Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HXQGOfCY2m_O9lOmIuNm0PTejmQ.roa
File: HXQGOfCY2m_O9lOmIuNm0PTejmQ.roa (raw, json)
Hash identifier: tXihsgJIlnufWdTybxeWbtObfu6qkJym/i221drFjvI=
Subject key identifier: 1D:74:06:39:F0:98:DA:6F:CE:F6:53:A6:22:E3:66:D0:F4:DE:8E:64
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EF99420DBD3805078B6BC35ED933E0191
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HXQGOfCY2m_O9lOmIuNm0PTejmQ.roa
Signing time: Wed 24 Jun 2026 12:21:35 +0000
ROA not before: Wed 24 Jun 2026 12:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 194.77.94.0/24 maxlen: 24
195.21.128.0/24 maxlen: 24
195.21.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:94:20:db:d3:80:50:78:b6:bc:35:ed:93:3e:01:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 24 12:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d740639f098da6fcef653a622e366d0f4de8e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:87:f4:69:69:5d:d8:f0:c8:96:b9:56:12:
94:ef:84:2a:ea:1e:07:27:d9:3b:9a:ac:30:ff:e5:
3f:1f:e1:f2:70:f1:10:fb:50:c6:dc:03:a4:97:56:
9d:0d:58:6e:3b:8c:e4:84:92:d3:ed:5b:c7:dd:f2:
28:a4:42:30:ca:40:8a:6d:79:60:df:6d:2f:50:94:
64:e5:3b:72:45:8e:fd:68:d6:03:d4:63:8c:a2:07:
eb:e3:3d:d6:20:c1:37:63:0c:4f:5f:58:8c:61:24:
6b:c0:a2:fc:15:6f:50:35:cd:ec:7f:f2:1c:7e:23:
a5:10:27:2f:12:35:8a:43:77:9b:27:9b:f9:56:80:
4c:a3:f3:35:33:55:f6:7b:9b:df:1c:40:13:0e:d1:
b1:36:e5:16:e2:da:43:88:c6:78:47:12:e2:15:cd:
70:8e:37:5b:93:fa:2d:e5:24:fe:64:11:d7:22:3f:
e4:53:c4:b4:3c:4c:7a:9d:a6:5f:23:99:22:a3:99:
76:24:b4:53:7b:86:0e:3a:df:cb:0c:bc:6e:f5:74:
96:d9:58:e0:6b:6b:91:ed:c1:9d:8d:5e:20:6e:0d:
d9:06:23:2e:ec:29:6d:3a:bf:67:90:b7:6f:09:83:
22:22:3a:e5:0f:1e:6f:67:c9:36:0b:c4:63:4d:43:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:06:39:F0:98:DA:6F:CE:F6:53:A6:22:E3:66:D0:F4:DE:8E:64
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HXQGOfCY2m_O9lOmIuNm0PTejmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.94.0/24
195.21.128.0/24
195.21.148.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2b:f2:19:91:a0:d0:4f:de:7b:7b:85:42:9b:81:93:ee:ec:
08:3d:73:8f:4f:f3:f6:95:1f:20:75:b7:f8:da:9b:c8:13:4e:
5e:0e:09:96:7c:85:12:7b:d9:6f:3e:ab:29:e8:1e:64:38:8e:
bb:3f:42:37:02:27:50:71:d1:4a:e2:c0:d4:90:71:ba:da:fb:
48:51:71:f6:c1:26:dc:09:e7:e1:03:c0:0f:cb:83:5d:ca:05:
46:ac:40:c0:86:47:88:08:08:60:8f:06:5a:20:dd:a8:29:dc:
47:1b:6a:c4:63:42:7f:4d:ca:9c:1e:bf:9a:46:fe:1d:a9:ad:
c6:d9:dd:77:e4:86:f0:5e:40:1d:31:34:fe:2e:dd:bd:6e:6e:
7a:24:20:3b:f0:67:31:d6:42:af:a3:c6:fa:eb:1b:7b:ff:30:
a5:ce:52:e9:ab:84:d4:10:95:fc:de:57:9d:bc:fa:dc:06:1c:
e3:73:cf:dd:b8:6c:49:85:b3:c8:b4:c1:00:81:0f:0d:31:35:
4b:39:6b:65:01:82:9e:d1:6e:d5:bc:c8:a9:92:60:77:90:df:
c8:22:42:9e:8f:a9:93:0f:d2:00:b5:0e:05:2b:ee:8e:78:52:
0f:13:55:7c:93:ad:65:07:32:96:26:0b:37:6a:53:b8:8f:05:
ed:8a:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:28:08 2026 by rpki-client