Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/hwijRhZ95zu2fzBu0boOesOms6U.roa
File: hwijRhZ95zu2fzBu0boOesOms6U.roa (raw, json)
Hash identifier: HDiWzBkayEcGgyJWBbNXaqDrPFIhI/bMMXg8al08Sh8=
Subject key identifier: 87:08:A3:46:16:7D:E7:3B:B6:7F:30:6E:D1:BA:0E:7A:C3:A6:B3:A5
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019E0757D3B60E581125992D9F72942E89F3
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/hwijRhZ95zu2fzBu0boOesOms6U.roa
Signing time: Fri 08 May 2026 11:27:36 +0000
ROA not before: Fri 08 May 2026 11:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 185.179.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:57:d3:b6:0e:58:11:25:99:2d:9f:72:94:2e:89:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: May 8 11:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8708a346167de73bb67f306ed1ba0e7ac3a6b3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:05:3b:53:74:c2:25:32:10:ea:2d:a4:ce:
4b:47:85:9f:51:ab:b2:6b:39:e0:fb:4a:76:92:39:
e8:82:fc:cc:7d:9d:4f:9e:7e:6f:bd:95:a6:91:15:
13:bb:0c:09:ca:8d:d6:3f:2d:ac:5b:93:9a:2b:43:
87:8d:48:e9:b5:8c:03:2c:19:e1:0c:a4:db:a5:e0:
09:d9:84:31:be:03:b2:e9:b7:6f:7c:86:a3:24:e7:
6b:a7:1a:2b:35:28:59:48:ee:03:8a:a2:f0:4d:03:
ec:ad:21:d4:c5:90:0f:3c:4e:89:71:10:b4:59:fd:
37:e5:b7:7f:64:9d:88:34:27:b9:30:bb:aa:ef:66:
c9:83:73:8e:4d:4a:b8:2c:a4:e6:41:d2:09:bd:05:
9b:8c:ea:ca:28:b0:69:dd:17:3f:99:19:c1:c5:bc:
0d:04:04:43:e4:64:fd:2a:2f:36:20:c4:44:65:b9:
df:bd:4d:f3:ac:25:00:86:4b:10:b4:d5:b2:88:02:
d4:e7:cb:8c:63:43:45:ea:a1:89:85:a4:8f:6a:78:
07:f6:de:8b:64:9c:ea:44:74:cd:cb:09:48:17:8e:
99:86:9f:8c:e6:28:89:bb:5b:61:46:a5:e9:f4:c8:
be:a1:b5:f7:db:2a:52:a0:41:66:1d:49:82:87:98:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:A3:46:16:7D:E7:3B:B6:7F:30:6E:D1:BA:0E:7A:C3:A6:B3:A5
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/hwijRhZ95zu2fzBu0boOesOms6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9e:e6:1f:8f:52:3d:e5:df:fc:47:a6:5a:e5:ae:b9:29:5a:
18:67:16:8d:2c:44:33:6e:7a:3b:15:bc:a0:62:0d:c6:fe:88:
72:33:4f:99:57:8a:d3:bf:88:5e:26:36:cf:2a:4a:11:d0:2e:
ee:cc:36:ef:d5:99:80:60:5b:28:3d:06:21:5d:58:d1:31:b9:
d6:97:51:9a:63:1a:30:8a:f8:9b:d7:a3:bf:f0:5e:56:17:ad:
51:f1:0c:b7:a0:5c:5b:e0:93:59:9b:12:40:0c:de:8a:84:ed:
6a:00:32:33:f3:e2:b5:ed:67:6a:b8:0c:9a:eb:09:0e:c9:8c:
f4:c6:41:dd:ad:73:c3:0c:57:12:d8:c5:d2:26:cf:68:a7:a6:
ff:c6:e7:35:91:b0:4e:86:e1:b9:b5:58:14:1e:f3:cd:e0:6b:
17:be:71:bf:49:f5:24:9e:e6:28:02:92:04:76:da:a2:d4:a5:
3a:74:1b:bc:21:e3:0d:75:41:86:67:bb:bf:a7:2b:55:34:cd:
5c:46:02:d7:b1:10:2a:e9:84:a6:43:ff:49:d8:85:c9:a7:78:
70:0b:f0:e7:ef:92:4a:fa:74:76:11:e6:ba:56:d7:22:6c:9c:
41:ae:2d:4a:05:60:83:1b:9a:09:ea:e7:05:69:ad:ce:f1:92:
32:6c:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:16 2026 by rpki-client