Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/HSv_t_XNzaY-MZqg9GfwsCxeyCA.roa
File: HSv_t_XNzaY-MZqg9GfwsCxeyCA.roa (raw, json)
Hash identifier: OSs6me7nTwdi61YEFALJw/HfhuqV/20axFQaKISwp8g=
Subject key identifier: 1D:2B:FF:B7:F5:CD:CD:A6:3E:31:9A:A0:F4:67:F0:B0:2C:5E:C8:20
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1C0D89DA8F984B43E93B2D024170B9F6A
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/HSv_t_XNzaY-MZqg9GfwsCxeyCA.roa
Signing time: Mon 09 Nov 2026 15:06:23 +0000
ROA not before: Mon 09 Nov 2026 15:06:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 138.249.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:d8:9d:a8:f9:84:b4:3e:93:b2:d0:24:17:0b:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 9 15:06:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d2bffb7f5cdcda63e319aa0f467f0b02c5ec820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:21:8f:59:f1:f6:e7:bc:b1:6e:09:28:07:
bd:09:a9:98:a9:ff:86:84:f8:2d:31:2a:01:ed:5c:
31:1b:49:fa:26:9a:88:8c:1c:77:77:d6:2f:9d:f1:
19:17:e1:b4:4f:c3:a5:89:65:57:6d:f0:16:5d:7e:
7d:56:d2:5a:3e:35:b2:4c:44:c8:94:3f:6f:3c:5b:
00:31:df:5e:c6:81:b8:3a:a8:80:af:49:f7:c5:80:
19:c0:2b:9d:5d:ef:55:72:71:d6:ee:00:06:93:bc:
7e:80:54:4a:ba:28:68:a9:7d:6f:21:dc:1c:16:65:
cd:d5:a4:7d:87:1c:fe:ca:e5:97:7f:e2:8b:34:2a:
94:7e:30:f8:92:86:ff:85:ee:78:fb:f3:b4:59:ad:
dd:7c:9b:40:c7:31:b3:1c:c1:f3:23:a8:d6:b5:51:
5c:76:e7:d0:be:23:8f:b9:5c:d4:c0:72:46:a1:52:
ca:d4:27:47:fb:44:29:2f:d7:23:67:1e:bb:17:1f:
5b:d9:66:aa:8a:4f:b9:fd:87:ae:a8:fb:8e:3d:90:
ac:e3:77:5b:5f:55:48:01:ec:21:7b:9b:1b:75:2e:
cf:e0:34:f6:44:d2:47:e6:fc:9a:0f:b4:06:42:58:
ca:54:ea:e2:33:93:b7:26:8f:b1:61:d2:f6:67:b6:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:FF:B7:F5:CD:CD:A6:3E:31:9A:A0:F4:67:F0:B0:2C:5E:C8:20
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/HSv_t_XNzaY-MZqg9GfwsCxeyCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a3:1b:ef:1b:8a:ff:a5:de:b4:5d:dc:18:8b:9d:45:e1:a4:
8b:2d:44:4b:91:95:1a:38:8e:fd:4c:e5:72:8a:db:81:e5:61:
06:a6:e1:0c:cd:0e:15:94:03:88:ba:04:9b:21:78:ca:4d:c0:
6b:94:34:25:b5:f9:fb:8f:22:74:05:14:fd:c2:50:ca:04:4b:
7c:ee:b7:56:2e:8e:79:a5:2a:5c:91:79:11:70:ce:1b:af:04:
c6:65:ea:ce:f7:17:2a:ca:eb:2c:f5:13:df:e4:4b:0b:29:e4:
d1:ae:a2:8e:d4:02:56:fa:e6:1e:dc:41:ee:9e:8a:e3:d5:bb:
52:85:d7:5a:3b:f3:f6:1e:db:49:c6:ee:d5:b4:c7:c1:5c:f3:
3a:d5:58:42:a9:5e:bc:76:69:f4:3e:73:9e:62:44:a6:fe:71:
5e:46:a1:ef:85:10:d7:70:86:80:73:92:0d:ba:9f:87:40:62:
75:22:13:75:82:1c:27:3b:a5:62:92:39:01:52:6c:3a:1e:a0:
e6:ee:fa:59:3d:ba:82:df:c0:50:ca:ae:76:be:b1:d4:ef:27:
42:cd:2a:17:c0:d0:59:c5:7e:ce:04:1a:db:d9:60:b3:7b:05:
d2:b4:23:8c:6d:ea:3a:52:6d:53:b2:85:c5:21:fd:7e:d2:0a:
58:ba:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:50 2026 by rpki-client