Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/HOVXmYMLp1C5oF-a43c5jVVgmAQ.roa
File: HOVXmYMLp1C5oF-a43c5jVVgmAQ.roa (raw, json)
Hash identifier: UPZUJlO+excO0oXgH+fmniE7Wc5cn6/DXlPPvCZjOh8=
Subject key identifier: 1C:E5:57:99:83:0B:A7:50:B9:A0:5F:9A:E3:77:39:8D:55:60:98:04
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A153F0991439F3AB0126B97142ED49ED24
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/HOVXmYMLp1C5oF-a43c5jVVgmAQ.roa
Signing time: Mon 19 Oct 2026 11:33:58 +0000
ROA not before: Mon 19 Oct 2026 11:33:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 46.232.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:f0:99:14:39:f3:ab:01:26:b9:71:42:ed:49:ed:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Oct 19 11:33:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ce55799830ba750b9a05f9ae377398d55609804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:52:0b:2b:aa:ef:2d:ab:2c:3e:58:ac:04:
2f:f3:c6:d9:cd:03:d1:dd:44:28:08:71:26:bb:86:
f9:82:1e:77:1f:82:a5:53:d6:02:f7:6c:88:e0:d5:
29:34:b8:e9:7a:18:c4:ff:a8:53:db:10:62:a5:b0:
07:e2:5b:02:b9:b0:19:14:95:8e:6f:10:1d:41:95:
21:85:78:59:d7:76:a9:fa:6b:77:99:b7:6a:3c:39:
60:c7:41:f7:44:17:b1:a9:72:fe:99:e0:dc:49:cf:
cc:ea:7b:1e:64:1f:af:85:a2:b4:26:c3:ac:6e:4a:
23:c2:2d:f8:4f:4a:0d:9d:cd:6c:97:d4:ca:4e:57:
fd:93:92:86:a1:a2:26:a2:1c:ff:fd:09:ef:ab:03:
cd:29:33:f7:80:1e:db:c6:10:10:3c:b9:bf:cd:5a:
e3:88:66:13:03:f8:e7:3c:8c:d6:bb:98:fc:d2:9f:
7d:6c:d0:40:06:a7:ba:88:36:ef:87:fa:ed:7f:3a:
bf:ca:df:ec:4d:81:f0:da:3c:cd:41:1e:7d:aa:8a:
d3:a7:d2:89:fe:fb:59:e9:af:95:d3:98:c6:48:b8:
d6:0f:a5:7e:32:a2:f4:d3:88:b5:50:23:6b:80:97:
2b:27:79:bd:87:b8:8d:40:95:4c:e1:22:6c:43:31:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:57:99:83:0B:A7:50:B9:A0:5F:9A:E3:77:39:8D:55:60:98:04
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/HOVXmYMLp1C5oF-a43c5jVVgmAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d4:87:05:be:c9:4b:fe:ff:68:03:bb:d0:e8:a4:0f:c4:7b:
5d:3a:b2:71:3b:24:c0:c4:41:97:d2:f1:33:92:17:b0:45:c4:
66:88:0a:e2:b0:f9:09:55:75:7c:03:08:5d:f0:03:31:01:51:
64:3a:33:ca:ea:d7:d8:87:37:3e:bf:dd:da:81:02:e2:cc:e6:
7d:15:b3:33:4e:33:eb:75:34:ef:cb:dc:af:5e:53:3a:df:4f:
90:91:25:b0:58:58:b6:e1:8a:d6:23:03:f9:67:4c:90:5f:54:
d0:36:c9:19:fe:b9:bd:8b:51:52:e4:ba:fb:e9:18:a0:a8:59:
0a:81:e6:f4:49:08:ea:2f:b0:5e:9f:02:1d:84:54:69:d8:9e:
96:df:88:a6:76:8f:fc:5b:36:46:cf:c3:c9:3e:67:72:e8:95:
d7:16:26:0a:93:ce:46:78:62:ca:ab:66:20:79:77:16:82:50:
c6:09:ac:c0:bc:6e:ca:03:07:e7:09:e0:15:95:87:41:34:a8:
95:51:ad:5e:88:f6:df:69:e8:3c:ba:13:87:ad:18:3e:19:9d:
2c:84:81:6e:c1:4b:89:81:86:42:b2:25:12:e1:d3:d5:89:57:
58:e3:8c:45:af:1b:43:d2:90:01:f7:da:16:14:b4:a3:3c:36:
c2:63:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:13:55 2026 by rpki-client