Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HBPsNh3SK45_DxhTZed8BhCiToY.roa
File: HBPsNh3SK45_DxhTZed8BhCiToY.roa (raw, json)
Hash identifier: F7q5w0uD+1phXGwFSY1Ocm/iyASSxgK75VG8uXhz1Wk=
Subject key identifier: 1C:13:EC:36:1D:D2:2B:8E:7F:0F:18:53:65:E7:7C:06:10:A2:4E:86
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019CFDFF40D309194D51D46FF092C4935455
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HBPsNh3SK45_DxhTZed8BhCiToY.roa
Signing time: Tue 17 Mar 2026 22:51:29 +0000
ROA not before: Tue 17 Mar 2026 22:51:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210703
IP address blocks: 104.239.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:ff:40:d3:09:19:4d:51:d4:6f:f0:92:c4:93:54:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 17 22:51:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c13ec361dd22b8e7f0f185365e77c0610a24e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:81:91:67:58:82:e7:9d:e1:e0:2a:cf:c0:
ff:e3:5a:b2:01:00:86:d2:23:c6:6e:76:53:73:89:
2e:13:f0:ad:29:b1:0d:17:62:8c:be:0c:df:45:45:
64:de:a1:50:ab:a2:1a:59:b7:e6:2d:bd:39:ae:d2:
c8:00:3d:c8:33:7a:32:1b:6c:2f:c7:f6:c2:ab:55:
a4:49:be:99:eb:c9:2b:04:9e:30:f7:38:75:f4:83:
52:6d:a0:ee:42:cd:bb:a2:73:cc:1e:bd:4f:51:6d:
f0:33:31:69:22:40:26:ac:21:d3:15:23:71:95:d1:
34:a9:5b:17:d5:f7:55:7f:3a:fe:74:70:65:53:f6:
fd:dd:ca:9a:ef:ea:f6:2f:f3:7c:c9:59:b8:93:b1:
eb:0c:d3:6f:23:04:5e:26:a9:80:0f:16:67:7a:7d:
28:78:80:10:28:84:92:2c:5e:f9:b6:e7:9f:17:92:
bb:35:23:75:69:f0:4e:10:9d:da:ee:7f:31:75:95:
85:11:9c:66:ca:00:6b:9f:d4:de:98:20:65:0f:d7:
17:83:55:a4:0e:c4:2c:3a:fe:c7:a2:b2:a7:ff:6b:
f6:7e:52:e5:9f:46:0c:6a:de:3b:f4:16:ce:f0:f2:
97:13:88:ad:84:4b:e2:a1:ef:6d:71:ef:c6:d6:b5:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:13:EC:36:1D:D2:2B:8E:7F:0F:18:53:65:E7:7C:06:10:A2:4E:86
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HBPsNh3SK45_DxhTZed8BhCiToY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.66.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c2:f3:47:bf:82:e4:98:64:58:43:2d:91:6c:f2:c2:36:87:
7c:de:4c:b0:17:71:93:f5:4a:a9:14:96:80:a9:09:7d:c1:ab:
a6:f0:0b:cb:fe:f5:65:0a:9a:59:ed:0a:a7:90:31:75:53:23:
17:18:6c:8d:14:a9:ec:dd:88:0a:a9:71:7b:98:cc:53:1a:b5:
9f:69:99:2e:ef:f0:86:aa:3c:1f:94:12:8c:b6:26:48:ec:95:
dd:f3:33:9a:e5:44:da:63:84:5d:73:c6:ed:c7:0b:39:d4:9d:
ed:39:b8:67:16:fe:0d:f7:a3:46:2d:93:69:d0:05:2a:b2:64:
56:4c:9f:5e:11:d3:89:61:f2:85:43:db:8c:5a:82:d5:af:85:
47:03:a7:c2:76:66:50:01:c0:bb:c3:df:36:a9:a7:7a:b7:0b:
5b:ee:21:6a:16:c7:d8:19:d1:4b:87:f8:d8:74:b4:97:ad:6d:
78:1b:85:c3:83:d5:d6:a1:6a:a3:a6:a6:90:98:16:3e:d2:3a:
c8:63:82:bc:16:4f:1a:be:d4:cc:7b:a6:99:ca:b4:03:13:0e:
3a:b2:84:82:9c:26:25:ac:f8:5c:a3:d7:8d:52:a9:17:d7:b5:
9e:55:95:84:b0:b4:76:ae:11:11:36:b7:39:e5:4c:a2:b2:1a:
af:6e:09:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz9/0DTCRlNUdRv8JLEk1RVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwMzE3MjI1MTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzEzZWMzNjFkZDIyYjhlN2YwZjE4NTM2NWU3N2MwNjEwYTI0ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNCBkWdYgued4eAqz8D/41qyAQCG
0iPGbnZTc4kuE/CtKbENF2KMvgzfRUVk3qFQq6IaWbfmLb05rtLIAD3IM3oyG2wv
x/bCq1WkSb6Z68krBJ4w9zh19INSbaDuQs27onPMHr1PUW3wMzFpIkAmrCHTFSNx
ldE0qVsX1fdVfzr+dHBlU/b93cqa7+r2L/N8yVm4k7HrDNNvIwReJqmADxZnen0o
eIAQKISSLF75tuefF5K7NSN1afBOEJ3a7n8xdZWFEZxmygBrn9TemCBlD9cXg1Wk
DsQsOv7HorKn/2v2flLln0YMat479BbO8PKXE4ithEvioe9tce/G1rU4OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwT7DYd0iuOfw8YU2XnfAYQok6GMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvSEJQc05oM1NLNDVfRHhoVFplZDhCaENpVG9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO9CMA0G
CSqGSIb3DQEBCwUAA4IBAQAIwvNHv4LkmGRYQy2RbPLCNod83kywF3GT9UqpFJaA
qQl9waum8AvL/vVlCppZ7QqnkDF1UyMXGGyNFKns3YgKqXF7mMxTGrWfaZku7/CG
qjwflBKMtiZI7JXd8zOa5UTaY4Rdc8btxws51J3tObhnFv4N96NGLZNp0AUqsmRW
TJ9eEdOJYfKFQ9uMWoLVr4VHA6fCdmZQAcC7w982qad6twtb7iFqFsfYGdFLh/jY
dLSXrW14G4XDg9XWoWqjpqaQmBY+0jrIY4K8Fk8avtTMe6aZyrQDEw46soSCnCYl
rPhco9eNUqkX17WeVZWEsLR2rhERNrc55Uyishqvbglr
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:58 2026 by rpki-client