Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/H1c0Db3vSJrHzmOGub79UpP1owI.roa
File: H1c0Db3vSJrHzmOGub79UpP1owI.roa (raw, json)
Hash identifier: EE6YKVS4tKi55uvMazz3Vr23Cg1YzE/w0zh0LZopADc=
Subject key identifier: 1F:57:34:0D:BD:EF:48:9A:C7:CE:63:86:B9:BE:FD:52:93:F5:A3:02
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019C097E7025AC5FF8E778E6BFD37AD9DC9C
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/H1c0Db3vSJrHzmOGub79UpP1owI.roa
Signing time: Thu 29 Jan 2026 11:23:27 +0000
ROA not before: Thu 29 Jan 2026 11:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210293
IP address blocks: 85.132.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:09:7e:70:25:ac:5f:f8:e7:78:e6:bf:d3:7a:d9:dc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jan 29 11:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f57340dbdef489ac7ce6386b9befd5293f5a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:a4:57:41:a1:a5:64:3d:6d:06:c7:c7:87:
99:8f:3d:20:92:6b:ba:85:16:a3:a7:1c:9b:a3:73:
10:46:9b:61:c2:d1:e5:56:a5:3b:00:7c:83:01:d4:
1e:df:b7:24:73:86:53:f5:00:54:de:d3:c2:bd:97:
1e:0f:88:ea:6f:e6:c3:2b:9f:70:2f:67:3c:7a:0a:
5b:ed:90:de:8e:33:bf:37:fc:e1:76:be:df:ce:88:
bc:51:ec:50:86:b5:a1:c5:7c:e4:c5:86:f1:88:55:
f1:32:28:1f:4e:1e:55:84:4a:9a:30:6a:4b:c2:b0:
f5:e2:a9:64:ae:13:80:e6:53:d9:bc:73:db:d3:4e:
a9:71:b9:81:59:be:27:bc:6d:dd:d0:0b:89:ec:36:
82:3b:1d:74:9b:8d:5b:5f:88:2c:80:4f:ae:85:b3:
85:0c:35:1c:e6:c3:4a:d7:ba:1e:f8:ad:38:b2:af:
7e:69:1c:ff:e1:0a:d7:5a:be:d2:df:ab:ed:57:f2:
88:1e:cc:23:be:08:10:95:a8:aa:46:e0:50:eb:09:
92:e8:df:78:89:ec:e9:39:4a:77:18:bd:ab:5e:75:
cf:96:07:30:c2:76:c5:a7:8d:3a:d0:ca:bb:ba:c5:
bb:bb:5f:31:0c:ce:9f:9c:36:76:ce:40:ff:2d:35:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:34:0D:BD:EF:48:9A:C7:CE:63:86:B9:BE:FD:52:93:F5:A3:02
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/H1c0Db3vSJrHzmOGub79UpP1owI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.41.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:23:ab:3c:b3:b7:0e:6a:95:a7:bb:c2:fd:c1:9c:4b:71:5c:
42:be:c9:b4:5e:c1:72:8e:f8:69:e3:b4:18:c5:5b:92:95:59:
f0:b8:1a:7f:e0:4e:9e:ab:33:b1:99:58:29:28:85:43:93:5d:
ce:86:8c:3e:0f:9e:e5:ed:6a:c8:38:b4:1f:ce:11:0d:96:62:
d7:03:4b:02:f8:05:f8:4c:bd:f2:a2:97:f5:45:ff:8e:af:3e:
79:0c:74:31:de:c6:d9:d2:fd:85:84:a4:25:9d:56:3d:62:8b:
b7:f8:2e:15:bf:2a:54:09:4b:90:45:97:fb:5b:11:66:9f:67:
ed:bd:dd:02:a0:e5:e0:5b:c1:67:0f:9e:92:68:1a:c2:50:82:
74:59:36:10:15:54:91:a4:62:80:11:a3:ed:6d:f4:1b:08:71:
c1:91:48:23:0d:c7:ac:fb:ae:d0:76:18:26:28:82:bd:81:3e:
ea:f8:38:ad:06:6a:03:63:11:e4:28:b1:3c:6d:e5:fc:f3:cf:
1d:ae:98:e5:23:4f:6f:7a:08:bd:fa:7a:8b:a7:d8:f7:3f:70:
e1:6b:ab:8c:2f:09:50:39:1b:18:12:fb:cf:6c:73:94:ce:a5:
55:d9:22:ab:43:5c:04:46:34:ee:81:7b:8b:e6:13:ed:3e:88:
8b:44:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:22 2026 by rpki-client