2f:10:25:a2:72:14:d7:44:
64:e6:1d:46:35:07:80:fe:43:dc:5c:34:43:e8:ae:d6:a4:34:
8e:e9:7a:dd:07:0b:a1:a8:74:5b:1d:b6:28:92:29:71:80:8d:
dc:73:2e:78:c3:ea:63:24:e5:95:64:3d:dc:80:07:b2:2a:70:
fe:2c:95:20:b3:27:97:55:9a:2c:67:b8:a8:d4:42:c0:83:66:
fa:31:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:39 2026 by rpki-client