Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/HYC954OTDUxlzgJW0_84gTMaNZI.roa
File: HYC954OTDUxlzgJW0_84gTMaNZI.roa (raw, json)
Hash identifier: 2qPU/JFLc0XCHBKayFD9RxhT6JBfREvLkMlzYOfJmv8=
Subject key identifier: 1D:80:BD:E7:83:93:0D:4C:65:CE:02:56:D3:FF:38:81:33:1A:35:92
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 01A0325095400B4E2D777229BAC76E75677A
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/HYC954OTDUxlzgJW0_84gTMaNZI.roa
Signing time: Mon 24 Aug 2026 05:48:56 +0000
ROA not before: Mon 24 Aug 2026 05:48:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43541
IP address blocks: 46.243.48.0/24 maxlen: 24
46.243.49.0/24 maxlen: 24
46.243.50.0/24 maxlen: 24
46.243.55.0/24 maxlen: 24
78.24.8.0/21 maxlen: 21
93.185.96.0/20 maxlen: 20
178.251.187.0/24 maxlen: 24
178.251.191.0/24 maxlen: 24
185.14.252.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
185.64.216.0/22 maxlen: 22
185.115.1.0/24 maxlen: 24
185.115.2.0/24 maxlen: 24
217.16.176.0/20 maxlen: 20
2a00:1ed0::/32 maxlen: 32
2a00:1ed1::/32 maxlen: 32
2a00:1ed2::/32 maxlen: 32
2a02:5420:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:50:95:40:0b:4e:2d:77:72:29:ba:c7:6e:75:67:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Aug 24 05:48:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d80bde783930d4c65ce0256d3ff3881331a3592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:ad:f1:53:23:1f:55:f9:54:a6:0c:b0:63:
59:2a:e0:04:c3:d7:6a:d1:22:6e:9c:8c:24:d2:da:
5b:4b:7d:2f:29:cf:79:93:ca:d0:50:1f:a7:4f:16:
13:d0:32:e0:47:e1:e2:64:40:35:d0:28:10:68:a7:
53:fd:63:f1:d8:e5:2b:71:f9:95:52:10:6c:7d:77:
13:7d:14:5c:43:75:d6:31:b3:5c:61:e3:f2:ac:fa:
d4:25:3b:f2:fc:a9:f6:27:18:8d:ce:10:a8:fc:01:
04:a6:00:ad:84:2b:9d:a7:9f:6b:1c:cd:7a:13:86:
0f:a5:44:1f:83:80:dc:76:0d:04:01:90:18:e3:7f:
76:10:5e:dc:28:22:10:23:7c:56:ed:fb:a4:d2:75:
79:3f:52:d6:33:0f:4c:a4:35:71:0f:68:4b:e4:10:
ca:ce:ac:79:72:21:7e:2b:7a:91:af:f0:3d:da:76:
62:1f:0a:bb:a2:c2:d4:f6:6a:95:0b:7b:2b:25:7b:
7e:4d:e7:a1:e2:a0:61:08:27:dc:8a:7e:d2:44:a7:
26:e2:15:f6:79:e4:78:8a:58:2f:32:66:8f:ac:7f:
e4:33:84:00:7a:75:a3:69:12:e6:de:a7:93:24:3a:
9d:fc:2c:9b:c3:ba:b6:f2:df:4b:dc:27:d6:e6:53:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:BD:E7:83:93:0D:4C:65:CE:02:56:D3:FF:38:81:33:1A:35:92
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/HYC954OTDUxlzgJW0_84gTMaNZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0-46.243.50.255
46.243.55.0/24
78.24.8.0/21
93.185.96.0/20
178.251.187.0/24
178.251.191.0/24
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::-2a00:1ed2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:5420:11::/48
Signature Algorithm: sha256WithRSAEncryption
07:ed:04:c1:04:78:53:72:84:48:23:38:97:04:13:fa:9e:d5:
de:70:88:db:82:39:8e:7c:39:50:66:90:95:fe:41:30:14:1d:
00:65:9f:5b:7c:a4:36:5c:8e:84:72:36:6d:63:79:39:58:18:
d4:e6:35:fe:e2:4b:c0:30:c8:db:db:c6:fb:da:62:89:cb:4e:
db:d8:5d:c8:af:33:6d:4f:0a:3b:42:db:9c:c2:ca:20:77:30:
87:b5:5e:c9:4e:c9:4c:22:02:df:0e:d0:ba:a8:ea:19:5c:53:
c1:32:15:96:c2:73:9b:76:c2:27:08:dc:92:66:74:d0:63:07:
5a:ec:34:fb:44:4c:41:b4:71:54:ec:c9:6d:7c:33:41:96:ec:
50:c6:fe:13:9d:b7:ba:a8:74:5f:1b:36:e3:87:9f:97:7a:af:
b6:d8:8b:83:f6:21:ec:9f:f4:4d:2b:63:d8:68:3f:1a:b7:56:
25:4c:65:f3:dd:29:c2:71:ff:13:02:aa:35:de:75:5a:54:3e:
e1:12:9f:9d:65:f7:8d:17:31:e4:92:1e:58:37:6d:82:dc:92:
41:e4:0f:79:c7:3d:b5:0d:ab:5c:e3:ba:ec:c5:dc:e2:04:1e:
ca:9c:02:0e:37:6b:a5:98:cc:32:d8:fc:8c:22:1e:94:f6:55:
70:b0:c3:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:44 2026 by rpki-client