Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa
File: HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa (raw, json)
Hash identifier: TRqFmFDs3cFEdD+j1MIH3IwsMTCX5wrTHYLogmPYGvU=
Subject key identifier: 1E:D5:C4:EA:8E:60:C8:31:3C:A7:E2:DE:19:F5:53:18:A4:BE:1C:58
Certificate issuer: /CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Certificate serial: 019F478D801317569A1698B86D177BB01996
Authority key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa
Signing time: Thu 09 Jul 2026 15:44:43 +0000
ROA not before: Thu 09 Jul 2026 15:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198966
IP address blocks: 91.146.64.0/19 maxlen: 24
185.153.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:8d:80:13:17:56:9a:16:98:b8:6d:17:7b:b0:19:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Validity
Not Before: Jul 9 15:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ed5c4ea8e60c8313ca7e2de19f55318a4be1c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:23:50:b8:e8:a6:32:78:00:4f:c8:87:0a:
63:e3:5b:e8:c9:82:28:e2:23:78:ee:72:d3:76:14:
0c:6a:70:a6:f2:97:9c:d2:16:6b:c1:4f:14:f7:ba:
11:91:dd:bd:ad:fd:5d:c4:48:38:b0:d1:33:56:08:
48:51:cb:71:6b:52:5f:13:4c:bf:83:67:81:c5:71:
37:d1:46:ea:5c:15:6e:1e:f3:71:5d:91:23:c3:75:
c0:6f:72:d6:fd:97:96:ab:1f:db:17:77:8c:37:f9:
97:8c:b1:38:99:0f:31:af:64:4b:d2:89:72:b9:8f:
5b:d3:23:c4:ad:52:f6:af:32:de:bf:2b:e2:56:27:
61:f2:ae:ce:03:0e:3f:45:e3:af:cf:a0:97:8f:63:
72:0c:78:27:54:8a:78:30:c9:c2:c2:cc:4c:d8:5d:
7c:09:be:0f:d5:4e:32:95:e3:10:9d:fa:87:c8:cb:
09:37:d8:f3:ad:c1:48:f9:ba:30:5b:1d:4b:df:ed:
fd:88:39:c8:4f:66:6b:b7:0e:61:ad:4b:4c:b4:e1:
1f:48:82:c3:a4:08:4a:9c:0a:e6:99:a3:f6:09:83:
60:30:fb:9f:e3:05:46:1c:2c:aa:94:0d:ad:15:fe:
ed:b3:d5:37:57:f0:77:f3:d7:5a:ee:e0:b1:a1:b6:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D5:C4:EA:8E:60:C8:31:3C:A7:E2:DE:19:F5:53:18:A4:BE:1C:58
X509v3 Authority Key Identifier:
keyid:6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.64.0/19
185.153.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:24:ab:ed:d7:62:35:5e:8b:78:ca:62:19:2d:5a:eb:81:0c:
61:37:95:0f:d0:d7:6f:b1:8f:de:c2:b6:2b:70:d2:8a:86:e9:
9f:ac:1b:1e:ba:50:d8:85:60:e3:95:99:0a:8a:a3:56:09:60:
8d:7f:25:a8:ff:9a:8d:dd:ed:15:13:28:d8:35:1c:64:46:e5:
e7:9b:0d:e3:1a:7a:a4:3f:c7:71:3b:dc:36:35:c0:93:6f:f7:
7a:d1:ed:4b:1e:81:a5:a8:25:97:96:c0:39:b9:5a:90:e0:9e:
f1:ef:02:4b:b9:9a:71:99:89:73:14:a8:ef:36:cd:3b:98:b4:
12:bb:1e:2a:d3:c3:1e:22:a1:d0:ac:7d:66:2b:87:f2:c3:2e:
2d:5a:95:2f:bd:78:9c:9d:d7:3e:57:6e:a2:9e:d9:0a:b7:07:
c1:f1:92:93:2a:de:86:d7:c3:75:03:8b:88:09:9a:0a:98:98:
2f:6f:1c:7d:92:db:3b:c1:02:4e:b2:be:92:09:ef:dd:55:09:
f1:39:b5:0d:02:53:5d:71:d5:e3:3d:9e:d3:de:19:ec:b6:01:
ed:57:cc:96:89:cb:5c:cc:a9:a3:aa:d2:f5:6f:55:9c:c5:fd:
11:cc:23:aa:d7:50:1e:7f:31:f8:0a:e6:6f:dc:96:2a:66:d4:
ca:e4:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:08 2026 by rpki-client