Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa
File: HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa (raw, json)
Hash identifier: u6C6SIGOiLQCTdX2uMjNGg6NhfkwgvQOTMzRPzekqCs=
Subject key identifier: 1D:3E:4E:84:EA:89:75:87:41:6D:70:70:43:75:50:D4:6A:55:20:5B
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019FB2A092CE67A225F6459E39B479012669
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa
Signing time: Thu 30 Jul 2026 10:44:55 +0000
ROA not before: Thu 30 Jul 2026 10:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211381
IP address blocks: 45.131.182.0/24 maxlen: 24
2a13:4ac0::/46 maxlen: 46
2a13:4ac0:4::/46 maxlen: 46
2a13:4ac0:10::/46 maxlen: 46
2a13:4ac0:14::/46 maxlen: 46
2a13:4ac0:18::/46 maxlen: 46
2a13:4ac0:1c::/46 maxlen: 46
2a13:4ac0:20::/46 maxlen: 46
2a13:4ac0:24::/46 maxlen: 46
2a13:4ac0:28::/46 maxlen: 46
2a13:4ac0:2c::/46 maxlen: 46
2a13:4ac0:30::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:a0:92:ce:67:a2:25:f6:45:9e:39:b4:79:01:26:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Jul 30 10:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3e4e84ea897587416d7070437550d46a55205b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:f7:11:a1:0c:71:e4:a6:bd:61:09:bf:78:
57:6e:21:93:10:43:e7:91:61:05:de:fe:71:22:d5:
c9:0c:24:4b:fc:6c:e5:15:0c:83:51:23:7d:19:69:
f3:fa:d3:00:bd:1f:d5:76:df:12:e5:49:47:c3:da:
e6:64:21:c7:c4:b5:3c:14:33:4c:73:5c:31:d7:6c:
c0:6c:62:91:77:5b:b4:ef:44:a4:a3:93:31:0a:3e:
2f:45:23:eb:fa:e4:a8:e8:23:ea:a5:ee:4a:38:02:
e9:b5:da:12:30:65:a9:44:c5:0f:73:e7:8f:7a:f5:
b0:63:ad:9d:1d:e4:00:a5:44:79:28:c5:5d:5e:4e:
37:7a:ff:b9:53:1c:2a:22:e1:40:37:35:93:cb:26:
c1:6e:15:7c:6f:ee:17:28:16:d8:38:df:5e:9b:a5:
98:eb:4a:28:49:59:66:3d:4b:8a:98:50:3d:50:c9:
d6:67:0c:42:42:1c:ee:c8:9b:5a:d3:bd:32:f0:40:
ce:16:dd:35:71:89:20:87:3d:35:99:3e:d7:11:01:
d0:d7:b3:59:93:da:73:f9:38:b4:fc:68:c2:25:86:
f1:8c:7e:0d:92:e5:27:7e:10:c5:b4:82:13:76:f0:
7b:62:91:af:cf:19:d8:24:82:6b:1a:88:53:8c:c7:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:4E:84:EA:89:75:87:41:6D:70:70:43:75:50:D4:6A:55:20:5B
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.182.0/24
IPv6:
2a13:4ac0::/45
2a13:4ac0:10::-2a13:4ac0:33:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:28:55:7b:00:ea:12:02:a1:13:8b:49:1b:42:1f:e7:72:ac:
68:eb:15:41:ec:df:2f:7b:7a:26:62:0f:ba:8e:a0:0d:1c:77:
68:83:47:e4:84:06:a9:5f:aa:3e:fc:38:40:a9:b5:b0:39:9c:
3c:1d:23:f4:8a:e7:82:42:b3:c8:39:6a:7c:08:74:1f:8b:fd:
be:3d:72:97:5f:30:4a:78:85:1f:c9:a4:66:8c:c4:bc:a6:7a:
2a:7e:9f:50:68:8b:9a:9e:d3:1c:a2:65:91:b1:b7:a0:21:32:
3a:e5:91:bd:7a:3f:ad:fe:c4:29:ff:1b:ce:c2:4b:f3:8d:b0:
44:48:4f:7f:88:2e:9c:8c:05:39:4e:75:91:3f:30:fe:4c:3e:
9c:63:80:21:43:3d:1c:bc:ea:81:15:2c:10:29:28:0d:72:36:
0a:07:17:b6:dc:8c:e5:87:4c:bc:34:3f:9c:d6:5a:d3:8a:38:
a8:d1:b0:70:a7:36:84:32:2a:e1:18:56:df:1f:4d:36:e3:ce:
67:d6:82:f3:9c:43:95:e0:42:18:13:d9:a6:64:b0:4e:db:6a:
b6:9d:d3:83:d9:51:8d:03:4a:c1:4b:e4:c2:b1:15:13:20:f3:
91:a5:74:0f:b0:fb:ed:9b:94:b8:3e:b4:66:48:4e:b8:17:57:
ef:7a:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:46 2026 by rpki-client