Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/hw6HTYLmpBRO48WkK3KzMTuSQwU.roa
File: hw6HTYLmpBRO48WkK3KzMTuSQwU.roa (raw, json)
Hash identifier: vYOOjZYksNJ667j7SpreJQGXXsK8kLponRnidBeDvsE=
Subject key identifier: 87:0E:87:4D:82:E6:A4:14:4E:E3:C5:A4:2B:72:B3:31:3B:92:43:05
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 01A1AA4912C308FCF7D345A956893526CFF1
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/hw6HTYLmpBRO48WkK3KzMTuSQwU.roa
Signing time: Thu 05 Nov 2026 05:57:58 +0000
ROA not before: Thu 05 Nov 2026 05:57:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198333
IP address blocks: 195.66.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:49:12:c3:08:fc:f7:d3:45:a9:56:89:35:26:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Nov 5 05:57:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=870e874d82e6a4144ee3c5a42b72b3313b924305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:8b:b4:5c:1b:5d:e2:95:20:74:9d:b1:f0:
34:32:8e:3c:2a:d9:62:5e:10:ad:9c:7b:04:92:92:
de:5f:44:f8:f1:3f:0f:a6:97:bd:eb:09:c4:eb:c6:
74:92:69:f4:c2:7a:03:0e:40:23:f3:65:a3:5a:60:
c2:72:44:e6:ad:92:ef:c6:7b:72:74:d5:31:01:c8:
fb:e5:fd:4a:59:91:5e:4b:6b:30:4b:97:6d:af:ab:
4c:56:03:3d:a3:14:2c:1a:c6:e0:a4:be:91:17:ae:
1c:65:9c:93:4e:d3:02:a2:6d:21:78:9e:98:f3:e0:
d7:ec:20:40:31:a5:f6:e5:ef:09:51:50:b6:28:52:
fc:3e:05:42:9d:f6:b6:12:6d:d6:7c:cc:bb:0e:84:
8b:f3:1e:84:0e:88:d5:35:e1:41:b9:5e:fb:7c:d8:
75:74:d7:76:c9:a7:73:6b:de:57:89:55:c3:f0:9e:
60:8d:60:5b:02:32:74:4b:ac:f8:70:61:22:53:27:
d7:38:ba:ac:c7:e9:d9:99:d0:04:7d:79:1e:df:de:
c8:ca:f7:89:2c:cb:2a:69:30:e5:c4:34:58:69:5f:
87:cf:52:5b:e5:da:c4:75:14:69:6c:6d:9a:f3:25:
50:9e:a9:e5:ca:15:5d:0a:64:e5:c6:24:3a:1e:04:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:87:4D:82:E6:A4:14:4E:E3:C5:A4:2B:72:B3:31:3B:92:43:05
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/hw6HTYLmpBRO48WkK3KzMTuSQwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:92:59:ed:e4:2d:b2:18:54:6b:c4:97:ec:bf:ab:41:fc:27:
fc:94:c7:e1:e9:78:85:b4:1c:f6:c4:c0:60:ac:c4:57:cb:70:
14:ca:cc:ec:38:e3:2b:ba:38:f3:ee:a0:b7:3c:df:51:11:55:
dc:12:a7:eb:b8:fd:32:a9:e2:4a:ee:9d:2f:d4:53:e5:fa:9f:
30:3e:d4:50:42:a8:96:6f:43:ff:f0:3b:df:5a:b4:dd:a4:3c:
8c:63:50:27:bf:0d:e6:c9:14:77:2c:97:5e:a8:40:45:2c:1e:
28:8a:e5:a1:e9:9d:ff:2d:54:9e:14:d5:45:37:af:9f:d4:1a:
7c:18:52:57:a8:1f:35:fc:91:5b:34:b7:66:04:6e:97:3a:8b:
06:2c:56:2d:89:64:58:f8:5b:95:6c:cc:f1:40:e9:24:30:72:
6f:2f:bc:17:7e:5b:20:41:35:5a:43:54:ae:72:80:cf:8e:49:
a5:66:9a:13:e6:0c:ab:88:72:8f:b9:f2:6b:0b:2e:28:a0:c0:
52:da:f8:7b:b9:98:36:f9:d9:d5:7d:aa:91:07:54:fa:3e:52:
cb:f5:9e:e0:86:71:96:af:f9:22:15:ea:68:ac:8c:91:e4:84:
c4:28:20:75:3f:2c:af:7d:5b:72:7c:d6:bb:0d:54:fd:7f:a4:
18:b5:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:40 2026 by rpki-client