Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HRk6S66nkp_2mcuwEjTCpcUPX_k.roa
File: HRk6S66nkp_2mcuwEjTCpcUPX_k.roa (raw, json)
Hash identifier: yIFIAocvdKJN3uQZ84wlDqROc6M1HsQSL3+X/9JsdpY=
Subject key identifier: 1D:19:3A:4B:AE:A7:92:9F:F6:99:CB:B0:12:34:C2:A5:C5:0F:5F:F9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D66261A8FA2C9F66829E790F5CD423CA6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HRk6S66nkp_2mcuwEjTCpcUPX_k.roa
Signing time: Tue 07 Apr 2026 04:14:26 +0000
ROA not before: Tue 07 Apr 2026 04:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20724
IP address blocks: 80.244.13.0/24 maxlen: 24
91.227.62.0/24 maxlen: 24
185.244.104.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:26:1a:8f:a2:c9:f6:68:29:e7:90:f5:cd:42:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 7 04:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d193a4baea7929ff699cbb01234c2a5c50f5ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:ea:ab:41:21:32:21:81:c5:47:3d:23:a6:
50:43:59:e9:8f:fb:54:0a:24:09:d3:38:45:25:28:
41:31:d2:15:ec:a7:8f:62:34:b1:68:14:9d:61:4b:
2b:53:41:a4:10:26:2e:0e:f9:aa:f7:5b:61:3a:48:
34:17:b1:d9:3f:1f:29:7d:25:e9:f7:0e:4a:64:c7:
aa:49:8e:86:ae:28:98:ed:99:53:52:04:d1:b3:7a:
90:70:bd:79:a4:20:ec:36:3e:a1:99:88:6a:aa:b5:
d7:5d:e9:d7:e8:c4:ea:8f:aa:bf:31:f1:0f:c7:55:
39:da:54:d7:9f:72:d3:b6:fd:13:9d:49:06:9b:0d:
0c:c4:45:8c:9c:f6:77:0f:34:5c:1f:c9:6f:fe:1f:
92:56:4f:79:32:15:b5:a2:2d:fd:b0:31:cf:37:b9:
2b:46:d4:ae:00:5d:de:b8:72:9d:84:29:30:b2:9e:
1e:bf:93:f6:af:5c:6a:15:78:18:2b:65:03:9f:fd:
56:7c:ce:d6:d3:f0:93:9b:ed:8f:12:f0:41:f3:e6:
11:8d:54:76:54:05:d4:b7:2e:fb:00:50:80:c7:f9:
7d:45:40:ff:e1:69:a8:b8:87:92:6a:e6:45:2c:04:
d2:07:fc:f8:85:77:61:3b:2f:b4:12:76:88:82:66:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:19:3A:4B:AE:A7:92:9F:F6:99:CB:B0:12:34:C2:A5:C5:0F:5F:F9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HRk6S66nkp_2mcuwEjTCpcUPX_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.13.0/24
91.227.62.0/24
185.244.104.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:69:f6:6a:2e:29:93:50:93:c4:b2:c1:7f:26:56:33:23:db:
56:d9:70:71:70:11:a3:af:37:68:ae:53:43:35:b9:9a:c8:a0:
4b:b2:08:32:b7:69:34:29:01:bc:5e:70:18:5c:d3:d5:f5:4f:
1e:52:94:7e:d1:dd:4b:1b:33:cf:b5:4e:6c:3b:cc:b5:06:77:
16:86:2d:29:cd:fb:ba:a3:95:22:e5:f4:3e:bf:70:95:b5:3e:
00:7f:34:4c:21:da:33:08:4c:c9:d2:ed:fd:1a:5a:56:93:e8:
89:ef:ba:44:d0:dd:cc:88:f3:7b:56:97:2e:f4:44:b3:23:7f:
7e:59:ca:99:8e:0f:a4:55:93:54:87:57:4f:8d:fd:ae:30:c6:
c5:9f:93:41:d6:56:7f:3b:31:57:89:3b:5f:49:e4:dc:c5:03:
85:2b:58:b6:45:97:59:ae:66:f6:a9:a3:9a:6b:b9:4b:22:e3:
50:47:6c:9c:a3:4c:58:32:04:93:5a:91:6b:64:77:9d:41:27:
f9:be:fb:44:1d:f2:f8:41:f0:a0:cd:74:46:30:c0:32:e3:83:
79:e5:0d:d0:27:61:4d:4b:49:2f:44:16:ba:58:88:d2:03:46:
c3:24:ae:f8:a2:6b:d2:b2:a9:72:5f:c6:d5:4b:0c:ec:1a:f1:
b9:fe:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:20:10 2026 by rpki-client