Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa
File: Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa (raw, json)
Hash identifier: jyeskLTbwVPBESh5W51wXjNVOuucTxX63WTMSQq/zQk=
Subject key identifier: 1F:3D:8F:E5:44:F6:BE:AF:AB:D1:6D:E2:C3:A7:E4:5D:07:8C:DD:EB
Certificate issuer: /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial: 019F2368A1B424D44B4AFFC9C890DCB0285A
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201558
IP address blocks: 185.69.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a1:b4:24:d4:4b:4a:ff:c9:c8:90:dc:b0:28:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f3d8fe544f6beafabd16de2c3a7e45d078cddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:b1:eb:28:99:e3:47:b9:7a:af:e3:96:c6:
0e:ce:71:bd:60:8c:14:c5:79:ad:fb:4a:a8:f5:75:
f7:82:c0:59:2a:28:c8:a6:f2:57:b6:e3:ff:0e:10:
2a:77:34:3e:98:43:c7:88:60:b8:56:51:16:d5:18:
48:44:17:7e:3f:96:01:c2:2c:1b:a8:db:61:5e:df:
3e:bc:ad:ee:91:c8:d7:97:a5:43:01:d7:31:64:73:
dd:a8:85:c7:98:86:5b:49:49:dd:37:af:2c:c8:df:
de:63:34:b6:f4:d0:a3:d1:b5:95:fa:be:8f:5f:b7:
67:97:8f:1a:9d:71:20:dc:35:51:2c:f1:10:4c:ce:
70:bf:81:ff:ce:42:70:39:c5:ef:f1:09:3f:75:5e:
0d:bb:c4:0e:f9:1d:d0:92:01:be:76:5e:da:65:78:
77:76:21:64:b8:dc:42:c6:2e:b4:f6:f9:2c:d6:11:
92:db:73:8f:a6:41:db:94:88:a0:13:0e:28:d6:2e:
de:d9:00:12:d1:9d:fa:6d:90:bd:06:aa:5e:c9:e8:
bd:91:b4:a5:af:44:1a:43:46:01:b8:98:0a:ff:c7:
16:8b:5e:9e:a9:9d:b6:c4:9c:46:62:2f:df:83:81:
3f:be:4d:e5:4f:18:c4:bc:fe:a1:aa:58:bd:cb:cf:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:8F:E5:44:F6:BE:AF:AB:D1:6D:E2:C3:A7:E4:5D:07:8C:DD:EB
X509v3 Authority Key Identifier:
keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.187.0/24
Signature Algorithm: sha256WithRSAEncryption
78:15:dd:04:a4:4c:23:f6:01:e2:6c:b1:c4:d5:93:5b:18:48:
2c:6c:d8:a4:6f:09:56:cd:28:6d:7e:ae:e6:3d:81:e1:57:86:
82:91:da:c2:f8:50:7f:5f:d1:a0:3b:c7:11:86:0e:35:65:10:
1a:a1:ac:42:2b:11:21:cc:3a:fe:13:c0:33:28:2d:03:e2:fd:
29:b6:6b:2e:3e:ff:99:d8:aa:df:ea:e0:9a:6e:b5:f6:ec:7b:
cc:f9:f2:68:17:13:9c:99:e5:f2:41:f7:13:7b:63:0c:89:65:
45:2d:e1:71:a6:c4:7f:97:2a:23:69:81:d0:21:fc:ef:a3:97:
4e:f0:c6:1d:77:d8:62:6b:eb:7c:b0:a5:3c:a8:e7:b1:3c:10:
a5:68:cf:c4:d7:cd:38:8d:50:8e:e5:65:09:e7:53:53:8b:c0:
d0:44:dd:32:c7:ed:39:9f:34:91:c9:f8:9e:3b:8e:14:8c:ff:
65:86:95:37:43:5c:d5:2d:be:e1:56:25:d1:b8:44:78:94:7d:
0c:55:a6:b2:ce:3c:85:be:d9:94:75:77:3c:a8:23:92:ff:97:
38:44:c9:52:8a:7f:07:36:ab:6e:fb:f4:3a:4f:cd:6f:41:63:
d6:40:79:6d:4e:12:2e:1d:13:0a:d5:76:1c:0a:58:fe:7a:ab:
3d:34:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:12 2026 by rpki-client