Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/HVmNUcJUz6eHLCWqv73qDc20l-I.roa
File: HVmNUcJUz6eHLCWqv73qDc20l-I.roa (raw, json)
Hash identifier: Ku0nK986i55PU61Q1Y0z3xgl417ibJovalrFntQb3zE=
Subject key identifier: 1D:59:8D:51:C2:54:CF:A7:87:2C:25:AA:BF:BD:EA:0D:CD:B4:97:E2
Certificate issuer: /CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Certificate serial: 019F2368C2975A0A6C8B9A1B398BD5C76722
Authority key identifier: 6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/HVmNUcJUz6eHLCWqv73qDc20l-I.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52194
IP address blocks: 46.173.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:97:5a:0a:6c:8b:9a:1b:39:8b:d5:c7:67:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d598d51c254cfa7872c25aabfbdea0dcdb497e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:79:f0:55:4b:b2:f9:8c:aa:9c:cd:cc:f6:
42:08:f1:10:83:6e:60:ec:02:b7:cd:79:e1:de:e2:
39:53:e4:0c:30:fe:2f:a7:4a:aa:4c:ec:50:e3:21:
02:b2:a4:b3:94:9f:b2:77:86:72:4d:c9:2a:71:bb:
41:6a:7a:ae:ed:e1:42:75:66:ae:42:40:3b:e9:4d:
0c:a8:ef:63:59:d0:58:1c:ae:87:a6:3e:af:0c:c4:
f5:04:14:ba:b3:73:8e:81:e1:3d:34:7a:c2:80:5b:
24:11:b6:2e:ad:2e:0d:e3:4e:21:68:be:e9:c2:32:
ea:43:a8:61:46:e2:c3:67:76:8c:04:2d:0a:93:ad:
b9:3f:9c:e3:df:c9:a7:f8:57:88:4c:99:0d:3e:bc:
dc:6b:8e:6c:83:c4:04:14:92:74:dd:40:61:f8:1f:
b0:65:b4:f3:74:5d:11:90:63:eb:3d:c3:e3:c1:5d:
1a:b9:dc:e1:2c:4e:d7:14:34:da:46:87:49:d4:a7:
92:a0:27:5d:1a:15:81:c8:e5:e9:a9:45:c5:a4:e2:
9f:14:f1:cf:b8:43:48:ba:19:c7:af:7d:cf:42:e5:
57:9c:dc:86:87:8e:74:c7:b2:bf:ea:bf:a3:e1:8f:
20:e1:b9:4e:5d:dc:be:8d:18:32:95:eb:1c:d9:10:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:59:8D:51:C2:54:CF:A7:87:2C:25:AA:BF:BD:EA:0D:CD:B4:97:E2
X509v3 Authority Key Identifier:
keyid:6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/HVmNUcJUz6eHLCWqv73qDc20l-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:e2:31:42:90:cf:11:18:10:6d:04:18:d5:4f:d5:83:99:b0:
de:55:0e:89:73:cb:ce:fb:45:35:62:b6:62:e8:14:56:9f:d0:
16:da:69:fc:49:aa:af:0c:17:77:d4:99:83:a2:59:a8:77:2a:
be:b6:eb:94:76:02:3c:ef:3d:94:7b:59:c8:1c:83:77:66:c4:
53:46:0b:21:af:0b:3c:88:05:25:e3:ca:79:b1:ee:2c:3b:5f:
6a:5e:30:51:ef:d2:98:08:09:1e:f4:85:4b:4a:a7:6f:64:71:
0f:4d:52:ea:20:c5:48:ba:61:8c:4f:f5:b7:1e:c2:3d:13:c8:
98:84:9b:2a:9a:fd:b8:9d:bb:ab:40:3a:c8:ab:49:04:01:c1:
99:61:5b:96:10:36:fc:3c:65:94:c6:45:ba:2d:bb:01:9c:9f:
1e:e5:84:88:73:83:1a:46:6e:fd:d2:e4:6b:39:13:af:b2:f9:
aa:f5:d5:db:13:af:2d:c8:aa:b8:6c:19:da:ea:3f:c0:49:59:
02:14:a5:37:9f:ba:38:9a:c7:3c:b6:08:d3:d3:17:14:78:63:
92:e7:b7:e3:87:b7:ae:97:cc:95:a6:33:ae:68:1b:61:62:fb:
ee:27:65:f8:ca:c5:62:d5:62:31:17:f8:97:41:52:1a:15:62:
d2:cf:63:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMKXWgpsi5obOYvVx2ciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzc4YTRlNTkwZmViMTAzZDVkMWJiNGQwNzljNjg0MTU1
OTJiZjkwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDU5OGQ1MWMyNTRjZmE3ODcyYzI1YWFiZmJkZWEwZGNkYjQ5N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOx58FVLsvmMqpzNzPZCCPEQg25g
7AK3zXnh3uI5U+QMMP4vp0qqTOxQ4yECsqSzlJ+yd4ZyTckqcbtBanqu7eFCdWau
QkA76U0MqO9jWdBYHK6Hpj6vDMT1BBS6s3OOgeE9NHrCgFskEbYurS4N404haL7p
wjLqQ6hhRuLDZ3aMBC0Kk625P5zj38mn+FeITJkNPrzca45sg8QEFJJ03UBh+B+w
ZbTzdF0RkGPrPcPjwV0audzhLE7XFDTaRodJ1KeSoCddGhWByOXpqUXFpOKfFPHP
uENIuhnHr33PQuVXnNyGh450x7K/6r+j4Y8g4blOXdy+jRgylesc2RCh9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1ZjVHCVM+nhywlqr+96g3NtJfiMB8GA1UdIwQY
MBaAFG7Hik5ZD+sQPV0btNB5xoQVWSv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNlS1Rsa1A2eEE5WFJ1MDBIbkdoQlZaS19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt
MTA5MTIyNzlhMTI1LzEvSFZtTlVjSlV6NmVITENXcXY3M3FEYzIwbC1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1
LzEvYnNlS1Rsa1A2eEE5WFJ1MDBIbkdoQlZaS19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELq2wMA0G
CSqGSIb3DQEBCwUAA4IBAQCj4jFCkM8RGBBtBBjVT9WDmbDeVQ6Jc8vO+0U1YrZi
6BRWn9AW2mn8SaqvDBd31JmDolmodyq+tuuUdgI87z2Ue1nIHIN3ZsRTRgshrws8
iAUl48p5se4sO19qXjBR79KYCAke9IVLSqdvZHEPTVLqIMVIumGMT/W3HsI9E8iY
hJsqmv24nburQDrIq0kEAcGZYVuWEDb8PGWUxkW6LbsBnJ8e5YSIc4MaRm790uRr
OROvsvmq9dXbE68tyKq4bBna6j/ASVkCFKU3n7o4msc8tgjT0xcUeGOS57fjh7eu
l8yVpjOuaBthYvvuJ2X4ysVi1WIxF/iXQVIaFWLSz2Ny
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:12 2026 by rpki-client