Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/HOa--BbyyWw8Rnz_PAkB1Aps5cM.roa
File: HOa--BbyyWw8Rnz_PAkB1Aps5cM.roa (raw, json)
Hash identifier: ndFzc/hujYQnkxG1NYpbo75mbyjjpHmzYedQL970LIc=
Subject key identifier: 1C:E6:BE:F8:16:F2:C9:6C:3C:46:7C:FF:3C:09:01:D4:0A:6C:E5:C3
Certificate issuer: /CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Certificate serial: 019F2368EB82567A95538754CEF5E4DECDB3
Authority key identifier: E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/HOa--BbyyWw8Rnz_PAkB1Aps5cM.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43200
IP address blocks: 81.26.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:82:56:7a:95:53:87:54:ce:f5:e4:de:cd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ce6bef816f2c96c3c467cff3c0901d40a6ce5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:e6:a6:b1:fe:1e:34:86:ce:be:ff:c9:95:
bf:1d:37:cb:2d:21:95:ca:76:cb:44:e3:16:8b:1a:
0c:14:5a:1e:d8:0d:31:32:69:b6:f5:1d:fc:58:39:
51:48:9f:04:ce:4c:34:4b:12:d0:83:f1:60:8f:24:
4b:40:92:0b:6f:a8:85:e5:99:d8:76:3c:c2:9c:ce:
d5:2e:9d:5e:57:8c:f5:fc:a8:de:e1:fc:dc:fd:2f:
c8:90:02:57:c3:6d:c7:9a:f3:b4:a8:8e:59:bb:ed:
6d:88:c9:41:9a:5f:f6:a8:07:47:24:84:a1:18:3d:
b9:ba:ca:60:8c:31:7b:e8:c0:e0:51:cd:f2:d4:4d:
2f:ea:2b:b3:20:4c:9b:4e:d2:d2:8a:ec:72:27:88:
7f:d0:0e:2a:dc:25:71:75:1e:7a:77:4b:6c:52:1a:
93:c5:c1:e4:db:da:10:f6:8e:7d:a1:03:67:cf:1e:
af:5e:51:05:52:09:0b:5e:2d:c5:35:e2:a0:21:a8:
ad:99:cc:9e:d1:2a:f2:11:73:d4:02:c6:74:4a:a7:
00:01:2b:83:62:0b:2e:9c:8f:25:63:8e:48:a9:d1:
76:a4:99:0c:eb:fc:1f:46:81:ce:91:74:1a:1e:ab:
9e:5e:7c:91:32:9d:be:18:95:6d:1e:19:8c:37:fd:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:BE:F8:16:F2:C9:6C:3C:46:7C:FF:3C:09:01:D4:0A:6C:E5:C3
X509v3 Authority Key Identifier:
keyid:E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/HOa--BbyyWw8Rnz_PAkB1Aps5cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
81:7b:c9:2a:e4:96:87:48:fd:8b:cb:e5:d5:14:8f:45:32:d3:
4d:ab:b5:5b:db:07:bc:29:ec:3b:1f:bf:a8:8d:67:ea:bb:75:
ef:0a:04:d7:d3:3d:bc:66:33:0c:a4:1d:90:97:ba:70:ae:2f:
57:75:fe:cb:4d:b2:c0:94:fd:c9:61:1e:e8:e3:80:2d:7e:b4:
fc:a4:18:6a:39:4b:35:09:a7:00:ee:cd:df:5a:ae:89:cf:60:
3e:a4:8d:84:1b:02:e6:78:a4:c3:ef:87:0a:cd:e2:c2:e7:af:
ff:c1:c7:cc:55:20:11:23:bc:f3:d3:d1:89:bd:51:0d:ff:da:
d6:f8:c4:67:ca:19:dd:08:5e:dc:f9:06:83:1a:bb:da:80:3e:
ca:4e:b3:98:2d:0d:71:4b:8f:7a:0f:39:de:cf:fa:95:ce:88:
ad:7d:c5:60:f8:af:da:28:40:f3:50:a9:4e:bb:cd:2a:68:bd:
0c:4a:5f:f4:0c:88:d1:44:78:86:02:be:eb:40:3d:61:c3:96:
c7:c0:59:db:93:b3:de:c5:f5:f5:f0:48:e8:2d:fe:02:19:21:
5f:03:aa:19:52:7b:60:32:07:21:56:c3:44:96:0d:da:4e:76:
a2:bf:9e:f4:79:84:78:52:a3:99:c2:82:7d:f0:d2:15:cf:2e:
7d:68:1e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:38 2026 by rpki-client