Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa
File: MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa (raw, json)
Hash identifier: pPpAjQ9/faa4QoYKDH51+jkG77bH512fpifEsnfi9LY=
Subject key identifier: 30:7B:90:F0:F8:AE:BE:B6:A2:0E:3D:DB:0E:08:76:8B:57:1E:1F:BC
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019F395ADD82B8730A89683ACB2D60813562
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa
Signing time: Mon 06 Jul 2026 21:34:43 +0000
ROA not before: Mon 06 Jul 2026 21:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 89.28.204.0/24 maxlen: 24
152.89.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:5a:dd:82:b8:73:0a:89:68:3a:cb:2d:60:81:35:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 6 21:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=307b90f0f8aebeb6a20e3ddb0e08768b571e1fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:42:fc:ab:a1:96:de:1d:83:ed:cc:44:29:
6c:08:f4:6b:23:ef:09:19:dc:d1:f0:a8:a7:6e:2f:
4c:f9:bf:49:94:6a:ef:06:01:f2:c4:e8:6a:b5:82:
e5:eb:84:6a:74:9e:36:06:f1:14:93:04:92:36:63:
09:93:c5:23:fe:3c:e4:48:a7:f9:c6:b5:59:fd:e9:
b9:84:c8:b1:d8:a3:85:c6:a8:f5:8c:d3:13:a1:d8:
d2:51:6c:f9:94:1c:79:50:15:a0:4c:2a:ae:04:b7:
74:67:01:f1:20:43:53:74:62:ed:1a:ad:79:90:21:
df:23:5c:bc:d4:e5:bf:f4:6e:81:1f:35:22:2c:2b:
d0:47:a5:71:74:5a:45:34:db:91:c9:5d:23:6f:3b:
33:37:5e:c7:f7:fd:e9:ee:3d:fe:83:c9:29:d7:9a:
3a:a9:a5:30:46:83:59:72:60:b4:81:ba:e4:4b:49:
76:bd:5c:ef:10:d9:d7:e2:30:f5:dd:2e:7b:00:20:
e2:70:89:bc:8f:5d:7e:d7:9d:26:11:ca:ff:bd:db:
8e:41:03:c0:ac:0a:3c:55:4a:bb:11:aa:07:4b:8e:
99:1e:05:9c:ba:ad:2a:ea:d4:9d:38:46:ec:2b:6d:
d9:3d:a9:43:7d:f0:a3:35:f1:6f:99:93:fc:98:63:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:90:F0:F8:AE:BE:B6:A2:0E:3D:DB:0E:08:76:8B:57:1E:1F:BC
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.204.0/24
152.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b5:77:34:88:2b:84:05:bb:aa:0e:56:e4:d5:40:65:a1:c2:
7e:7a:2f:a3:6b:57:9a:43:87:77:4e:d1:e5:a9:6b:3d:30:80:
5d:17:b9:2e:24:5d:9d:66:b9:f5:6d:8e:11:7f:7b:1d:6d:0d:
32:82:be:7a:fa:5a:de:34:ba:2a:f3:81:40:a0:16:8f:b4:1d:
61:1f:17:e6:cb:93:a7:e8:6d:51:df:f1:19:9a:45:89:7f:b2:
95:63:0b:66:af:dc:20:54:55:64:38:4b:51:fb:c8:ef:56:25:
91:c1:9f:23:0d:dd:6c:77:6a:e6:3e:d1:09:57:1b:9a:9a:23:
00:70:40:dc:62:74:a3:8e:f0:cb:24:f0:f2:0b:72:0a:be:35:
5c:a4:6e:5e:a0:ed:ca:d5:60:5a:a5:b3:0e:7b:8a:90:33:5c:
fc:09:a1:c5:2a:0c:f8:8b:87:1e:98:16:24:4a:b6:5f:b4:e9:
8c:a2:92:95:c2:44:88:16:12:e7:c5:bc:64:f4:9e:c6:1a:f5:
d2:91:e4:30:d3:db:75:a6:f5:5b:e2:83:82:d6:bb:fd:95:2c:
c7:71:bf:d5:aa:ad:63:cf:3f:df:d7:8f:02:c6:c7:8e:d1:9b:
3f:0e:07:68:40:8d:60:c8:8a:2c:7d:4c:a2:d7:db:a6:24:36:
dd:6c:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:12:54 2026 by rpki-client