Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hFAxOPqoTn-4nfxfwjASf9OZ6No.roa
File: hFAxOPqoTn-4nfxfwjASf9OZ6No.roa (raw, json)
Hash identifier: Iy2A6J+3oluvzW+3N635BEqQh/EPTSSO0Ur4Gj1EhGE=
Subject key identifier: 84:50:31:38:FA:A8:4E:7F:B8:9D:FC:5F:C2:30:12:7F:D3:99:E8:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F8569472AB54423A227950F92F869547D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hFAxOPqoTn-4nfxfwjASf9OZ6No.roa
Signing time: Tue 21 Jul 2026 16:01:36 +0000
ROA not before: Tue 21 Jul 2026 16:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.253.66.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:47:2a:b5:44:23:a2:27:95:0f:92:f8:69:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 21 16:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84503138faa84e7fb89dfc5fc230127fd399e8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:f7:30:39:38:34:6c:ab:f1:79:18:90:49:
8d:f8:49:12:fa:58:37:83:73:d0:ca:2e:84:f3:14:
3d:a3:a8:b7:a4:5e:b6:06:02:65:52:3f:ba:08:6d:
67:f5:f0:18:45:39:61:f7:59:b9:24:a3:1f:63:8b:
29:ea:a9:c5:cf:57:37:30:87:88:53:13:84:e8:a4:
ef:20:5d:6c:c7:e2:04:01:52:c4:c3:56:36:08:82:
a0:d5:a9:12:d5:d6:0f:f4:ae:3a:81:29:5c:70:fc:
a5:bd:ff:1d:2c:32:aa:29:c5:da:31:ba:12:76:24:
ab:6e:f5:1d:1a:08:b9:ca:a0:70:93:66:3d:e7:49:
85:62:4a:a2:12:a9:e2:f3:c6:d1:6d:09:d1:f3:aa:
8b:c3:24:24:ff:51:cf:7d:91:a1:ae:30:12:0a:f8:
c7:35:68:c4:6c:a9:5f:da:a1:08:62:b5:47:f6:dc:
38:7f:69:ba:f8:d1:7e:d3:20:14:fc:61:9f:b4:5a:
7f:82:b4:3c:f9:f4:88:2c:17:65:73:cd:80:70:31:
5d:58:b3:de:ef:22:84:2b:06:df:44:84:00:36:b0:
00:23:4d:37:29:31:66:6f:70:0c:c3:45:8c:97:fc:
ff:69:52:dc:85:41:97:22:79:95:a7:17:ec:eb:21:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:31:38:FA:A8:4E:7F:B8:9D:FC:5F:C2:30:12:7F:D3:99:E8:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hFAxOPqoTn-4nfxfwjASf9OZ6No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.66.0/24
87.120.68.0/24
87.121.147.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:f6:a5:65:a6:5a:87:d0:fa:be:5c:1a:14:67:f4:6e:fc:08:
24:b3:2f:bb:50:a7:d1:75:94:92:75:10:0f:ae:c9:bc:3a:b2:
3f:f4:01:e9:39:de:7b:22:bb:96:d2:89:08:f2:6f:eb:43:34:
c1:69:d8:1d:c7:1d:a6:87:a2:34:78:22:8e:56:52:9f:08:79:
f4:9c:0f:03:3b:47:1a:37:32:5f:ae:83:6f:ad:1b:4a:e9:22:
69:a9:c4:3f:59:a1:a7:84:e8:09:cd:8f:3c:06:91:30:cc:61:
bc:37:fa:7d:1f:24:df:70:39:09:11:ee:0e:5d:dd:bc:c1:12:
d2:7d:ca:86:a7:ce:50:08:54:cd:ee:6f:c0:b2:e7:8e:f4:83:
61:76:9f:f7:2e:1a:b4:57:df:74:0e:e0:77:fb:0d:c5:08:d2:
a0:68:b4:b5:c6:03:16:57:2d:f3:a5:cb:00:9b:92:79:7b:98:
c4:eb:1c:a3:0a:4b:af:91:35:d3:de:7e:f5:7d:50:91:95:71:
7d:3e:4e:bd:59:ef:28:69:81:eb:d8:e9:72:c8:5f:b1:e2:ac:
45:70:dd:41:64:40:d0:cc:98:6b:34:0a:44:93:fa:44:38:06:
2f:68:91:94:8d:77:28:6c:08:3a:b8:16:fa:43:6d:c3:a1:ed:
66:ed:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:51 2026 by rpki-client