Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa
File: HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa (raw, json)
Hash identifier: EOzdMc3GskmF40wiE+yrzgPDbCivBZJb96Tu2M3IGvc=
Subject key identifier: 1D:5E:45:38:48:99:A7:B3:50:F1:7D:61:EE:2C:B5:5F:DA:7E:FB:79
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019F45A1DE588A374CDFE6AE75B13B23B8BF
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa
Signing time: Thu 09 Jul 2026 06:47:43 +0000
ROA not before: Thu 09 Jul 2026 06:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44533
IP address blocks: 91.213.117.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
212.18.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 20:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:a1:de:58:8a:37:4c:df:e6:ae:75:b1:3b:23:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Jul 9 06:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d5e45384899a7b350f17d61ee2cb55fda7efb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:73:d3:3c:5d:48:bc:8b:84:59:a7:a4:b6:
a1:08:a7:9b:f8:48:a2:b1:a6:ad:54:9f:b9:a1:bd:
d5:04:9c:18:52:1f:eb:3a:23:78:33:f8:07:65:e3:
d4:aa:38:0c:10:27:cb:fc:1d:9f:f8:1d:05:bd:51:
f0:42:20:58:1d:b7:43:a3:7e:e6:98:7d:0e:ab:73:
a2:d3:a7:0f:15:67:d6:b5:46:32:a4:7c:32:e5:42:
aa:fa:36:19:77:9f:7c:ca:05:ce:3b:c7:3b:ce:75:
ba:56:62:e4:d2:30:6b:71:a1:ab:9e:bd:9e:5f:57:
10:09:2e:17:22:a7:1e:b2:e1:a1:54:79:29:cc:30:
84:cd:a1:68:90:1d:4c:ff:f2:d7:72:13:65:9e:b5:
ca:8a:59:44:f2:b7:bb:82:1b:7e:b4:5e:05:6a:15:
8c:c8:67:75:5e:84:7f:cd:38:ca:95:3c:3a:f9:6c:
09:60:28:45:a3:94:ed:7c:7e:44:30:ff:39:51:3d:
2c:8c:4c:34:88:df:10:43:66:39:30:3b:04:cf:ab:
03:7f:1d:7f:2b:34:88:d0:34:a4:f8:7b:32:94:40:
ce:82:d6:a0:8c:f5:0c:f6:3e:b9:6a:37:d5:70:d2:
42:0f:57:41:6e:b2:7f:b0:e4:b8:91:91:cb:cf:96:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:45:38:48:99:A7:B3:50:F1:7D:61:EE:2C:B5:5F:DA:7E:FB:79
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.117.0/24
185.232.47.0/24
212.18.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:38:b4:bb:6b:b5:75:4e:51:67:f5:0b:81:c9:c7:5d:9a:f4:
61:d3:07:3e:d2:d1:1d:8b:ec:40:15:d6:3c:49:d8:7d:95:fd:
3c:02:cf:21:31:67:fb:bd:a7:c1:e3:eb:97:01:c2:0a:26:f1:
51:f3:80:24:fc:42:c7:2c:12:f4:50:e3:f1:83:dd:fd:e1:b7:
d8:9b:af:1a:71:33:ce:a6:33:2e:0f:a1:cb:a2:da:68:fe:3f:
23:14:48:1b:14:dd:b8:b7:4d:f6:1b:af:55:9b:30:e4:2e:b6:
a7:67:11:4c:fc:79:ef:c9:71:a7:b6:ec:78:f4:df:e6:78:01:
32:b9:7a:8d:ef:1e:41:5c:00:be:1c:b1:89:29:72:fa:58:f6:
8b:a2:5b:45:9c:86:3c:28:cd:9a:4e:23:60:d9:6d:aa:ab:1e:
c9:cf:cf:02:e2:59:4b:f0:5c:c8:b7:e2:13:50:9f:c2:6d:a1:
07:bc:45:c7:32:06:81:d9:91:03:f2:5b:f3:a4:6d:9f:e5:f4:
d2:31:e0:6e:88:14:18:2c:94:a6:9e:68:59:6c:35:3b:45:8b:
13:89:0b:e6:29:0b:96:2c:ee:9e:8b:45:99:fb:4a:1d:f6:e1:
2a:78:89:7f:65:6e:41:d2:f6:28:6a:d4:07:a5:12:f2:5e:b4:
0e:2b:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 05:46:09 2026 by rpki-client