Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HaKxQ7pPLdmOPqK2IqY3iI-mIHI.roa
File: HaKxQ7pPLdmOPqK2IqY3iI-mIHI.roa (raw, json)
Hash identifier: JqG+I/gYisvWD7Zs0kJeQYfL7ttQn8wjmZUgviA2XwU=
Subject key identifier: 1D:A2:B1:43:BA:4F:2D:D9:8E:3E:A2:B6:22:A6:37:88:8F:A6:20:72
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DED0A5337719961A8CA424ADF3A34E9FC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HaKxQ7pPLdmOPqK2IqY3iI-mIHI.roa
Signing time: Sun 03 May 2026 08:52:49 +0000
ROA not before: Sun 03 May 2026 08:52:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201039
IP address blocks: 5.175.171.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:0a:53:37:71:99:61:a8:ca:42:4a:df:3a:34:e9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 3 08:52:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1da2b143ba4f2dd98e3ea2b622a637888fa62072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:d9:e2:24:d9:ad:5d:3a:e7:27:21:e1:13:
4a:64:08:9e:75:35:5f:23:f3:e9:eb:51:9a:1d:60:
b3:38:e2:5a:50:fe:eb:d8:b7:5a:34:1f:f5:4d:57:
b1:cd:fa:c2:b3:2b:5d:a7:c4:41:12:a5:bb:97:0d:
32:9b:d4:7b:84:30:d3:da:4d:74:98:f0:18:26:ca:
9f:f6:86:fa:eb:51:83:f5:ac:46:30:14:83:59:90:
97:b3:7b:af:3c:e1:0a:05:4f:6d:3c:30:a4:c9:c4:
5e:b0:55:e1:94:36:85:51:63:57:09:89:15:13:b3:
26:46:1a:5e:53:ff:87:3a:45:38:5a:c8:1c:66:2a:
cd:6b:ea:87:10:3e:af:54:a3:4c:20:d2:7a:ad:36:
9b:92:07:7a:fe:1b:8c:95:1b:8d:77:f3:36:71:2a:
5b:ab:b6:43:93:77:45:40:24:39:22:af:61:3b:a0:
85:92:3a:55:98:26:bf:1a:0e:3b:04:43:1d:4b:02:
e9:50:91:f9:04:b8:1c:c8:71:8f:b0:fe:e9:78:d0:
98:d0:87:8e:73:f5:a9:5d:81:07:c2:9c:dd:97:77:
84:96:6f:ef:02:95:5b:b9:fc:08:9d:04:41:93:51:
23:1f:b3:c6:86:0d:6f:31:9a:b2:fb:8f:65:50:41:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:B1:43:BA:4F:2D:D9:8E:3E:A2:B6:22:A6:37:88:8F:A6:20:72
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HaKxQ7pPLdmOPqK2IqY3iI-mIHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.171.0/24
89.106.83.0/24
89.106.95.0/24
94.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:65:e7:c0:62:9c:86:93:cd:d2:8e:7d:b2:52:8f:7b:07:d5:
cb:7d:c1:b9:06:c0:bd:04:fb:14:c8:fe:72:9b:f7:49:2d:33:
2e:6b:7f:02:ec:ee:71:74:23:06:91:2b:ce:dc:36:2e:ed:44:
3c:ce:ea:82:10:bd:6e:68:ca:15:9f:af:1a:48:77:15:0f:7d:
41:eb:aa:85:f7:f7:09:94:7f:27:90:59:6e:c8:d5:2d:f8:81:
20:5f:95:50:6a:ee:fe:42:d1:1b:dd:f4:4d:d9:89:30:52:6c:
dc:07:a1:97:e6:6e:93:a4:61:5d:89:2a:c5:61:cf:c1:9d:94:
d4:62:66:8f:f3:80:61:c4:1f:ea:ae:0e:4d:81:f5:c1:48:ef:
c2:cd:76:34:f1:c9:b3:ab:59:9e:4f:4e:94:d9:a3:78:21:f9:
f3:72:d6:92:36:fb:72:b9:be:34:55:89:df:40:5b:8e:7e:be:
30:1c:d7:53:0a:10:1d:dd:c0:6a:f5:dd:3b:e0:52:7b:4f:ee:
e3:b5:da:51:3a:74:0b:8d:dd:c4:bc:b4:9a:90:ca:75:36:f5:
8a:bf:07:db:53:d1:00:53:98:25:3d:4d:6d:0f:8d:dc:73:43:
05:83:83:bc:a1:d9:a1:f2:7a:2c:83:7f:74:9c:18:48:87:15:
7e:8c:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:27 2026 by rpki-client