Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/HJwZlYqEjcC0kZy6mydcGkGnl2Y.roa
File: HJwZlYqEjcC0kZy6mydcGkGnl2Y.roa (raw, json)
Hash identifier: UPYyl+3V1/TwBPn6nhuPF5CRvh3gv8SQW9YgSKrnSbs=
Subject key identifier: 1C:9C:19:95:8A:84:8D:C0:B4:91:9C:BA:9B:27:5C:1A:41:A7:97:66
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019FFF70C2492EAD5C99C570BE0E0E1FA070
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/HJwZlYqEjcC0kZy6mydcGkGnl2Y.roa
Signing time: Fri 14 Aug 2026 08:43:27 +0000
ROA not before: Fri 14 Aug 2026 08:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57829
IP address blocks: 185.179.246.0/24 maxlen: 24
2a10:4d40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:70:c2:49:2e:ad:5c:99:c5:70:be:0e:0e:1f:a0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Aug 14 08:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c9c19958a848dc0b4919cba9b275c1a41a79766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:77:5a:41:16:96:f3:9e:15:c6:a0:bd:e6:
dc:14:ed:8c:2f:a1:51:e5:35:3f:f1:fd:e2:72:29:
21:00:bd:14:9d:81:e9:98:df:7d:d8:63:19:f8:99:
af:de:a6:11:91:f1:e7:5b:b7:5d:13:a1:ef:d8:a6:
8b:46:5a:01:0f:6a:c0:c1:1c:72:ce:67:d3:40:ad:
f2:3d:fa:0a:c0:e8:cd:02:8c:26:7b:85:74:6c:f0:
d7:65:f3:ea:76:33:9e:65:38:4a:df:34:4d:82:69:
29:8c:f7:c3:b7:8b:a4:06:8c:96:1a:8e:6b:b5:55:
ef:eb:5c:4e:b9:eb:ba:5f:36:74:f9:36:07:eb:7c:
21:53:a7:8e:a7:97:83:65:f0:03:d9:23:25:6a:ec:
8c:c2:de:a1:62:96:f5:b6:b4:91:76:ed:0d:60:e6:
b0:90:3b:82:96:d1:ea:2e:0f:ec:4a:3a:2a:38:fa:
16:b7:15:b8:f5:14:61:01:e5:12:a5:30:52:7d:36:
a1:b5:0e:60:75:fe:f5:78:b0:26:a7:ac:c9:0b:32:
7e:b9:3c:1c:7d:78:f1:ec:12:83:5e:3a:f8:f0:62:
78:5c:3c:9c:e9:fb:94:c3:fe:16:a6:7b:71:a8:47:
59:70:47:dc:0b:ad:cb:48:c3:1c:29:17:de:9d:b6:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:19:95:8A:84:8D:C0:B4:91:9C:BA:9B:27:5C:1A:41:A7:97:66
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/HJwZlYqEjcC0kZy6mydcGkGnl2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.246.0/24
IPv6:
2a10:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
7e:7b:55:69:d5:6d:5f:06:3f:46:28:f9:57:d9:9c:91:31:3b:
fb:6f:a0:8b:ea:05:95:d5:bf:35:cd:d2:57:8b:74:ac:cb:c5:
c2:5c:11:e4:42:f2:5b:d2:04:fb:94:41:94:f0:cf:07:03:8c:
06:89:fb:5d:2f:e6:38:50:c1:59:31:45:7e:94:4b:f7:37:fa:
e7:46:7d:0e:00:25:5f:17:7e:82:d5:9c:cc:d9:cb:b0:2d:01:
e5:cd:8b:5c:b4:66:2f:89:c3:95:e4:21:53:3a:69:30:ef:3d:
81:5e:9b:48:b7:06:b0:da:2e:6e:85:9a:34:b9:64:c4:99:09:
35:cf:c5:d6:75:6a:b6:51:9a:d9:a7:af:21:c4:7e:c8:e3:9f:
70:d5:76:07:75:3d:53:7c:3e:c1:bf:b4:96:db:5e:c6:d6:ff:
6c:a1:06:7b:4a:07:63:5c:08:5e:08:85:36:3c:3a:5d:ab:96:
d6:00:1f:43:7e:0a:de:9e:50:90:00:bd:cc:fd:c0:2d:94:2f:
c3:b1:03:a1:35:fc:9b:30:ff:1f:bd:fd:e7:03:66:26:98:9a:
f6:d7:8f:66:7d:d2:b9:2c:dd:b2:d4:1c:f0:86:05:36:6b:00:
8b:72:e8:d0:40:23:90:85:7d:3b:88:1a:2f:3b:a5:08:a2:e0:
72:d3:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:26:19 2026 by rpki-client