Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hDtIek-lov51LGOQRS0hDOq9W3E.roa
File: hDtIek-lov51LGOQRS0hDOq9W3E.roa (raw, json)
Hash identifier: oKj5sT0C5p7FkFRBgMCgLzvIeMtZ+mTv0P9clU9xEM4=
Subject key identifier: 84:3B:48:7A:4F:A5:A2:FE:75:2C:63:90:45:2D:21:0C:EA:BD:5B:71
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A0811EE56A4A304E347878E9C05207D309
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hDtIek-lov51LGOQRS0hDOq9W3E.roa
Signing time: Tue 08 Sep 2026 13:04:40 +0000
ROA not before: Tue 08 Sep 2026 13:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 201.3.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:1e:e5:6a:4a:30:4e:34:78:78:e9:c0:52:07:d3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 8 13:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=843b487a4fa5a2fe752c6390452d210ceabd5b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:e9:ac:6a:5e:9f:20:c4:53:7e:d7:d9:54:
c5:71:97:70:9e:24:f1:92:56:ef:e4:cd:9b:c2:8a:
b0:42:7a:5c:b1:5b:4f:1c:bc:5b:43:11:50:ff:ff:
22:14:15:90:7f:90:43:12:9b:b6:a0:3a:72:6a:99:
91:b5:89:43:a1:1c:58:de:fd:35:39:13:ad:32:3b:
cb:b7:9c:45:d6:14:a9:23:65:c5:98:a1:bf:b4:3c:
8b:c3:17:3a:09:8a:11:d7:f0:f8:3b:45:bd:fd:50:
d4:57:83:2a:55:93:8c:71:5a:26:3a:52:10:5c:38:
71:58:03:ac:24:35:3f:cc:7d:42:30:2f:7c:dd:9f:
61:36:0b:3d:ee:bf:55:9b:d0:f9:17:06:d4:ef:d6:
06:80:d8:8b:63:6f:9a:6b:eb:5b:0a:39:33:25:81:
e0:97:1e:45:01:2e:d9:5d:1a:89:59:ef:72:5e:fc:
d3:ea:01:87:66:29:46:70:73:5e:b5:64:b2:b0:b4:
79:5b:45:07:6e:57:58:f3:c1:46:d7:3a:dc:79:33:
e3:eb:4f:91:3f:bb:f2:ea:47:5d:81:44:07:f4:64:
5f:4c:fa:e6:e8:8f:50:e6:d2:c4:16:15:42:8d:bf:
ef:a7:14:ad:ba:34:4b:0e:b7:cc:98:9a:d0:d9:e3:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:48:7A:4F:A5:A2:FE:75:2C:63:90:45:2D:21:0C:EA:BD:5B:71
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/hDtIek-lov51LGOQRS0hDOq9W3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.224.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f8:88:88:77:20:fa:65:91:20:a5:ac:b7:84:ab:2b:1d:3b:
38:10:b7:53:60:a1:a2:43:54:15:6b:46:75:13:02:45:ee:54:
b6:8c:50:ca:07:90:cf:55:a7:d2:f7:81:5f:60:a4:3e:d5:7e:
24:d9:70:5f:1d:a4:e2:aa:c2:9d:32:54:02:80:1c:e5:91:e2:
82:50:a4:01:38:af:ef:ba:27:b7:f5:97:8a:04:ed:22:89:96:
5e:8b:b7:96:46:01:18:f0:f1:1e:1e:3d:4d:6c:45:f2:7b:ac:
e2:1a:d4:0c:db:e8:65:c7:d4:6f:06:9c:25:28:d5:f4:0b:e6:
43:da:f8:71:ee:41:bb:a5:0a:63:74:18:e8:98:d4:e0:e7:4b:
ca:20:94:a5:54:16:27:32:48:ef:fe:a3:19:81:68:2e:46:3a:
2f:8e:e5:e3:8a:aa:4b:31:f8:7c:34:51:c1:9a:3a:e1:6c:1e:
14:7e:d9:da:c5:38:72:d7:3a:47:f3:2d:fd:fa:36:ae:a2:40:
5d:db:8f:23:41:3e:51:7f:9b:06:74:de:3c:0e:cb:98:a6:88:
82:90:aa:75:f9:bd:67:25:76:d6:48:fc:09:d5:5c:6d:d0:b9:
2b:ff:62:0f:60:d1:8a:66:4c:e5:cc:8f:4a:83:b7:7e:f0:c8:
83:7d:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:51:23 2026 by rpki-client