Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/Hjl5vdumoNhROzMggtwmtKDYgls.roa
File: Hjl5vdumoNhROzMggtwmtKDYgls.roa (raw, json)
Hash identifier: tPziZSEl8WSuje2S/md4Q9dyHwZ2ujrAQpjKvdyVGlc=
Subject key identifier: 1E:39:79:BD:DB:A6:A0:D8:51:3B:33:20:82:DC:26:B4:A0:D8:82:5B
Certificate issuer: /CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Certificate serial: 01A1C0F6D6631C0D6B488272DBB1ACAAFAC6
Authority key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/Hjl5vdumoNhROzMggtwmtKDYgls.roa
Signing time: Mon 09 Nov 2026 15:39:24 +0000
ROA not before: Mon 09 Nov 2026 15:39:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211980
IP address blocks: 2a01:e901:166::/48 maxlen: 48
2a01:e901:176::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:f6:d6:63:1c:0d:6b:48:82:72:db:b1:ac:aa:fa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Validity
Not Before: Nov 9 15:39:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e3979bddba6a0d8513b332082dc26b4a0d8825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:6a:be:8a:6c:41:9a:60:4c:e8:31:89:1e:
f8:8e:b5:92:20:c4:1a:01:98:05:04:bb:69:b8:ea:
fc:7c:7e:e4:6f:7f:78:53:3c:64:f3:f5:bf:26:d2:
20:5a:31:a3:40:f5:db:ec:ea:2d:07:db:ea:99:86:
79:f1:01:7b:b1:81:7d:4d:04:e2:63:47:92:9d:9d:
5b:23:8a:06:49:a2:ac:74:41:95:0c:4e:8e:c4:5f:
e9:cb:e2:7b:73:a9:1b:a8:0f:35:64:cf:f5:b9:42:
a8:90:ad:e1:00:24:05:70:c9:6b:ae:e1:86:4f:68:
2a:63:90:c2:b2:6b:d2:13:3f:ca:b1:71:c1:3a:e0:
79:60:d8:b9:5e:b2:5f:67:8f:c7:24:17:f6:d6:99:
09:70:56:3d:94:59:ef:86:bb:56:c8:17:44:d8:ca:
7f:a3:78:d4:89:19:51:d1:6a:7b:3f:89:f6:20:9d:
fc:35:61:83:97:21:bc:e9:2a:c9:b1:53:b0:16:95:
99:40:a0:37:a1:a4:58:2d:e4:a1:5d:53:96:af:d8:
9a:b7:f3:d0:8c:35:7e:b6:c2:54:21:84:55:68:8e:
0b:09:b0:21:ad:01:c7:5f:f9:e5:14:7d:38:db:83:
d3:de:05:93:29:f3:cb:f3:62:92:33:8d:09:8e:66:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:79:BD:DB:A6:A0:D8:51:3B:33:20:82:DC:26:B4:A0:D8:82:5B
X509v3 Authority Key Identifier:
keyid:27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/Hjl5vdumoNhROzMggtwmtKDYgls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:166::/48
2a01:e901:176::/48
Signature Algorithm: sha256WithRSAEncryption
85:55:44:56:f2:0d:45:9c:18:94:7a:96:15:40:30:b9:7c:60:
15:6a:85:3f:9f:5e:ff:1e:39:d4:31:18:94:fe:30:49:5e:ba:
e6:07:f0:7c:4b:1e:56:a5:f9:28:02:90:89:1c:55:38:44:ad:
77:0f:25:c5:a1:aa:13:34:ff:15:14:88:67:f7:f6:61:ae:f1:
a3:0a:54:0a:82:2c:97:f6:ad:4f:87:a0:75:86:b2:c0:0a:62:
52:c1:51:95:37:c3:18:a3:bd:ee:24:33:60:de:45:bf:3d:4e:
58:3b:70:6b:af:b0:da:85:57:30:c0:04:19:cb:45:46:82:1c:
c8:67:ba:22:e1:a9:98:c6:04:bf:de:58:87:79:08:28:fb:57:
c4:18:8f:17:a0:8c:99:a2:7f:83:13:bb:4e:a6:03:c2:26:30:
eb:db:d9:43:56:02:30:6e:06:41:ea:fe:e8:50:f1:d7:71:a3:
c5:44:c7:4c:f9:84:6d:1a:35:c2:02:bb:3a:1b:8e:c6:51:2b:
64:a6:fc:55:a3:bc:c4:a3:d8:ca:15:65:6a:0b:3e:e2:e7:55:
c4:c1:ab:cb:ed:cb:99:8b:19:f6:59:b1:19:fc:9f:84:10:a5:
3f:c9:a4:62:d0:52:56:53:b3:36:19:df:86:f3:1b:9e:33:bc:
43:c7:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:43 2026 by rpki-client