Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/hVXu442W8sHVh8F2wI339U-u6hw.roa
File: hVXu442W8sHVh8F2wI339U-u6hw.roa (raw, json)
Hash identifier: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=
Subject key identifier: 85:55:EE:E3:8D:96:F2:C1:D5:87:C1:76:C0:8D:F7:F5:4F:AE:EA:1C
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019ED9A0180A2ECCCB67F1F4C01D33BFA2BC
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/hVXu442W8sHVh8F2wI339U-u6hw.roa
Signing time: Thu 18 Jun 2026 07:26:48 +0000
ROA not before: Thu 18 Jun 2026 07:26:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197421
IP address blocks: 45.128.120.0/22 maxlen: 24
45.128.121.0/24 maxlen: 24
45.128.122.0/24 maxlen: 24
45.128.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:a0:18:0a:2e:cc:cb:67:f1:f4:c0:1d:33:bf:a2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Jun 18 07:26:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8555eee38d96f2c1d587c176c08df7f54faeea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:4b:c8:b8:af:d6:57:0a:ca:7a:e7:39:76:
f4:de:4f:f1:3b:75:41:06:a6:5e:b7:76:53:7c:96:
3f:48:e8:c8:5a:3e:a0:6f:e8:99:83:1c:cc:37:03:
18:27:b2:5e:2f:5f:c0:ef:d2:ff:6d:90:7b:01:73:
da:53:74:e6:0d:aa:cc:5a:64:4d:26:54:37:ca:1f:
f2:a2:5d:69:7a:d3:3c:07:a9:94:81:cb:b3:9e:8a:
a4:48:88:70:c3:76:da:df:4f:90:57:99:32:d6:cd:
94:9c:34:f4:67:56:03:bc:a6:53:a5:b4:27:54:a7:
53:61:e0:84:02:e7:c0:25:a2:67:52:9b:94:25:79:
20:f0:c0:79:62:5f:52:e9:bd:45:76:53:dc:86:91:
7b:04:03:b7:62:33:55:f7:81:be:7c:81:81:fc:07:
c9:cc:0f:87:77:88:80:78:4f:7e:db:f7:a3:bd:c9:
90:84:a3:1b:93:64:17:28:be:a7:fa:bd:44:08:01:
e0:34:8d:d0:f3:a6:f5:50:1d:34:f0:02:82:b5:f3:
32:31:90:72:5d:3b:b2:47:54:f6:32:d6:57:99:b2:
30:93:5a:57:fe:1a:54:a1:0f:df:62:ab:75:3a:92:
0b:6f:f4:a1:30:67:b6:64:ac:f1:1f:29:72:76:7e:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:EE:E3:8D:96:F2:C1:D5:87:C1:76:C0:8D:F7:F5:4F:AE:EA:1C
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/hVXu442W8sHVh8F2wI339U-u6hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
02:7c:9c:35:d8:87:62:ee:6e:b6:c0:c4:b5:94:e1:01:37:5c:
ae:17:6b:34:ea:ed:46:cb:de:1e:96:36:ba:38:43:2d:85:96:
a7:eb:28:8c:b4:bb:d5:00:f4:84:a4:b0:d2:0f:0f:e0:6f:0f:
79:a4:dd:a1:80:17:ec:49:05:eb:14:c4:03:70:fa:b8:7f:24:
b2:2b:f0:e1:58:0b:ac:0b:49:7a:a8:8d:ce:52:78:3c:d9:eb:
04:be:a9:29:b4:ca:09:6d:ff:87:58:fa:bb:ab:99:5f:e7:fd:
34:92:b7:75:b6:b6:68:f1:5c:c4:fa:af:ee:d2:00:f7:e1:55:
cb:1c:e1:34:20:60:22:0d:04:b0:00:9b:8f:8c:ff:72:96:eb:
ff:e5:da:6f:f4:b0:6e:75:8c:3d:5f:79:95:e9:5e:b0:a0:6c:
ad:96:64:cd:ac:74:e8:7a:34:4b:0e:13:7f:7a:d2:96:6f:c8:
dd:59:e4:c7:0a:2e:5f:7c:46:d8:48:24:f1:fd:3c:16:94:84:
ba:07:5b:fa:0a:56:a7:98:f7:4a:e9:94:da:f8:96:99:87:4b:
a9:0c:78:6b:3b:ab:6c:e5:0e:59:b8:66:97:00:db:18:4c:ee:
a8:7c:a5:7c:eb:e0:3a:f2:67:6f:4f:a8:cf:cf:c5:8e:b8:04:
0c:08:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:20:11 2026 by rpki-client