Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa
File: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (raw, json)
Hash identifier: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=
Subject key identifier: 44:7C:4E:5E:16:C0:0D:46:C2:FE:82:85:E0:F4:3A:B0:B7:FC:7F:D5
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019EFF0123DA8FA241E9D62F76837184E547
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa
Signing time: Thu 25 Jun 2026 13:38:45 +0000
ROA not before: Thu 25 Jun 2026 13:38:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1836
IP address blocks: 194.169.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:01:23:da:8f:a2:41:e9:d6:2f:76:83:71:84:e5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Jun 25 13:38:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=447c4e5e16c00d46c2fe8285e0f43ab0b7fc7fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:57:37:a9:f8:f4:1a:7d:31:b4:e0:e0:e4:
39:65:54:f5:2e:e1:1c:57:82:39:24:f3:5a:83:cc:
8a:31:13:19:5d:55:84:22:7e:87:ba:6b:ed:63:76:
d0:4a:86:9f:ac:96:03:d5:54:82:94:03:9e:d9:bb:
91:6f:71:ce:39:15:f5:c3:0c:2b:f5:cc:68:d8:ee:
10:0d:0c:f8:bc:ef:23:8e:f0:a3:e9:ed:35:61:30:
90:a3:36:df:ed:0f:03:aa:8d:f3:20:28:a1:93:8a:
d4:c0:89:3b:2a:c8:d2:47:75:cc:9e:20:38:27:92:
77:6c:55:9b:ae:18:ee:76:d4:58:35:0d:5d:56:0e:
82:b9:1d:80:24:4d:2b:b9:96:0a:c1:fe:88:cb:fe:
0a:a6:22:d0:ea:93:77:cf:1f:5a:22:e9:60:d8:f8:
28:ce:04:cc:70:b5:ec:0b:47:79:1a:7b:7d:60:b5:
3c:f5:58:b2:15:9d:28:ce:c8:18:a9:8c:c9:34:45:
6e:4b:45:a1:b2:84:28:63:aa:d7:63:35:0e:a0:8e:
2c:3d:7d:b6:23:09:9b:c9:67:42:84:b8:e5:67:25:
5b:0e:8b:5c:b6:b1:00:3b:65:5b:56:a8:5d:71:d4:
7a:50:1a:7a:bf:ee:81:ff:ca:0a:ed:b6:16:9c:80:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:4E:5E:16:C0:0D:46:C2:FE:82:85:E0:F4:3A:B0:B7:FC:7F:D5
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.158.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dc:86:ff:4e:70:e2:51:45:d7:fd:e4:3c:88:c5:9b:68:1e:
88:63:ae:75:dc:1c:83:96:35:89:80:81:0d:69:74:e9:b4:c6:
34:81:53:30:65:ee:46:7c:59:1a:28:5f:8d:de:b1:fd:0a:b6:
9b:5f:de:c8:21:b7:3e:1e:0a:08:0e:b2:7f:62:b7:8f:f9:ab:
ba:7b:ac:29:4b:82:18:58:ab:a3:aa:e1:be:d0:3b:35:80:29:
d8:f6:61:ed:e5:52:6f:be:05:10:1f:3d:0e:22:65:04:26:5c:
d2:f4:87:ab:6b:05:0a:f6:03:9e:38:bb:3a:02:41:34:96:1a:
14:83:2a:94:7f:03:6e:25:61:7e:44:3e:fe:19:8d:38:25:fb:
c3:4e:ee:6c:6b:02:21:be:50:66:9e:ae:51:55:62:7d:99:8a:
00:a0:79:75:b8:62:bc:6a:a5:ce:d1:ff:f9:a9:e6:7f:1e:d6:
41:fb:2b:84:94:2c:9f:14:e4:c0:e0:ba:84:b7:e0:9b:b9:a3:
0a:ca:1d:cb:f8:21:cf:8c:ce:4c:11:b4:6d:88:c3:24:54:f9:
6f:eb:e7:ec:e9:9b:eb:2c:c2:d6:04:76:60:06:b3:5b:1c:5f:
04:79:d5:d6:41:d3:95:0d:b3:5d:78:f1:97:72:ca:0a:a3:e1:
af:1b:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:58 2026 by rpki-client