Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/HWj5YLePxvuR3iN4rU9_uCh3Fy8.roa
File: HWj5YLePxvuR3iN4rU9_uCh3Fy8.roa (raw, json)
Hash identifier: rLNNF+6DGd9/OuWgu3KLQREGOg76p7jTrlZPVgztPPI=
Subject key identifier: 1D:68:F9:60:B7:8F:C6:FB:91:DE:23:78:AD:4F:7F:B8:28:77:17:2F
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 01A1B22BF9B739415AB5B6B9A1D453A198F3
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/HWj5YLePxvuR3iN4rU9_uCh3Fy8.roa
Signing time: Fri 06 Nov 2026 18:43:08 +0000
ROA not before: Fri 06 Nov 2026 18:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 195.82.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:2b:f9:b7:39:41:5a:b5:b6:b9:a1:d4:53:a1:98:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Nov 6 18:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d68f960b78fc6fb91de2378ad4f7fb82877172f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:20:2b:33:ef:ec:d7:f4:f6:5b:f7:a0:9b:d4:
b3:e2:49:4c:a0:40:0a:ae:eb:33:3a:fe:08:7c:dd:
11:bd:99:64:a2:38:c6:49:81:6b:ad:3d:72:bc:ad:
97:fd:43:69:84:da:1e:be:22:ae:21:46:02:ce:d0:
9d:c1:c1:7b:ff:05:a1:aa:32:53:08:fd:3f:67:8a:
b4:17:8d:eb:33:32:e2:92:a8:a6:57:da:19:8d:f8:
ae:52:8b:1d:83:cc:52:f3:45:77:97:f0:0c:f9:4f:
3f:1d:b2:ce:88:a1:39:21:25:1d:4a:87:6d:f3:63:
44:4a:8f:69:43:a5:f0:bf:94:18:91:d7:31:91:30:
1e:65:09:98:d5:d4:21:4b:16:ed:d6:db:d1:83:1c:
83:a8:af:10:34:1b:d9:19:cd:68:ca:5e:fd:a2:79:
0a:ea:97:38:ba:50:28:8e:99:c7:bb:f1:d2:f9:e3:
08:a0:81:bd:69:b4:67:6b:94:72:f7:f7:c3:28:11:
9e:2e:91:01:e3:1f:f5:98:3b:35:4f:33:7d:4e:1b:
40:6e:94:9f:55:7f:64:1b:e2:85:17:38:bf:97:5b:
46:c1:a9:23:e7:2d:28:91:dd:48:80:6a:94:ac:79:
2a:a0:c3:00:6f:4a:01:eb:8f:fc:68:bb:54:db:2b:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:F9:60:B7:8F:C6:FB:91:DE:23:78:AD:4F:7F:B8:28:77:17:2F
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/HWj5YLePxvuR3iN4rU9_uCh3Fy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.146.0/24
Signature Algorithm: sha256WithRSAEncryption
57:06:39:08:97:84:03:d4:83:57:64:b5:e1:64:d6:cd:37:c3:
3c:52:dc:ea:27:c3:8d:99:72:94:e6:a7:62:8e:cc:c0:35:6f:
db:d0:a2:4f:54:e8:07:05:be:13:88:4d:f7:85:75:e0:d6:21:
e2:e2:ab:4e:ae:1a:bf:e8:10:cb:b9:a1:5d:9d:65:3a:e0:6a:
f4:5e:80:9d:a8:30:dc:4b:c3:9a:5c:7d:9f:c9:6d:0d:8a:2e:
d5:26:e4:8e:f4:91:39:09:b5:dd:cf:46:bb:31:1b:b4:04:8b:
a9:59:5f:c4:f6:e4:7a:f2:d4:c2:8f:71:e4:1a:1f:98:16:3b:
09:4a:93:38:28:4b:9c:4d:e1:e4:3e:23:c9:02:b3:5c:c8:f1:
61:7e:ab:e4:9a:7e:32:a0:13:8c:41:b7:80:2f:49:5e:a1:3c:
9e:86:6e:6b:ae:f7:ac:5e:42:92:a6:7d:1b:2d:08:07:de:cc:
80:b5:8f:b3:05:a2:42:e9:14:19:44:5f:6b:95:38:d3:2c:6b:
02:39:c8:5b:0c:8c:6f:9d:bc:b0:02:39:0f:d1:18:fa:3d:6f:
09:f4:1e:c6:49:57:98:87:0a:20:0d:b6:86:cd:5c:20:5a:8d:
74:79:8c:1b:a1:a9:a8:6d:c3:e7:8d:88:d1:fc:87:25:41:6f:
94:17:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:58 2026 by rpki-client