Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HnW6pEElpaWO1deo4DRIIolyH8k.roa
File: HnW6pEElpaWO1deo4DRIIolyH8k.roa (raw, json)
Hash identifier: PlKYlFaqgABemKSaiKXoTEJlS2mlesorps4I4YsxC1U=
Subject key identifier: 1E:75:BA:A4:41:25:A5:A5:8E:D5:D7:A8:E0:34:48:22:89:72:1F:C9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F7E065E3E881974CFA2C7C984517126F1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HnW6pEElpaWO1deo4DRIIolyH8k.roa
Signing time: Mon 20 Jul 2026 05:36:14 +0000
ROA not before: Mon 20 Jul 2026 05:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7488
IP address blocks: 89.42.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:06:5e:3e:88:19:74:cf:a2:c7:c9:84:51:71:26:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 20 05:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e75baa44125a5a58ed5d7a8e034482289721fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:fe:8e:47:1a:c5:49:70:91:5b:c4:bf:c5:
5b:e4:75:59:22:c5:7d:8b:f2:ea:58:68:9e:19:ea:
af:53:9e:e9:ea:92:bb:b1:07:bb:8d:0d:dd:17:cd:
97:3c:16:62:2d:4b:a7:b9:8e:86:49:02:12:d4:01:
e1:b5:3a:ef:8a:1e:e7:90:6e:8f:7f:b6:b8:86:0a:
43:41:2f:c8:2f:d5:3e:fa:e3:be:18:d6:b5:e7:52:
39:c9:f1:ab:42:3d:24:8d:7a:55:51:44:4a:80:cc:
69:ce:06:bc:79:2b:cd:dc:48:49:3f:73:c0:04:68:
61:4b:e2:78:da:15:18:dc:c8:53:a1:f0:c0:fe:76:
0b:2f:1a:15:dc:cd:43:a7:45:bb:d8:cb:9e:6d:e7:
01:eb:56:6d:6d:62:b0:67:fa:34:5e:f0:80:96:32:
52:47:95:54:e3:fd:22:a5:a6:26:c2:8a:a5:1f:c0:
20:09:1c:2a:a3:08:b8:c1:f0:1b:05:12:d2:8e:fa:
20:9d:2a:7b:7f:bb:89:e1:57:24:7f:60:6b:2e:0c:
ca:17:65:b4:57:94:18:dc:c5:1a:c4:14:30:39:09:
de:4e:ce:ba:4d:5f:cb:b5:d0:53:d1:8d:f6:b8:ef:
d2:b4:e2:e9:81:36:b2:93:de:b4:27:ad:45:cb:e5:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:75:BA:A4:41:25:A5:A5:8E:D5:D7:A8:E0:34:48:22:89:72:1F:C9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HnW6pEElpaWO1deo4DRIIolyH8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c0:18:2a:9b:ac:1b:da:e0:f9:a8:3e:d8:05:d3:b4:d3:c3:
01:fe:f1:77:59:f2:4c:c4:aa:60:b7:6d:81:4f:91:3c:fe:35:
3b:3d:43:d7:13:ff:f4:2e:fe:79:8d:27:9e:3f:2a:bd:06:06:
67:90:fc:34:39:c2:07:2c:48:e1:4f:70:0d:07:b1:64:14:63:
ac:39:65:ce:66:c4:4a:c7:e4:61:b4:6c:22:a7:0c:1f:96:5c:
1b:df:b8:55:08:db:7e:35:e4:03:4d:8d:5a:57:3e:09:30:45:
e5:98:ea:16:49:fe:ba:08:75:8c:45:54:1d:91:ca:aa:d0:94:
92:82:36:a3:8f:73:48:12:c5:1c:41:b8:94:2b:ad:2f:b1:73:
17:b3:0a:ca:9b:56:11:dd:9b:b2:49:46:c0:05:12:97:4f:1d:
33:c2:bc:b8:e7:47:cc:a9:62:a3:91:49:99:5b:88:d1:33:4f:
93:d4:71:62:aa:db:f2:c0:73:fb:6f:b8:50:7a:2d:c1:20:95:
be:9b:37:80:30:e4:7d:0c:a1:bd:c7:71:56:65:e4:ed:07:9e:
55:56:13:2f:7e:a7:a1:f3:dd:f2:de:c2:1e:14:5d:03:c4:ed:
52:2e:46:24:d7:e1:d5:55:de:30:64:19:20:a3:6f:df:7e:a7:
2f:59:a8:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9+Bl4+iBl0z6LHyYRRcSbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNzIwMDUzNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTc1YmFhNDQxMjVhNWE1OGVkNWQ3YThlMDM0NDgyMjg5NzIxZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20L+jkcaxUlwkVvEv8Vb5HVZIsV9
i/LqWGieGeqvU57p6pK7sQe7jQ3dF82XPBZiLUunuY6GSQIS1AHhtTrvih7nkG6P
f7a4hgpDQS/IL9U++uO+GNa151I5yfGrQj0kjXpVUURKgMxpzga8eSvN3EhJP3PA
BGhhS+J42hUY3MhTofDA/nYLLxoV3M1Dp0W72MuebecB61ZtbWKwZ/o0XvCAljJS
R5VU4/0ipaYmwoqlH8AgCRwqowi4wfAbBRLSjvognSp7f7uJ4Vckf2BrLgzKF2W0
V5QY3MUaxBQwOQneTs66TV/LtdBT0Y32uO/StOLpgTayk960J61Fy+VffwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB51uqRBJaWljtXXqOA0SCKJch/JMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvSG5XNnBFRWxwYVdPMWRlbzREUklJb2x5SDhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpfMA0G
CSqGSIb3DQEBCwUAA4IBAQA+wBgqm6wb2uD5qD7YBdO008MB/vF3WfJMxKpgt22B
T5E8/jU7PUPXE//0Lv55jSeePyq9BgZnkPw0OcIHLEjhT3ANB7FkFGOsOWXOZsRK
x+RhtGwipwwfllwb37hVCNt+NeQDTY1aVz4JMEXlmOoWSf66CHWMRVQdkcqq0JSS
gjajj3NIEsUcQbiUK60vsXMXswrKm1YR3ZuySUbABRKXTx0zwry450fMqWKjkUmZ
W4jRM0+T1HFiqtvywHP7b7hQei3BIJW+mzeAMOR9DKG9x3FWZeTtB55VVhMvfqeh
893y3sIeFF0DxO1SLkYk1+HVVd4wZBkgo2/ffqcvWajU
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:47 2026 by rpki-client