Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/hEhIjS0ORg20vDLZPvNe1LJQxdo.roa
File: hEhIjS0ORg20vDLZPvNe1LJQxdo.roa (raw, json)
Hash identifier: zdEFOgEeugKZB5LqKjNhC4ijtd0+2zoCbXGI3USJ4wA=
Subject key identifier: 84:48:48:8D:2D:0E:46:0D:B4:BC:32:D9:3E:F3:5E:D4:B2:50:C5:DA
Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial: 019ECC1DEC762FEBBDE68A2E266A47758A6F
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/hEhIjS0ORg20vDLZPvNe1LJQxdo.roa
Signing time: Mon 15 Jun 2026 16:29:33 +0000
ROA not before: Mon 15 Jun 2026 16:29:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198380
IP address blocks: 134.90.240.0/21 maxlen: 21
134.90.240.0/22 maxlen: 22
134.90.244.0/22 maxlen: 22
217.196.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:1d:ec:76:2f:eb:bd:e6:8a:2e:26:6a:47:75:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Validity
Not Before: Jun 15 16:29:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8448488d2d0e460db4bc32d93ef35ed4b250c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:0f:64:97:21:4f:8f:12:51:d2:e9:e9:20:
71:8b:99:2e:86:ac:da:87:fe:5d:5c:81:f9:1d:c8:
8f:8f:ef:8a:4c:e9:c5:3f:37:80:f4:2f:25:16:80:
ef:a2:9b:8f:48:83:73:8e:4a:4d:57:df:cd:0d:bb:
05:12:f7:19:03:92:bf:1b:41:f8:98:c1:54:51:8c:
d0:9b:16:ea:0b:4e:ae:4d:3c:e9:59:7e:90:35:d9:
52:e3:9d:c0:c2:e8:78:96:c9:98:e0:08:ec:50:0e:
61:c7:8a:04:a6:fb:72:bd:c4:67:ab:f2:a3:76:12:
71:85:94:45:f1:15:7d:ea:6d:31:52:53:40:ba:b8:
f1:e7:1b:27:79:ce:15:2d:22:04:74:a3:19:7d:d8:
f6:08:c2:31:dd:92:8d:ab:99:e1:a4:20:f6:6a:22:
2f:a4:ce:50:ca:1a:7d:38:c1:14:ad:1c:ee:cb:7c:
77:d5:ae:bf:dd:9b:96:04:00:b0:7c:03:77:e3:7c:
8c:a8:03:1a:6b:77:1d:62:d7:29:a2:e0:f4:90:c7:
b8:11:32:06:f8:bf:44:94:58:8e:63:2c:b5:07:a7:
a1:93:36:85:7e:2c:59:e3:80:4f:25:08:b0:9b:b7:
44:32:24:e1:e8:f5:e1:81:cd:d9:e5:55:0c:f0:2f:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:48:8D:2D:0E:46:0D:B4:BC:32:D9:3E:F3:5E:D4:B2:50:C5:DA
X509v3 Authority Key Identifier:
keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/hEhIjS0ORg20vDLZPvNe1LJQxdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.90.240.0/21
217.196.138.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:3d:89:9c:b9:23:af:4b:84:cd:d2:ff:65:41:8a:44:f6:14:
5b:62:93:30:de:8d:5a:7d:ea:74:6b:56:ff:58:78:82:6d:2c:
e4:91:57:50:06:ac:40:f3:69:fb:7f:7c:a5:34:91:7e:43:55:
da:9e:78:11:a6:83:76:b1:79:4b:92:f9:f1:e0:42:e8:92:8a:
58:0a:6f:4b:b5:c7:32:44:c4:4f:e7:9c:00:fd:15:73:a0:59:
0a:67:b2:25:33:17:dc:4f:06:70:ce:0f:d8:3c:3c:8a:8c:10:
39:18:3d:b3:e7:e5:8a:3d:2a:54:b7:f9:ad:f1:7f:8c:90:1d:
ea:31:f0:c2:5f:c9:a0:5b:81:e8:10:b8:bd:fe:af:91:50:4e:
50:4c:f6:ae:f7:1d:5b:46:06:9c:96:12:66:28:b5:c7:19:02:
61:a1:16:59:ba:8f:26:36:bd:da:bc:45:1a:08:10:55:bc:26:
c0:be:91:03:53:a3:2f:a9:1a:21:7a:5d:d7:07:de:1f:17:60:
da:32:ea:03:4a:13:7e:e6:34:df:29:e8:67:00:02:df:80:cb:
b7:fb:b0:31:ba:96:6c:90:db:92:56:65:77:84:01:ed:b9:fc:
f4:2a:14:a1:c8:24:d9:14:54:d0:cc:50:d0:f0:a0:06:04:67:
87:cb:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:58 2026 by rpki-client