Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/HlYqT_kwkLWmKlOfuC7oNKHvGgw.roa
File: HlYqT_kwkLWmKlOfuC7oNKHvGgw.roa (raw, json)
Hash identifier: wbmPokxDOoHIPfR7QTpjuQ/c382mpseG/N4hPA1qI84=
Subject key identifier: 1E:56:2A:4F:F9:30:90:B5:A6:2A:53:9F:B8:2E:E8:34:A1:EF:1A:0C
Certificate issuer: /CN=78c46c097e176bce6c895c1ed744bfa43eb3dc6e
Certificate serial: 019F2368E9D77AC322CECBFD2B68799D36D6
Authority key identifier: 78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/HlYqT_kwkLWmKlOfuC7oNKHvGgw.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196903
IP address blocks: 109.207.48.0/20 maxlen: 20
109.207.48.0/24 maxlen: 24
109.207.49.0/24 maxlen: 24
109.207.50.0/24 maxlen: 24
109.207.51.0/24 maxlen: 24
109.207.52.0/24 maxlen: 24
109.207.53.0/24 maxlen: 24
109.207.54.0/24 maxlen: 24
109.207.55.0/24 maxlen: 24
109.207.56.0/24 maxlen: 24
109.207.57.0/24 maxlen: 24
109.207.58.0/24 maxlen: 24
109.207.59.0/24 maxlen: 24
109.207.60.0/24 maxlen: 24
109.207.61.0/24 maxlen: 24
109.207.62.0/24 maxlen: 24
109.207.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 14:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e9:d7:7a:c3:22:ce:cb:fd:2b:68:79:9d:36:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c46c097e176bce6c895c1ed744bfa43eb3dc6e
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e562a4ff93090b5a62a539fb82ee834a1ef1a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:0d:d2:5a:27:8c:ca:68:e5:52:05:b5:06:
b0:6e:e2:22:c5:e4:d6:bf:c4:b0:3c:ed:d4:51:4f:
6b:b3:3c:1d:54:93:ac:04:fd:6f:c0:b6:02:d0:ac:
34:0e:66:93:08:dc:ef:f8:e0:4f:f8:cf:ab:3f:46:
45:b8:da:3a:fa:c9:cb:d5:6f:5c:32:cf:1a:0b:88:
09:23:74:56:52:b2:e8:40:c9:55:d1:89:12:87:9e:
89:46:96:4e:89:8f:5a:cf:49:6e:d1:45:c2:c9:a4:
08:a9:d0:94:f8:0e:73:c8:58:8a:0e:51:71:da:3c:
e0:52:5f:5a:ed:78:82:d8:76:4c:a3:3f:12:ca:a6:
7a:66:bc:fe:92:f8:c6:fe:6f:1a:8c:0c:e4:ca:27:
c9:e5:e4:4f:64:37:c0:d3:ae:d9:e2:b7:be:79:4b:
1d:68:b6:d6:ba:d8:97:dc:98:d0:5d:25:6a:6d:c7:
c4:d5:71:a4:ad:0e:60:e5:a8:d6:e5:48:7a:ee:04:
a2:b5:25:f6:aa:5f:11:54:4e:f6:a1:20:14:6f:9e:
5c:d3:29:45:c3:80:16:5a:59:b4:7a:d7:6e:07:a1:
dc:b6:ea:4a:9b:46:a7:70:aa:f6:9e:7d:c6:56:6f:
8d:f7:24:8d:4e:e5:41:17:aa:71:e1:1e:b5:54:48:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:2A:4F:F9:30:90:B5:A6:2A:53:9F:B8:2E:E8:34:A1:EF:1A:0C
X509v3 Authority Key Identifier:
keyid:78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/HlYqT_kwkLWmKlOfuC7oNKHvGgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:f3:34:8c:84:55:7a:a9:63:b1:ac:8d:78:14:aa:2f:a3:9d:
e1:4a:7f:48:17:d7:9e:cc:22:8c:3a:fa:3e:8f:a8:a8:47:73:
c5:44:fb:4b:cc:5e:f6:88:27:93:4a:38:fa:61:3c:24:09:a7:
4c:6f:f1:3e:8c:3b:cf:f1:fc:b7:3f:7f:64:6f:59:24:2d:89:
9a:72:48:dd:5e:c4:e9:64:5a:75:95:15:93:b8:80:6f:20:82:
3e:e4:06:bd:ee:4a:96:31:aa:55:e1:e2:f2:de:04:b2:cf:eb:
df:db:fc:9e:8a:0d:28:df:1f:99:97:cf:21:aa:a5:b5:10:9c:
50:75:9b:1c:a2:2b:9f:af:dd:84:3b:d1:53:57:34:c3:f2:af:
a1:d6:84:da:a0:f6:2e:22:eb:65:7c:04:75:fc:b6:88:5a:24:
77:c1:2f:f8:99:ac:6d:05:63:a9:cc:eb:dd:53:c6:61:58:6f:
42:d4:a4:18:92:9d:db:e2:9b:57:82:e0:f8:f4:46:37:89:c3:
ed:16:98:c6:19:81:49:41:35:a3:47:8e:4f:09:70:95:f3:0d:
81:ca:47:f0:e0:54:33:b1:b8:99:a2:0a:b1:a3:da:56:a5:1b:
32:ee:a9:38:48:cf:4a:f2:64:29:d1:a9:9a:9b:a1:87:bd:06:
42:a4:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 19:48:20 2026 by rpki-client