Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/hjDAxUotD7fBXSYLVmy70jVRseo.roa
File: hjDAxUotD7fBXSYLVmy70jVRseo.roa (raw, json)
Hash identifier: 0sYxaaTFlbtM3B7RBSkgjokJqeCyvabh5MHOIU6LNCU=
Subject key identifier: 86:30:C0:C5:4A:2D:0F:B7:C1:5D:26:0B:56:6C:BB:D2:35:51:B1:EA
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 019F75100DD4D5BBCC07190FB17A217713F2
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/hjDAxUotD7fBXSYLVmy70jVRseo.roa
Signing time: Sat 18 Jul 2026 11:50:14 +0000
ROA not before: Sat 18 Jul 2026 11:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59588
IP address blocks: 138.124.157.0/24 maxlen: 24
185.254.12.0/24 maxlen: 24
185.254.13.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:10:0d:d4:d5:bb:cc:07:19:0f:b1:7a:21:77:13:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jul 18 11:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8630c0c54a2d0fb7c15d260b566cbbd23551b1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:8b:2b:56:f9:d0:de:f6:c9:4f:ed:73:75:
e4:98:ac:b5:85:57:52:24:82:73:b4:1a:2d:21:bf:
34:bf:93:1b:7e:81:9f:71:94:89:db:f8:0b:07:5d:
c8:eb:43:4b:9f:39:98:43:9b:d9:33:15:d9:3c:a3:
f1:5d:6c:1f:33:69:b5:10:8f:7a:4f:0f:c5:93:83:
c8:6e:b4:ca:30:cb:e3:cb:d2:eb:d6:4a:51:51:06:
c3:75:36:bd:6a:24:e6:33:bf:6f:0f:1e:ca:bc:3f:
d8:33:61:f0:fa:d7:a7:e3:f8:ce:e4:b0:0d:57:8c:
73:69:67:74:fe:86:d5:a9:4b:cc:44:3c:bd:45:4d:
5e:c7:25:da:4a:1e:ab:a9:98:bc:df:7b:bc:22:96:
2d:c8:11:cf:2f:ca:61:e6:29:db:42:c0:92:d6:f3:
41:46:09:60:8b:53:da:94:7c:94:0e:8d:35:ac:40:
6a:74:e9:be:a9:77:c2:38:96:a0:80:e1:92:d4:d6:
73:86:e2:bb:f7:0a:49:9c:b6:17:58:9a:d9:f8:c4:
f4:d8:1b:df:af:3d:76:56:35:94:98:37:33:07:97:
a2:b9:f1:96:b9:24:82:7c:bf:2f:c0:ab:9b:d4:77:
60:42:78:6d:34:bd:bf:0b:02:8d:3b:58:9d:71:f2:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:C0:C5:4A:2D:0F:B7:C1:5D:26:0B:56:6C:BB:D2:35:51:B1:EA
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/hjDAxUotD7fBXSYLVmy70jVRseo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.157.0/24
185.254.12.0/23
199.74.189.0/24
199.74.191.0/24
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
2f:d1:32:b7:26:3d:f8:8f:39:38:d0:a9:cb:65:06:51:0b:83:
3f:24:d3:69:ba:44:b4:6b:cc:0e:dc:30:61:5b:7a:d3:5c:c7:
b2:45:ff:0c:63:bd:cf:44:a2:ab:74:f6:ed:9b:6d:7c:9a:5a:
cc:8c:07:6a:ff:54:95:2b:0e:60:71:fc:1a:b7:ba:b7:8e:6b:
90:33:a8:36:75:b2:3e:b6:39:a3:f0:76:df:08:4e:60:d4:5a:
ff:8a:21:e2:89:e3:cb:94:fa:0d:95:d9:3f:ec:f8:58:77:36:
1f:ce:04:55:4b:41:c4:f6:30:e4:e9:af:a1:46:6a:40:94:77:
2d:9c:e0:e1:fd:a5:65:6c:f3:ba:55:88:df:a5:a0:ab:88:c8:
bb:c2:ad:32:70:fb:73:9b:da:33:68:6d:11:c1:55:25:74:94:
b9:f0:27:84:5b:69:90:90:c8:87:36:c3:1b:86:5d:2f:fa:ab:
29:0a:6b:e3:59:e2:aa:8c:a7:59:26:ed:3a:4a:ca:08:5e:c5:
74:9c:83:2f:fa:9e:a6:77:63:9c:91:66:e1:2f:38:82:04:fa:
03:77:44:8a:13:94:0f:39:cd:9c:ea:7b:42:70:6c:b9:a1:60:
e6:0f:7a:c7:68:d6:a3:c4:ec:63:15:78:d3:64:12:8f:97:16:
19:1e:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:21 2026 by rpki-client