Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/HfyiA3qMMgthCiAtVkrq3IorlAk.roa
File: HfyiA3qMMgthCiAtVkrq3IorlAk.roa (raw, json)
Hash identifier: LervCJ25fqeRyBKWsLpvvCwqR29nSFeUcDwqoID7bEQ=
Subject key identifier: 1D:FC:A2:03:7A:8C:32:0B:61:0A:20:2D:56:4A:EA:DC:8A:2B:94:09
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A042034E66CB3B7E116F0B301B82027B78
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/HfyiA3qMMgthCiAtVkrq3IorlAk.roa
Signing time: Thu 27 Aug 2026 06:58:27 +0000
ROA not before: Thu 27 Aug 2026 06:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 195.226.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:03:4e:66:cb:3b:7e:11:6f:0b:30:1b:82:02:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Aug 27 06:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dfca2037a8c320b610a202d564aeadc8a2b9409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:00:2b:7d:3e:d5:c8:9d:3b:eb:42:87:8f:
77:19:7e:f9:3e:33:6f:49:98:dd:f8:bf:c7:1e:c5:
9d:01:08:21:e0:85:d7:de:a8:2c:95:44:c0:2a:a4:
f7:09:24:2b:bb:58:38:9e:ff:51:81:4f:43:b1:7c:
35:ec:3d:a1:65:dc:9a:88:e6:a7:a6:f8:92:b0:16:
9c:f5:95:d3:db:f3:61:5a:4e:24:f8:90:8b:6b:3e:
f4:81:07:0a:33:cf:f3:3f:8d:11:39:91:da:1f:a1:
4d:9f:46:a9:52:41:09:36:23:dc:2b:5a:33:1d:8d:
fb:b7:62:5d:50:e8:ab:a1:b3:7f:16:10:e2:59:64:
16:94:47:fc:52:b9:c6:a9:00:df:c1:65:d6:7a:e1:
ba:e9:2b:b8:e2:bb:0f:e8:e6:64:35:d4:6f:74:af:
13:db:35:4d:9a:c4:1c:56:d9:b4:f0:8c:48:65:3a:
3c:38:7a:ec:13:e7:6c:6e:fb:5c:22:e5:3f:5d:0a:
61:7b:44:0b:1f:ea:00:8d:8d:d9:00:fb:e7:f6:76:
c7:39:ca:24:d3:c4:f3:f3:6c:f3:fe:d0:e0:1b:b7:
ac:1e:bc:42:5d:3b:f2:0a:1b:f0:a2:66:b7:70:26:
50:88:b8:66:c0:17:cb:74:13:dd:53:76:60:ef:49:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:A2:03:7A:8C:32:0B:61:0A:20:2D:56:4A:EA:DC:8A:2B:94:09
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/HfyiA3qMMgthCiAtVkrq3IorlAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.93.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f1:71:ed:c9:11:48:a5:f2:22:00:86:0c:50:a8:31:17:23:
40:1c:e3:b7:08:be:e1:4a:23:0b:ec:3d:41:bb:6b:46:92:b1:
aa:7d:ad:23:eb:27:6d:3f:a0:50:29:7b:b1:6a:fd:8a:c6:d9:
28:ad:1d:12:29:e8:92:4b:a5:73:52:8f:c6:05:f6:f2:74:a0:
92:8a:e0:b0:9f:db:7d:62:ed:3b:71:56:a5:94:e7:d0:41:0d:
e3:a3:33:77:ad:ed:8f:a9:79:90:e8:6f:39:b1:cf:48:6c:07:
72:15:9f:9b:10:92:c5:e6:e5:fb:32:98:4e:74:07:78:55:a5:
0d:b0:44:56:1f:fb:07:ee:71:2e:f5:0b:c9:76:94:05:a5:41:
dd:44:25:d5:f2:d1:71:58:db:15:7c:a2:5d:e6:bf:c2:21:22:
49:e2:ad:8b:c1:17:ff:7d:8f:32:c6:3e:32:84:42:51:78:40:
a6:37:2d:51:0f:56:8f:0e:27:d6:86:d7:e5:45:53:54:a6:1b:
cd:de:31:38:7b:81:2a:bb:e7:81:12:80:4a:60:69:68:83:66:
62:ab:f7:78:f3:f6:09:f3:e8:3c:1b:e4:4f:a4:12:7b:71:6c:
07:6c:cf:6a:58:36:ba:c0:80:8c:b6:c3:c4:b9:22:41:f5:37:
8a:fd:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:16 2026 by rpki-client