Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HtAM6d-gf2RXRzng8VQnuqtvdDQ.roa
File: HtAM6d-gf2RXRzng8VQnuqtvdDQ.roa (raw, json)
Hash identifier: t8fCVgcMA9tv/+B5bj1sehxMwHKelWmSkAdEYCtD1r4=
Subject key identifier: 1E:D0:0C:E9:DF:A0:7F:64:57:47:39:E0:F1:54:27:BA:AB:6F:74:34
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019E9E715EBDF8A7883D2EC20FAEC818959F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HtAM6d-gf2RXRzng8VQnuqtvdDQ.roa
Signing time: Sat 06 Jun 2026 19:38:10 +0000
ROA not before: Sat 06 Jun 2026 19:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 147.45.52.0/22 maxlen: 22
147.45.56.0/22 maxlen: 22
147.45.80.0/22 maxlen: 22
147.45.223.0/24 maxlen: 24
193.233.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:71:5e:bd:f8:a7:88:3d:2e:c2:0f:ae:c8:18:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 6 19:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ed00ce9dfa07f64574739e0f15427baab6f7434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:f2:a3:77:cb:c1:25:3b:1a:be:a3:dd:3d:
1f:2f:ce:05:9a:e1:82:2e:32:c4:4f:6b:7a:77:e4:
31:f7:99:92:23:06:0d:ff:3c:f4:9b:98:64:66:0b:
46:a4:5b:83:1b:35:ee:6d:41:8b:af:e1:b5:a4:cf:
82:39:a3:19:a3:0c:c3:45:f1:9d:72:f0:bf:94:98:
30:08:81:bd:30:1d:c6:70:96:c8:cd:5c:77:0a:53:
aa:fc:ee:74:bc:85:e3:27:07:64:77:c2:57:a5:9b:
51:7e:a9:d7:46:65:f8:b5:42:dd:95:a4:bd:22:8c:
8a:26:b9:c0:72:3d:25:82:bf:e8:98:d8:57:9e:f1:
52:9c:8f:01:5a:3a:86:ef:6f:16:49:26:b0:78:37:
3a:12:d3:6c:e4:01:51:d1:0b:4f:dd:76:35:0e:d6:
79:d4:83:e7:98:c3:56:e9:83:3f:94:cb:09:72:35:
59:8b:ef:4e:64:58:34:da:ec:48:da:f1:de:ec:12:
ed:3b:6d:34:44:8f:29:64:0e:6e:4f:5f:0f:4f:b3:
dc:81:76:88:67:88:c4:40:7a:8c:23:5f:e6:4a:a2:
01:d8:ce:86:53:92:dc:30:12:7d:9e:06:d7:cc:f7:
bf:4b:ec:da:1b:7a:ad:75:a7:1a:64:7e:08:7b:9c:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:0C:E9:DF:A0:7F:64:57:47:39:E0:F1:54:27:BA:AB:6F:74:34
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HtAM6d-gf2RXRzng8VQnuqtvdDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.52.0-147.45.59.255
147.45.80.0/22
147.45.223.0/24
193.233.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f6:8f:50:74:af:e0:00:03:b4:1e:2e:ed:c5:f1:d5:e7:52:
de:2b:d0:b7:75:b1:23:46:2a:7e:2c:f6:16:dd:16:f9:52:b3:
3a:e6:88:35:b5:2e:90:ec:28:99:d1:af:69:02:cb:cd:26:ef:
d6:48:94:8b:9e:0b:73:99:c4:ff:7f:db:74:0a:0d:96:da:7f:
34:82:bc:b4:3b:5e:49:51:fb:c2:62:d5:90:6f:eb:13:80:45:
0e:e8:89:b3:3d:77:85:7a:df:2f:6f:cb:eb:12:50:9e:01:4b:
f8:71:c7:c9:67:2d:29:50:a7:56:a3:46:41:7b:26:a4:96:7b:
c9:e4:66:42:65:b3:15:7d:19:92:29:16:d3:72:56:cd:34:6c:
2a:bd:54:91:c2:a1:79:59:57:80:78:66:23:db:8f:9d:86:87:
ea:e1:16:2a:58:58:14:ea:51:d2:c7:f4:64:1c:5f:67:41:e4:
a5:04:7a:30:cb:8e:b5:c1:28:a2:a7:31:d6:69:8b:79:39:e6:
ed:33:17:40:35:c8:26:fb:f0:29:42:67:81:65:97:0c:b2:86:
dd:2f:7c:6b:28:2a:40:41:dd:20:11:14:bd:69:bb:bd:39:78:
52:7d:7c:27:5e:c8:cc:a3:80:34:b1:7f:4d:aa:da:19:bc:3a:
5c:13:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:34 2026 by rpki-client