Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/hx13qeZvMZ7CkgtNj_PPPv78xFY.roa
File: hx13qeZvMZ7CkgtNj_PPPv78xFY.roa (raw, json)
Hash identifier: CRsLACP7NSVDuxBm9D3SK9UIt5ALRDRxl1uvehhLfs4=
Subject key identifier: 87:1D:77:A9:E6:6F:31:9E:C2:92:0B:4D:8F:F3:CF:3E:FE:FC:C4:56
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 01A07FF298C2A1660C59847A8FA0A94AE42F
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/hx13qeZvMZ7CkgtNj_PPPv78xFY.roa
Signing time: Tue 08 Sep 2026 07:36:40 +0000
ROA not before: Tue 08 Sep 2026 07:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3399
IP address blocks: 45.141.108.0/22 maxlen: 22
93.164.128.0/19 maxlen: 19
164.37.160.0/19 maxlen: 19
178.132.72.0/21 maxlen: 21
185.86.104.0/22 maxlen: 22
185.147.236.0/22 maxlen: 22
185.242.228.0/22 maxlen: 22
195.128.240.0/23 maxlen: 23
195.128.254.0/23 maxlen: 23
2a03:8600::/32 maxlen: 32
2a07:5cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:f2:98:c2:a1:66:0c:59:84:7a:8f:a0:a9:4a:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Sep 8 07:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=871d77a9e66f319ec2920b4d8ff3cf3efefcc456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:c7:f4:97:0b:89:45:ad:da:1f:c5:40:c2:
f2:71:66:42:8d:c8:1d:5c:0e:f9:92:b6:67:c5:d2:
7b:4b:e5:0b:5c:ee:19:98:8c:d6:16:bd:e2:bb:56:
e4:43:7f:8f:a7:e7:04:f1:2e:62:bd:1b:30:66:06:
43:70:3e:ee:69:22:a1:0f:c6:ad:5b:e9:cc:a3:c6:
08:19:07:3d:db:a4:d9:4c:7d:02:06:73:8a:a0:f1:
99:39:13:5f:7e:d9:44:1f:ce:32:8e:77:44:50:1b:
7d:7a:a1:06:8f:c3:26:18:12:c1:b9:1d:5e:4e:d7:
81:1d:51:70:00:56:f2:20:db:d6:ff:b4:d7:6a:da:
58:a2:ba:ea:09:80:72:fd:c4:6e:2e:78:c7:af:cd:
c1:9a:a8:27:36:e3:69:2a:eb:48:4f:bf:3c:ee:3e:
32:0c:1f:b3:37:92:04:a9:22:a1:40:0c:be:c0:73:
20:fe:22:23:fc:ab:0d:15:97:f7:34:57:61:39:ad:
a8:f7:f1:12:8c:5d:be:4d:b1:54:d1:cc:0c:99:12:
e0:4f:63:4e:75:40:07:c2:33:e6:66:14:00:d7:b0:
14:91:36:61:17:66:03:71:cd:27:7c:22:ba:b1:13:
9f:fc:66:70:57:af:90:a3:27:75:e6:5d:84:ea:a8:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:77:A9:E6:6F:31:9E:C2:92:0B:4D:8F:F3:CF:3E:FE:FC:C4:56
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/hx13qeZvMZ7CkgtNj_PPPv78xFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.108.0/22
93.164.128.0/19
164.37.160.0/19
178.132.72.0/21
185.86.104.0/22
185.147.236.0/22
185.242.228.0/22
195.128.240.0/23
195.128.254.0/23
IPv6:
2a03:8600::/32
2a07:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:b7:fb:2e:f6:a2:ef:30:f8:60:5a:c7:d0:00:9a:29:85:4e:
41:35:0c:db:09:6e:11:ce:f4:ec:28:9b:a8:16:54:64:7f:9f:
51:9d:bc:a0:fa:ae:1e:7f:a9:bb:9a:43:ea:1f:0d:03:75:87:
c8:ec:29:26:a1:08:f7:b5:13:b4:29:14:0f:0d:95:25:2a:b9:
ae:7e:db:d0:dd:1e:27:36:4b:d2:d7:e6:d1:68:41:3e:c6:49:
97:a9:69:54:93:6a:f3:13:3c:eb:d7:51:15:3d:46:51:89:72:
05:d6:40:b0:40:af:cf:33:2b:85:f7:5c:c0:87:0a:17:4d:26:
dd:15:93:b4:87:df:d1:70:eb:b5:40:29:e8:da:0f:01:dc:f2:
1d:b4:b8:56:f7:1a:d7:63:a8:71:75:a7:81:6c:ef:f1:c2:c3:
04:79:7d:89:35:90:76:d9:2a:ce:0b:dc:53:95:4c:01:72:76:
18:5a:14:f3:4e:a1:47:a4:c6:d6:9c:e7:8c:c6:92:0e:bb:7a:
30:c6:50:fb:49:db:5f:ac:94:ea:a0:e1:57:c2:34:0b:bf:42:
33:5e:a7:1c:4e:2b:be:43:3c:02:e0:a0:4f:74:d3:66:c3:f1:
30:e7:fc:58:4f:26:cd:5e:13:95:e3:a0:da:de:c7:92:fc:dd:
3a:9b:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:34:16 2026 by rpki-client