Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/HcziY21hi7J6MOALkXuLW-8dQBA.roa
File: HcziY21hi7J6MOALkXuLW-8dQBA.roa (raw, json)
Hash identifier: Q9MnrMlbe/PWBPY4vnR/o3dEI9xeR1Ry8RTMb0MkLlA=
Subject key identifier: 1D:CC:E2:63:6D:61:8B:B2:7A:30:E0:0B:91:7B:8B:5B:EF:1D:40:10
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 019D095CE0486F91ED0CAB33DA68373B37D4
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/HcziY21hi7J6MOALkXuLW-8dQBA.roa
Signing time: Fri 20 Mar 2026 03:49:34 +0000
ROA not before: Fri 20 Mar 2026 03:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211096
IP address blocks: 95.156.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:5c:e0:48:6f:91:ed:0c:ab:33:da:68:37:3b:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Mar 20 03:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dcce2636d618bb27a30e00b917b8b5bef1d4010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:c0:ad:5b:1f:57:18:54:48:dd:18:fd:7b:
d7:3a:c3:c2:18:52:c9:83:38:ea:13:2e:e7:85:05:
00:17:77:b8:54:c2:4d:6f:e0:e5:e7:e4:5a:56:01:
a5:69:2f:8c:1f:ae:ac:c0:83:ac:39:a8:df:ff:07:
98:d4:bb:32:37:75:e7:f7:5b:fe:a6:7a:a0:84:41:
6f:33:9b:1a:bb:aa:77:f6:78:a1:8c:15:06:e3:71:
55:74:c5:5b:97:51:9b:de:60:6d:56:f8:7f:60:52:
69:e3:07:ce:dc:76:e8:05:3f:91:78:7d:32:af:f3:
c7:fc:08:a1:b4:d0:30:69:07:30:10:31:d8:35:75:
e2:e0:9d:c3:38:c1:46:7b:f8:46:37:8f:d0:32:1e:
b2:6e:77:38:97:93:a6:7a:d8:22:5e:95:1c:56:ab:
10:33:e2:75:42:4c:52:77:c2:c4:07:a5:4f:06:66:
47:9b:48:61:94:cd:69:b6:3e:41:13:42:7b:63:c3:
21:bb:3b:a5:f5:46:27:b1:b0:dc:a2:0a:6f:f6:2f:
61:20:94:38:d8:02:a4:63:9d:fa:3b:e8:af:3b:d5:
7b:22:bd:d9:be:66:cb:56:7a:0c:a8:ec:10:1f:41:
64:56:66:2e:f1:26:23:b2:3d:47:af:94:3a:e0:6d:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CC:E2:63:6D:61:8B:B2:7A:30:E0:0B:91:7B:8B:5B:EF:1D:40:10
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/HcziY21hi7J6MOALkXuLW-8dQBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.156.203.0/24
Signature Algorithm: sha256WithRSAEncryption
79:63:b0:e8:07:ce:1f:a0:b3:68:c6:fe:f9:b6:e9:7f:c1:fa:
b2:2a:92:71:49:2b:30:0e:5c:58:6f:82:13:98:db:1b:0a:00:
9f:34:b0:02:cc:9c:59:dc:bf:eb:7a:7c:d8:4c:47:9f:32:37:
9c:01:d7:a7:5c:66:32:09:a8:0c:a9:e8:88:2c:a1:a3:dd:82:
79:2d:b8:1a:63:41:85:c6:19:49:1f:69:3b:08:48:b0:ff:d8:
8d:39:7c:1d:55:de:56:55:bd:cc:76:65:93:ec:14:1c:2e:19:
c3:a3:b3:6b:21:b1:15:6a:db:05:00:a2:85:5c:d0:42:a9:c3:
f7:8f:95:c7:24:d2:52:f4:b7:9a:d3:f9:3a:6b:37:4b:ca:20:
ec:32:29:11:98:f6:ae:a9:3e:49:7d:d2:03:79:4a:06:9f:5e:
6f:66:71:c1:41:fb:c3:50:db:b9:5a:cb:cf:bc:55:14:b9:7e:
7f:f3:1f:22:49:97:10:a7:63:bb:a8:ec:8b:2c:af:61:74:34:
39:0c:c2:27:71:da:8e:5d:22:05:8e:17:51:bf:a5:e2:4a:0f:
72:7e:1a:2a:a8:4d:76:bf:e4:3e:55:c0:95:8a:43:47:8c:9e:
2a:49:0d:a6:3f:1d:c8:90:c8:c0:e3:a3:0a:bc:7a:f4:7c:e3:
21:b6:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:17 2026 by rpki-client