Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/hkjYmI9X6VPWkUt8PYO3NITbvC4.roa
File: hkjYmI9X6VPWkUt8PYO3NITbvC4.roa (raw, json)
Hash identifier: 0Gr28HnkX+tfG0K6Zl50zhuF7TY2Uh15yYjcy9pJCmc=
Subject key identifier: 86:48:D8:98:8F:57:E9:53:D6:91:4B:7C:3D:83:B7:34:84:DB:BC:2E
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019ECA2521FE99C1361609C28C9BE824D907
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/hkjYmI9X6VPWkUt8PYO3NITbvC4.roa
Signing time: Mon 15 Jun 2026 07:18:11 +0000
ROA not before: Mon 15 Jun 2026 07:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 109.234.220.0/24 maxlen: 24
109.234.221.0/24 maxlen: 24
185.145.240.0/24 maxlen: 24
185.145.241.0/24 maxlen: 24
185.145.242.0/24 maxlen: 24
185.145.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:25:21:fe:99:c1:36:16:09:c2:8c:9b:e8:24:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Jun 15 07:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8648d8988f57e953d6914b7c3d83b73484dbbc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:68:30:1c:a9:0c:f6:20:32:11:57:9d:40:
d4:1d:00:7b:f0:97:4e:dd:57:a2:1f:17:d3:ab:60:
9a:29:5c:d3:46:15:f4:d1:32:47:54:d3:e0:97:5e:
00:33:98:79:ac:1f:38:80:c7:09:7e:26:cd:00:8b:
ae:9d:b0:0a:52:a4:37:dc:0e:ec:14:2c:b6:f5:2e:
29:14:e6:15:c3:09:02:e6:92:64:30:c2:69:17:39:
43:70:86:f3:fb:4d:3f:9c:8a:c5:41:05:cb:c3:33:
30:67:67:14:da:e0:d1:70:f6:fc:d8:62:59:21:e8:
76:2e:5d:54:30:29:96:fe:60:5e:8c:1c:bc:1c:3e:
bb:2c:42:c0:68:d2:ce:40:52:47:86:80:4e:bc:25:
c1:61:95:f1:cf:36:d4:6a:bc:ed:8c:58:2d:4f:47:
e8:42:78:a9:cd:ba:ef:64:6c:a6:76:91:a6:a9:c9:
53:f1:eb:1a:0f:02:95:35:91:a1:43:98:27:4c:3e:
47:7f:2e:3a:00:3c:87:e8:36:07:ec:67:d7:14:61:
d4:4e:21:ad:51:8b:9f:d0:9c:84:7b:e1:37:d3:13:
ad:54:27:f6:9c:d2:b7:cf:4c:90:a2:b0:fa:2d:da:
6b:2a:e6:bc:00:37:89:a0:a8:eb:03:05:6e:27:7e:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:48:D8:98:8F:57:E9:53:D6:91:4B:7C:3D:83:B7:34:84:DB:BC:2E
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/hkjYmI9X6VPWkUt8PYO3NITbvC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.220.0/23
185.145.240.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b6:04:63:e6:c7:f0:2f:80:f9:7b:b3:07:12:0f:5b:06:4d:
09:d4:61:14:e5:bb:79:68:aa:17:b8:5b:2e:3d:32:90:b9:8d:
c8:6c:79:da:6c:44:6b:40:4a:4b:85:ad:98:96:69:e5:7a:84:
45:b0:15:84:10:bc:1e:26:3b:e3:17:12:39:ab:c1:55:e3:51:
26:a6:b1:20:d9:f3:53:0b:b6:99:c5:99:9b:17:fb:41:52:9d:
ac:7c:33:5a:e0:56:13:74:8c:25:52:c2:01:7d:ba:62:73:d1:
dd:5d:24:c5:79:11:27:92:57:df:23:22:19:ae:ee:b3:7a:44:
f2:0e:0c:fa:a3:ec:05:6a:d8:90:7c:60:ba:c7:d2:2f:41:2e:
df:a5:c2:42:3b:ac:5f:f5:bf:17:fc:d6:0e:8b:68:78:77:6d:
fa:a2:cc:a8:5e:cc:71:9e:fb:e3:6b:bd:d2:54:5f:d5:da:2f:
89:f2:a3:e3:be:23:b5:65:13:ae:1a:a4:16:05:9e:f5:c8:2d:
8d:b7:09:a9:bd:47:76:19:8c:6a:d6:94:8e:6e:10:55:58:e7:
ab:58:38:b9:41:92:45:2b:e9:0c:a9:c4:ac:a0:d1:3e:2a:7b:
48:0f:9c:12:f1:4d:29:9e:44:e6:3d:37:f7:0b:17:e3:70:98:
ae:ec:8d:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7KJSH+mcE2FgnCjJvoJNkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjYwNjE1MDcxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjQ4ZDg5ODhmNTdlOTUzZDY5MTRiN2MzZDgzYjczNDg0ZGJiYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBloMBypDPYgMhFXnUDUHQB78JdO
3VeiHxfTq2CaKVzTRhX00TJHVNPgl14AM5h5rB84gMcJfibNAIuunbAKUqQ33A7s
FCy29S4pFOYVwwkC5pJkMMJpFzlDcIbz+00/nIrFQQXLwzMwZ2cU2uDRcPb82GJZ
Ieh2Ll1UMCmW/mBejBy8HD67LELAaNLOQFJHhoBOvCXBYZXxzzbUarztjFgtT0fo
QnipzbrvZGymdpGmqclT8esaDwKVNZGhQ5gnTD5Hfy46ADyH6DYH7GfXFGHUTiGt
UYuf0JyEe+E30xOtVCf2nNK3z0yQorD6LdprKua8ADeJoKjrAwVuJ34/xQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIZI2JiPV+lT1pFLfD2DtzSE27wuMB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvaGtqWW1JOVg2VlBXa1V0OFBZTzNOSVRidkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbercAwQC
uZHwMA0GCSqGSIb3DQEBCwUAA4IBAQBHtgRj5sfwL4D5e7MHEg9bBk0J1GEU5bt5
aKoXuFsuPTKQuY3IbHnabERrQEpLha2YlmnleoRFsBWEELweJjvjFxI5q8FV41Em
prEg2fNTC7aZxZmbF/tBUp2sfDNa4FYTdIwlUsIBfbpic9HdXSTFeREnklffIyIZ
ru6zekTyDgz6o+wFatiQfGC6x9IvQS7fpcJCO6xf9b8X/NYOi2h4d236osyoXsxx
nvvja73SVF/V2i+J8qPjviO1ZROuGqQWBZ71yC2NtwmpvUd2GYxq1pSObhBVWOer
WDi5QZJFK+kMqcSsoNE+KntID5wS8U0pnkTmPTf3CxfjcJiu7I3R
-----END CERTIFICATE-----
Generated at Tue Jul 7 22:09:57 2026 by rpki-client