Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/HpozfWSyymsia54p2HJ2tEgSK_E.roa
File: HpozfWSyymsia54p2HJ2tEgSK_E.roa (raw, json)
Hash identifier: e6p/ARizQ8W8ejvfvFNvou7uYIT43NAz42TTWvmqlQM=
Subject key identifier: 1E:9A:33:7D:64:B2:CA:6B:22:6B:9E:29:D8:72:76:B4:48:12:2B:F1
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 019EFA1535332CD6A26477979DCD9C7932EB
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/HpozfWSyymsia54p2HJ2tEgSK_E.roa
Signing time: Wed 24 Jun 2026 14:42:34 +0000
ROA not before: Wed 24 Jun 2026 14:42:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 195.93.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:15:35:33:2c:d6:a2:64:77:97:9d:cd:9c:79:32:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Jun 24 14:42:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e9a337d64b2ca6b226b9e29d87276b448122bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:f9:ce:53:b5:c2:67:ea:da:dc:79:ac:98:
d5:9d:04:1b:99:4a:ee:16:5c:f9:c3:b9:76:03:69:
8b:db:1a:2d:3f:7a:57:6d:9b:42:6f:c4:9d:91:07:
58:1f:f9:46:9d:eb:bc:24:51:c0:b5:85:fd:c3:4c:
eb:80:16:fa:e6:b5:27:05:69:3b:6f:3d:dc:d7:c3:
6d:af:b7:0f:31:ce:49:a5:13:90:d9:db:56:29:d2:
53:92:b5:2b:39:e3:b3:fd:dd:6d:a5:8c:1a:2e:9e:
a7:a1:8e:a7:29:b9:0c:4f:e9:10:2f:b2:2b:6e:96:
b5:df:9a:9d:2c:c9:01:10:e1:aa:78:f4:00:90:d0:
dd:88:e9:95:2e:55:ed:ce:50:31:ff:42:3d:7d:d7:
b0:ee:7a:b0:1d:09:56:84:17:c6:23:4e:cf:fb:e4:
db:53:5c:af:1b:8a:a9:0d:5c:14:72:03:4a:82:fe:
ef:8f:e1:60:a5:e4:ca:92:b9:95:0c:7e:f6:96:fd:
68:91:6f:e9:00:48:d1:35:6c:46:82:1c:8b:fd:2c:
c9:31:6c:6c:3a:aa:f3:30:ff:e4:4e:bd:ef:8c:5d:
d3:ae:2b:90:0c:44:35:b5:a5:e3:eb:fc:4c:cb:85:
ec:67:d6:10:b2:2d:83:94:f6:cd:3a:4a:52:99:85:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9A:33:7D:64:B2:CA:6B:22:6B:9E:29:D8:72:76:B4:48:12:2B:F1
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/HpozfWSyymsia54p2HJ2tEgSK_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2e:94:75:88:1e:49:f7:7f:25:27:eb:41:01:40:d4:87:c4:
16:3c:0d:ad:49:b1:d5:64:57:94:ae:bf:5a:eb:18:29:cc:cf:
fc:3b:b5:85:2d:7b:64:c5:22:ae:19:ee:6d:52:0b:7f:3e:82:
f5:d4:ef:87:d8:18:ad:00:9a:48:45:43:1a:5e:1b:0f:e7:0e:
c4:32:43:84:07:b9:38:78:b3:c0:96:c6:17:79:e3:1e:0e:68:
d6:d2:07:06:ec:8f:27:7d:b1:af:4c:0a:01:a6:48:84:ee:bc:
6a:59:e8:17:51:3a:d8:0c:b5:34:22:97:af:02:93:f3:57:db:
58:1f:6b:bc:2a:e8:57:37:b5:0f:c5:c8:d5:60:33:1e:97:c4:
c7:53:73:91:55:21:04:2c:60:05:c6:82:75:3d:a0:fe:b2:a6:
31:35:85:08:b3:a9:ad:a4:9b:5b:b1:1b:8b:8e:4e:5e:77:7e:
48:2c:e8:8c:44:9b:d6:aa:b9:ec:e6:6d:e8:5c:55:55:cf:02:
bc:6c:56:91:4e:45:e0:49:8e:bd:87:73:e6:15:86:8e:1c:40:
ec:52:c5:02:9e:b6:84:ed:7a:f9:14:1b:a0:84:bd:38:ae:02:
78:38:f0:02:32:ea:66:8e:22:8f:5b:b0:9c:8a:66:67:01:35:
fc:f8:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:32 2026 by rpki-client