Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/HfdC7e9zsQ3MUkr_7BHh34CXgpI.roa
File: HfdC7e9zsQ3MUkr_7BHh34CXgpI.roa (raw, json)
Hash identifier: auHpLY7l53LjRTLfvEcmKhXwGm66XurKKIvNgTn/QeI=
Subject key identifier: 1D:F7:42:ED:EF:73:B1:0D:CC:52:4A:FF:EC:11:E1:DF:80:97:82:92
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 01A1A8410E5A1EE53632DC669A5533A5E220
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/HfdC7e9zsQ3MUkr_7BHh34CXgpI.roa
Signing time: Wed 04 Nov 2026 20:29:58 +0000
ROA not before: Wed 04 Nov 2026 20:29:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203804
IP address blocks: 193.164.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:41:0e:5a:1e:e5:36:32:dc:66:9a:55:33:a5:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Nov 4 20:29:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1df742edef73b10dcc524affec11e1df80978292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:fb:35:17:62:72:b7:a5:21:27:2d:15:ae:
1a:ce:8d:91:db:64:74:17:57:70:da:ad:66:ff:5b:
3f:b0:1c:a1:d8:54:44:c5:d3:22:f9:c5:7d:d5:a0:
ad:13:a1:d2:5b:44:bd:30:4b:c3:da:51:49:19:b5:
3d:83:99:f3:e5:c2:49:15:4e:d7:18:2a:66:8e:52:
c6:f0:c8:e0:9f:72:c5:ed:6e:7e:f0:05:87:d7:51:
d7:f2:db:65:84:dd:78:4d:e2:c9:60:5e:38:60:eb:
52:de:ff:aa:5a:bc:59:75:e1:ea:40:cd:53:04:f5:
3f:3d:f1:88:d3:f8:a8:14:cb:c6:28:d8:04:d9:78:
e9:bf:bd:9f:8b:d0:66:1c:81:d2:b0:52:23:2c:b7:
84:38:2d:26:54:3a:5b:b0:11:e7:49:fe:5e:5a:b3:
a6:7f:13:ec:b3:1a:81:4e:f8:42:0c:e4:5c:ba:60:
8c:67:f7:c8:17:6b:01:8f:a8:c8:97:58:53:11:02:
73:a6:71:e9:3c:48:4b:aa:f5:dc:22:91:d4:56:a2:
14:6f:fb:f9:22:9c:71:75:7f:70:ff:31:ca:18:7b:
32:ac:df:25:bf:f3:8e:d1:8b:a4:44:4f:0e:a4:cc:
19:12:08:fe:32:6a:3f:16:42:3c:dc:d1:34:fb:91:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F7:42:ED:EF:73:B1:0D:CC:52:4A:FF:EC:11:E1:DF:80:97:82:92
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/HfdC7e9zsQ3MUkr_7BHh34CXgpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.5.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b9:c8:9f:78:b5:d1:31:48:f4:fa:ca:05:b8:25:9e:4a:f3:
76:42:9b:6a:68:94:22:14:7e:ca:9d:de:8b:d1:07:bc:68:7b:
31:30:b9:d4:96:95:62:71:e4:22:52:85:d1:c3:70:9e:19:e2:
79:a6:39:3c:4f:de:f4:5d:f3:c1:8f:4e:ad:d6:78:85:24:40:
e7:77:2d:53:ea:82:22:e2:b2:61:63:82:15:93:f8:b2:8c:52:
22:28:6d:7f:62:27:77:e6:21:90:85:3c:8c:79:e8:f8:19:33:
4b:9a:7f:ed:dd:37:a5:a7:f7:a2:0b:b8:e7:08:6e:6d:a1:f4:
b6:30:9d:20:bf:e7:c6:25:8e:d4:c8:f3:66:73:9d:9d:de:2f:
9f:bc:66:10:dd:88:54:3b:fd:0b:4c:d8:50:10:57:68:72:44:
ba:bd:6b:42:6e:8c:0c:4c:96:b1:93:87:50:52:12:47:f4:44:
38:78:e2:74:07:56:bf:a4:ce:a3:ea:9e:72:73:40:be:14:d5:
59:b5:bf:4e:57:45:ec:49:29:d1:4e:0b:40:82:9d:65:69:03:
c3:5c:c6:4c:81:dc:f9:a7:a1:a8:e4:49:91:f1:51:68:53:7c:
2a:1b:7e:7c:52:c6:db:08:fc:c6:fd:0e:26:fa:88:88:47:ce:
36:0c:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:34 2026 by rpki-client