Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Hov6U5ZVW8cdcNKCk5lUHb3Lnkw.roa
File: Hov6U5ZVW8cdcNKCk5lUHb3Lnkw.roa (raw, json)
Hash identifier: VRQ7H7vvIOcoLzyjhrMXqxjXmp38gz2oT9+Kuynel2c=
Subject key identifier: 1E:8B:FA:53:96:55:5B:C7:1D:70:D2:82:93:99:54:1D:BD:CB:9E:4C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019FBD49C2B3ECDEA27B6D3452000EADE5B5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Hov6U5ZVW8cdcNKCk5lUHb3Lnkw.roa
Signing time: Sat 01 Aug 2026 12:25:55 +0000
ROA not before: Sat 01 Aug 2026 12:25:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213035
IP address blocks: 194.156.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:49:c2:b3:ec:de:a2:7b:6d:34:52:00:0e:ad:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Aug 1 12:25:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e8bfa5396555bc71d70d2829399541dbdcb9e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:c2:33:8a:bd:8a:20:46:2f:5b:38:d0:54:
1b:9a:8f:12:90:48:ef:ce:7e:50:62:86:67:be:0f:
59:d6:57:4c:14:c7:23:fd:7b:b5:22:d4:1d:60:47:
b4:26:75:50:77:ab:41:80:ea:ea:3d:d1:85:36:a9:
b7:3e:82:db:59:55:91:d6:07:42:7a:f0:ca:01:2e:
08:cd:f1:fb:d8:2c:96:11:d8:1e:4d:be:f7:32:77:
5a:49:5d:78:c3:5c:d1:57:41:4d:cc:24:96:0d:7e:
a5:ca:ef:d2:6e:85:95:de:99:09:d3:32:57:34:01:
1d:b6:63:07:4d:3b:8e:65:98:89:30:39:a5:f5:36:
1e:a0:1d:48:9c:88:60:88:d6:47:03:1f:31:f9:68:
d4:2f:67:eb:ac:68:1b:c2:7a:ec:fa:40:e5:c5:74:
55:2f:a5:63:01:46:85:37:b0:52:38:c3:f8:0b:c3:
d6:e7:a6:45:5b:dd:be:4d:c1:f7:c4:c6:92:4f:16:
21:a4:1f:24:a9:21:e4:8e:f8:b3:2d:ae:04:36:61:
b9:b5:4a:e5:bc:be:40:09:ab:47:83:49:6f:3e:9b:
26:fc:42:e8:10:ff:92:78:dd:13:b9:42:8f:57:7c:
68:4d:9b:2e:5d:51:e7:83:e1:51:ad:2f:0f:ec:08:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:FA:53:96:55:5B:C7:1D:70:D2:82:93:99:54:1D:BD:CB:9E:4C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Hov6U5ZVW8cdcNKCk5lUHb3Lnkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
89:22:b1:36:c0:18:66:ce:e5:2b:e3:c0:43:6f:81:71:05:45:
4e:54:3d:1d:41:d2:74:91:39:3f:69:1b:43:f0:c6:1d:f9:b7:
6a:95:cc:3b:7d:50:9f:6f:23:dc:b8:36:55:c5:8d:7e:c3:46:
92:52:30:c5:93:93:4c:62:c1:65:23:a7:48:15:a6:31:e7:c8:
eb:cc:0f:3a:a0:77:a6:a4:46:6f:b3:62:3a:69:6e:4e:5d:c5:
02:cf:da:2f:e9:a4:00:5d:7d:3c:81:1b:94:22:0d:a2:01:a7:
2f:74:1a:61:da:2c:4a:d9:13:ff:04:68:2a:cc:f5:b8:87:e1:
10:be:b2:fc:1e:c5:e3:25:3b:7c:15:f9:cb:0b:cd:b8:e4:b1:
4a:25:f3:2f:7a:6e:66:89:b3:64:b8:e6:86:c2:52:f2:95:67:
e8:8d:6f:19:0c:21:36:3c:16:80:f1:34:a4:06:06:27:99:22:
45:a9:d0:4e:ba:fc:4e:34:07:5a:e2:9f:85:e2:a0:31:1a:46:
85:2e:59:99:64:24:df:61:cd:a5:3f:69:c6:f0:4e:26:87:af:
a3:f4:92:29:80:ee:15:55:c1:a9:3e:3b:84:83:e7:1e:80:4a:
f1:49:92:10:25:d6:16:4a:68:f9:e7:d5:33:01:99:98:06:32:
71:c4:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:01 2026 by rpki-client