Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/H7Um90qEn7oES_8eVEV-EydepKw.roa
File: H7Um90qEn7oES_8eVEV-EydepKw.roa (raw, json)
Hash identifier: uXIpwOpRUtEWm0y8N2oH6YuuPVDg6oC9vjH03Grr4gE=
Subject key identifier: 1F:B5:26:F7:4A:84:9F:BA:04:4B:FF:1E:54:45:7E:13:27:5E:A4:AC
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F1CE94B3F6986F8513E589963E1460D1A
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/H7Um90qEn7oES_8eVEV-EydepKw.roa
Signing time: Wed 01 Jul 2026 09:01:19 +0000
ROA not before: Wed 01 Jul 2026 09:01:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 94.184.6.0/24 maxlen: 24
94.184.11.0/24 maxlen: 24
94.184.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:e9:4b:3f:69:86:f8:51:3e:58:99:63:e1:46:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 1 09:01:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fb526f74a849fba044bff1e54457e13275ea4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:1f:74:b3:d2:93:22:cd:9a:7e:6b:6d:bc:
05:42:44:e3:51:6a:25:da:9f:82:16:6c:cb:72:86:
32:44:a2:3d:e9:bc:78:5f:43:27:32:78:a4:02:aa:
bf:41:86:94:d3:69:bd:30:c2:f8:2d:c3:c1:da:24:
be:74:ce:16:59:c1:fe:94:88:c4:1a:26:03:55:ef:
a9:5e:90:b5:32:b2:37:d6:48:09:41:b0:81:96:64:
d1:02:60:c8:9a:2d:d9:34:15:0d:0b:65:9d:05:33:
c8:8a:b3:0a:ac:2f:31:34:f8:26:af:b6:e7:53:0d:
e0:d3:1b:89:4b:ee:f1:2a:a5:42:b8:5a:de:b6:cf:
41:f2:6b:85:39:64:1a:1a:86:08:a7:06:c6:af:b0:
cf:3d:37:c8:19:56:04:e7:1b:91:c2:d7:bf:0e:c2:
1e:c6:c9:99:a4:53:4b:94:a4:5c:ac:5b:b3:9a:e8:
ef:44:8b:bd:60:66:18:20:56:7f:ef:4c:b1:f2:38:
0b:64:46:37:8e:fc:63:01:fb:b2:3e:02:48:4d:8c:
77:17:48:8e:05:31:18:cf:bf:99:46:ed:e6:cd:ab:
71:57:a5:ed:db:00:ac:dd:7a:9b:94:f0:c1:84:5c:
a7:61:42:4b:9d:6e:44:63:7f:1e:c2:d2:f5:8b:5d:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B5:26:F7:4A:84:9F:BA:04:4B:FF:1E:54:45:7E:13:27:5E:A4:AC
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/H7Um90qEn7oES_8eVEV-EydepKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.6.0/24
94.184.11.0-94.184.12.255
Signature Algorithm: sha256WithRSAEncryption
86:22:f8:e8:0e:80:7f:56:11:80:25:a2:3f:e2:9a:3f:b3:26:
68:60:58:65:a5:10:a5:ac:5c:ae:58:a9:8f:32:7b:0c:0d:0d:
c0:d5:e3:25:1f:56:69:db:4b:67:87:4b:de:4b:73:4a:69:ec:
fa:8a:3e:1b:03:fb:72:7b:08:4d:fe:db:75:5a:66:4d:bb:b3:
ac:4f:2f:ac:1e:cd:18:60:b6:9e:cd:2f:a1:ea:bd:8d:23:8a:
c1:10:2f:c7:3d:b0:97:22:c6:51:4b:75:5a:fa:d5:85:74:d2:
21:5f:83:a7:83:90:ce:1c:42:03:cf:0a:a8:63:2c:5e:22:2c:
af:d3:21:c3:b2:6a:47:ea:93:00:2e:ac:ab:e0:6b:60:f3:5b:
59:a3:2e:26:db:7e:b3:df:09:fa:a8:58:6d:05:c4:3f:8b:8e:
41:e3:11:2f:aa:f6:42:01:a5:fc:87:1e:2c:ac:7d:b1:44:40:
a9:89:6c:20:b2:3c:22:4d:4b:51:03:14:b9:e7:e4:e7:ed:6d:
f2:69:13:44:7a:d4:b6:eb:b5:53:90:5e:f3:2f:37:c2:e4:6d:
00:26:79:19:b3:37:92:72:81:7c:bc:f2:a8:13:0a:89:ba:a5:
5f:5b:cf:6d:10:82:2f:e7:d2:11:4b:ee:2e:d1:10:af:73:0c:
ca:18:fa:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:38 2026 by rpki-client