Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HHKt-qxdQpoaS_2zL0Yf6QVNvNw.roa
File: HHKt-qxdQpoaS_2zL0Yf6QVNvNw.roa (raw, json)
Hash identifier: KVgoHClUTsLDfu8z/slCD/mA1yxnxjito0M5arufMgI=
Subject key identifier: 1C:72:AD:FA:AC:5D:42:9A:1A:4B:FD:B3:2F:46:1F:E9:05:4D:BC:DC
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019FEFC3B0D1C6F3727236708E9A6AF81EA5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HHKt-qxdQpoaS_2zL0Yf6QVNvNw.roa
Signing time: Tue 11 Aug 2026 07:40:07 +0000
ROA not before: Tue 11 Aug 2026 07:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219290
IP address blocks: 85.120.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:c3:b0:d1:c6:f3:72:72:36:70:8e:9a:6a:f8:1e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 11 07:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c72adfaac5d429a1a4bfdb32f461fe9054dbcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:41:26:8c:44:d4:7e:3e:4f:f5:01:1d:d3:
b5:c2:58:cf:a6:0d:3e:55:fa:c5:09:36:ff:d4:cf:
bb:be:d5:64:bb:f5:d7:62:39:a9:13:43:61:c2:31:
6e:ff:f6:e5:85:c9:b0:7f:8f:80:bf:93:52:13:e2:
29:bb:82:e3:dc:65:9a:1b:98:7f:1b:83:25:5b:1b:
21:19:1f:42:1d:e9:11:95:25:7a:c5:4c:b6:13:72:
b0:1a:e9:fa:ad:ba:05:25:1f:81:21:ba:78:65:7b:
32:50:79:7c:ff:cb:e2:de:3e:f0:7d:bd:81:e5:be:
58:b5:db:a4:5f:95:eb:53:6e:85:c0:3b:68:9c:19:
23:5f:96:88:5e:5c:44:7f:c0:23:58:0c:e5:d0:b6:
df:13:39:3c:0a:65:0b:00:ae:7c:3d:6d:b1:fe:82:
2f:2f:3f:fe:65:5d:6d:2c:f1:94:00:f7:8f:41:c2:
b9:86:19:a7:b6:e9:46:49:89:54:43:77:a1:e2:29:
b6:85:6a:21:b7:27:12:af:d7:22:f0:7b:fd:38:72:
d6:cd:ac:e2:df:f2:c5:3e:5a:8b:82:76:0f:2c:19:
38:fc:f1:fa:dd:b9:f4:8d:7f:3f:82:22:5c:03:a3:
0e:c0:c6:dd:8e:43:2d:fd:ba:24:83:29:ba:df:a3:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:AD:FA:AC:5D:42:9A:1A:4B:FD:B3:2F:46:1F:E9:05:4D:BC:DC
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HHKt-qxdQpoaS_2zL0Yf6QVNvNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.72.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:94:94:7c:0e:cf:60:84:ec:d1:3c:b3:19:63:a2:97:db:1c:
cf:2d:81:b1:cc:5a:10:09:5a:04:b6:34:0e:f5:84:ea:07:43:
88:2d:4a:33:b9:c8:4e:cc:a8:d2:c0:18:fd:b1:31:15:00:bd:
67:c2:0b:84:35:19:e3:65:05:60:2d:63:86:91:f4:b7:d7:1b:
a2:1b:ad:1d:07:d8:4a:43:34:65:79:9c:1b:13:b6:b3:be:b2:
bc:7a:c9:13:2c:d6:de:9b:b3:6f:b5:a2:6e:07:04:1f:ed:aa:
ed:65:04:95:81:4e:aa:79:c1:f4:f8:ba:2c:3c:37:4a:c0:dc:
f8:6c:7c:b9:1d:9d:3b:df:fb:85:74:fa:65:41:d4:20:59:dc:
a3:28:3d:b8:d3:48:cf:3d:c3:2f:b3:b2:4f:bb:fb:27:15:f5:
c9:1e:e2:16:2e:e0:85:28:ae:33:3a:18:e8:41:ff:a5:22:65:
44:0c:49:34:49:21:c7:fa:21:d3:16:7e:60:b2:95:32:de:2a:
ac:28:44:2c:e4:7d:1a:a2:36:1f:db:43:53:53:b0:37:38:48:
8b:83:82:e8:bb:16:f0:94:a7:4f:fa:1f:c4:7c:21:9a:7e:dd:
d2:45:98:ae:e0:e6:dc:33:c5:ac:47:41:91:de:ff:79:ab:b1:
8c:54:de:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/vw7DRxvNycjZwjppq+B6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwODExMDc0MDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzcyYWRmYWFjNWQ0MjlhMWE0YmZkYjMyZjQ2MWZlOTA1NGRiY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8BBJoxE1H4+T/UBHdO1wljPpg0+
VfrFCTb/1M+7vtVku/XXYjmpE0NhwjFu//blhcmwf4+Av5NSE+Ipu4Lj3GWaG5h/
G4MlWxshGR9CHekRlSV6xUy2E3KwGun6rboFJR+BIbp4ZXsyUHl8/8vi3j7wfb2B
5b5YtdukX5XrU26FwDtonBkjX5aIXlxEf8AjWAzl0LbfEzk8CmULAK58PW2x/oIv
Lz/+ZV1tLPGUAPePQcK5hhmntulGSYlUQ3eh4im2hWohtycSr9ci8Hv9OHLWzazi
3/LFPlqLgnYPLBk4/PH63bn0jX8/giJcA6MOwMbdjkMt/bokgym636Mw9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxyrfqsXUKaGkv9sy9GH+kFTbzcMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSEhLdC1xeGRRcG9hU18yekwwWWY2UVZOdk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVXhIMA0G
CSqGSIb3DQEBCwUAA4IBAQCulJR8Ds9ghOzRPLMZY6KX2xzPLYGxzFoQCVoEtjQO
9YTqB0OILUozuchOzKjSwBj9sTEVAL1nwguENRnjZQVgLWOGkfS31xuiG60dB9hK
QzRleZwbE7azvrK8eskTLNbem7NvtaJuBwQf7artZQSVgU6qecH0+LosPDdKwNz4
bHy5HZ073/uFdPplQdQgWdyjKD2400jPPcMvs7JPu/snFfXJHuIWLuCFKK4zOhjo
Qf+lImVEDEk0SSHH+iHTFn5gspUy3iqsKEQs5H0aojYf20NTU7A3OEiLg4Louxbw
lKdP+h/EfCGaft3SRZiu4ObcM8WsR0GR3v95q7GMVN7Z
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:35:45 2026 by rpki-client