Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/H8lhFYtHMrx-OIcPxXtaNWls43I.roa
File: H8lhFYtHMrx-OIcPxXtaNWls43I.roa (raw, json)
Hash identifier: Pkm6aZNkssxBJCbfYV6i2tcNlu//cGY6tIRGiAEUaZ8=
Subject key identifier: 1F:C9:61:15:8B:47:32:BC:7E:38:87:0F:C5:7B:5A:35:69:6C:E3:72
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019F841AC425C53E0180E6AAC38F4A45A68B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/H8lhFYtHMrx-OIcPxXtaNWls43I.roa
Signing time: Tue 21 Jul 2026 09:56:14 +0000
ROA not before: Tue 21 Jul 2026 09:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60139
IP address blocks: 90.156.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1a:c4:25:c5:3e:01:80:e6:aa:c3:8f:4a:45:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 21 09:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fc961158b4732bc7e38870fc57b5a35696ce372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:73:66:ff:ae:a7:96:77:e6:9d:b8:7c:9a:
73:00:ce:d5:f0:3e:be:e6:0e:ce:2d:7d:31:db:b4:
d9:5f:7a:42:e1:52:9d:06:22:ea:af:08:57:08:08:
db:85:a2:b6:25:f9:39:3d:4d:5d:14:8c:f9:ad:04:
c8:c2:1b:d2:0e:71:27:17:d6:3a:c7:6e:07:70:9c:
6c:a7:c8:66:6c:80:65:25:4a:48:9d:40:ef:f3:d9:
76:6a:94:62:ca:58:12:1e:7f:74:ba:73:6e:91:53:
89:09:31:e2:46:33:49:b3:5e:75:a1:04:37:cb:5f:
0f:c8:78:fd:0e:f2:74:a4:24:1f:f3:00:34:1b:1d:
5a:ae:5f:53:0e:46:47:2d:03:36:26:dd:26:a4:c3:
a5:c9:21:36:71:57:a0:62:87:bf:e0:88:1e:01:f4:
6a:df:d4:9a:87:98:59:86:8a:3f:b2:25:3b:b0:66:
ba:c2:59:29:e7:e4:c8:f4:4d:20:83:80:f2:7d:f2:
bb:7f:68:9d:d0:49:5f:a9:f7:4d:b6:0f:d2:53:71:
11:86:b4:87:0a:6e:03:66:51:b2:f0:e1:fd:b4:0b:
56:52:3b:09:3d:16:9c:42:c9:22:29:7e:56:a5:fb:
97:e0:06:d1:bb:32:34:b0:fd:92:a2:2a:cb:00:ef:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C9:61:15:8B:47:32:BC:7E:38:87:0F:C5:7B:5A:35:69:6C:E3:72
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/H8lhFYtHMrx-OIcPxXtaNWls43I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9b:c1:d5:06:2a:0e:64:0f:9e:78:eb:32:f8:3d:d8:92:b6:
39:a3:12:e0:e1:07:ae:04:d5:51:e7:f0:ec:d8:39:4d:f9:62:
3d:09:8b:4b:2c:97:be:4e:75:2a:d1:f1:d6:c3:c8:c4:cb:3b:
ec:f5:de:c1:ab:0f:f3:b7:44:a5:89:c7:ba:3c:14:55:f7:75:
3d:80:74:f5:b4:c7:6d:23:4a:99:a5:87:5d:c7:6e:fe:bb:ce:
9f:e9:eb:56:07:36:5b:4e:5e:4b:e8:e2:10:5d:bf:8a:78:96:
35:f5:34:e4:cb:76:77:56:8b:d2:76:96:b8:fa:06:fb:02:83:
9a:a8:e5:45:0d:57:1a:58:2b:ce:15:50:73:34:a5:42:d8:9a:
c1:1c:11:ec:30:ce:d7:36:e6:bf:0a:55:04:2a:39:c5:9f:dd:
fe:5b:01:48:83:a9:bf:43:11:cb:02:00:5e:02:e2:be:9c:5e:
ce:78:22:fd:14:55:9a:96:6e:7f:96:05:08:73:c9:05:68:28:
12:1b:a5:ec:25:d0:3f:3e:17:b5:2c:ad:25:b5:6c:ed:4c:f8:
b7:74:f5:e7:46:46:01:97:94:85:87:f3:87:72:7a:87:70:ff:
15:ff:75:ae:16:9a:5f:60:43:02:af:dd:0d:d3:ce:7c:c0:f2:
89:1f:ac:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+EGsQlxT4BgOaqw49KRaaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwNzIxMDk1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmM5NjExNThiNDczMmJjN2UzODg3MGZjNTdiNWEzNTY5NmNlMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JJzZv+up5Z35p24fJpzAM7V8D6+
5g7OLX0x27TZX3pC4VKdBiLqrwhXCAjbhaK2Jfk5PU1dFIz5rQTIwhvSDnEnF9Y6
x24HcJxsp8hmbIBlJUpInUDv89l2apRiylgSHn90unNukVOJCTHiRjNJs151oQQ3
y18PyHj9DvJ0pCQf8wA0Gx1arl9TDkZHLQM2Jt0mpMOlySE2cVegYoe/4IgeAfRq
39Sah5hZhoo/siU7sGa6wlkp5+TI9E0gg4DyffK7f2id0ElfqfdNtg/SU3ERhrSH
Cm4DZlGy8OH9tAtWUjsJPRacQskiKX5WpfuX4AbRuzI0sP2SoirLAO/+LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/JYRWLRzK8fjiHD8V7WjVpbONyMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvSDhsaEZZdEhNcngtT0ljUHhYdGFOV2xzNDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWpySMA0G
CSqGSIb3DQEBCwUAA4IBAQAGm8HVBioOZA+eeOsy+D3YkrY5oxLg4QeuBNVR5/Ds
2DlN+WI9CYtLLJe+TnUq0fHWw8jEyzvs9d7Bqw/zt0Slice6PBRV93U9gHT1tMdt
I0qZpYddx27+u86f6etWBzZbTl5L6OIQXb+KeJY19TTky3Z3VovSdpa4+gb7AoOa
qOVFDVcaWCvOFVBzNKVC2JrBHBHsMM7XNua/ClUEKjnFn93+WwFIg6m/QxHLAgBe
AuK+nF7OeCL9FFWalm5/lgUIc8kFaCgSG6XsJdA/Phe1LK0ltWztTPi3dPXnRkYB
l5SFh/OHcnqHcP8V/3WuFppfYEMCr90N0858wPKJH6yA
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:45 2026 by rpki-client