Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/HknPQh-0Yk6yaxmwcZa5py8_zl0.roa
File: HknPQh-0Yk6yaxmwcZa5py8_zl0.roa (raw, json)
Hash identifier: wuIV5US3SZC05FFGszlUmrIVNWyDFMwcOW0Vs4e0MUM=
Subject key identifier: 1E:49:CF:42:1F:B4:62:4E:B2:6B:19:B0:71:96:B9:A7:2F:3F:CE:5D
Certificate issuer: /CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Certificate serial: 019F236857634B132DACE914889A891594FE
Authority key identifier: EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/HknPQh-0Yk6yaxmwcZa5py8_zl0.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49028
IP address blocks: 185.125.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:57:63:4b:13:2d:ac:e9:14:88:9a:89:15:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e49cf421fb4624eb26b19b07196b9a72f3fce5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:d8:04:35:a8:1a:81:41:c3:52:8b:72:7d:
ba:48:61:4e:ed:9d:db:c8:3e:f0:bc:97:05:d3:c0:
86:83:2a:9f:9d:a0:8a:36:a9:c8:fc:49:85:d0:9c:
7e:db:ed:d5:e7:f2:c5:4c:7e:36:2a:ab:dc:56:ec:
d9:af:a6:81:58:52:cc:6c:ba:47:1b:3c:6c:de:d2:
6c:33:23:c9:f9:06:3e:74:88:dd:4f:62:e8:d5:b3:
d7:17:18:9f:36:fd:8b:d0:5b:99:67:ba:5f:93:61:
50:2c:0a:39:f6:ed:93:89:17:be:64:db:43:6c:35:
0a:8d:13:af:57:ba:73:29:64:d5:41:2e:61:a9:f3:
84:e3:12:b2:ca:cc:c1:99:d7:73:22:e8:2f:49:66:
a5:52:12:45:c7:65:41:2e:d1:8b:b3:da:1a:ff:b9:
dc:9e:76:39:7f:a7:f5:87:bc:f5:73:52:5d:55:c9:
96:66:3d:6a:56:cc:94:a2:d5:1e:a1:c8:7b:c1:d2:
9b:a1:29:75:7e:4a:1c:d3:9f:ec:78:d9:75:62:95:
60:10:9b:7c:f7:a2:c3:27:87:90:c1:b8:c6:c2:f1:
2c:ab:90:26:d1:b3:6f:0d:af:d7:94:16:96:87:f7:
a4:88:07:c3:01:5a:33:7d:29:61:1f:12:7c:a9:3b:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:49:CF:42:1F:B4:62:4E:B2:6B:19:B0:71:96:B9:A7:2F:3F:CE:5D
X509v3 Authority Key Identifier:
keyid:EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/HknPQh-0Yk6yaxmwcZa5py8_zl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
af:62:db:dd:e8:b9:bb:ac:fe:5a:16:42:79:72:c4:90:1e:0a:
52:6d:f9:44:1c:17:00:c5:df:56:d7:1e:af:3e:2a:fa:20:f5:
94:f1:cc:bd:08:c7:13:cf:df:a9:e4:a9:e9:5b:9f:b2:03:7f:
b9:b1:ab:fc:a3:a9:93:70:36:bd:52:26:78:ac:89:0a:5b:ec:
65:60:7c:31:cf:fe:23:5a:6f:94:7f:b3:c8:58:37:3f:b4:fe:
14:8b:e6:39:ca:0e:64:03:cf:36:2b:e2:ea:b0:29:ff:c1:1e:
2a:75:70:8d:4c:73:7e:02:cf:5c:ff:8b:68:65:9d:0b:9f:23:
28:a5:ed:1c:1d:d4:7f:c3:7b:da:dc:11:85:50:04:04:f1:33:
3b:05:47:6d:38:76:7a:41:f2:8b:b1:d5:06:51:34:a4:13:83:
13:15:48:bf:f6:24:7a:fb:fa:34:51:97:f1:e9:5c:14:ba:cb:
88:f9:1c:0f:04:4c:4d:88:5f:18:c2:1b:a0:7a:66:a2:3a:e2:
32:0f:d8:26:a0:aa:6b:65:7f:7a:65:26:01:65:aa:d8:9b:73:
9d:cf:b5:a4:72:d9:d4:e3:f9:c6:c3:62:55:f1:62:17:6f:97:
e1:42:b6:45:bf:cd:20:e4:e5:7d:77:85:c0:17:ea:70:53:3e:
55:75:4e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:57 2026 by rpki-client