Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/hx4DNHJJVHTB5kYsT1IhVCOWqBs.roa
File: hx4DNHJJVHTB5kYsT1IhVCOWqBs.roa (raw, json)
Hash identifier: OCAW6qBGPGa2hnxrZkd8qtRZEM1+Yk2/cKQFS7dtqvE=
Subject key identifier: 87:1E:03:34:72:49:54:74:C1:E6:46:2C:4F:52:21:54:23:96:A8:1B
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A081F2608B815541429B6939F308132B8D
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/hx4DNHJJVHTB5kYsT1IhVCOWqBs.roa
Signing time: Tue 08 Sep 2026 16:55:40 +0000
ROA not before: Tue 08 Sep 2026 16:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 93.95.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:f2:60:8b:81:55:41:42:9b:69:39:f3:08:13:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 8 16:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=871e033472495474c1e6462c4f5221542396a81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:b1:8b:30:31:ac:71:e4:88:48:db:9e:48:
8f:57:a3:80:23:41:d5:85:30:88:24:c4:84:3b:77:
90:a4:01:48:ac:19:9e:2e:59:21:a9:ff:c0:60:14:
7a:6a:5d:f4:fe:1b:e1:42:52:f3:bb:aa:c4:34:67:
01:69:5a:8b:d2:42:6a:cc:05:56:d5:b6:2c:9c:76:
3a:6c:dc:8f:de:7c:86:ae:41:43:38:7c:ad:a0:1c:
93:0c:a4:7e:b6:fe:3a:2a:03:ec:e6:2d:3b:c2:67:
e6:72:6a:f9:35:51:60:14:70:f2:34:73:2b:f6:1d:
91:b9:36:be:e5:c6:0d:7e:8a:60:76:88:c4:f0:96:
e8:55:68:d8:97:66:f5:d7:b2:d6:9f:02:5c:3f:ad:
39:c1:c8:74:c2:7d:57:06:e5:bc:c4:39:4b:c8:61:
ac:a8:c2:a8:27:12:8b:44:88:13:0b:fd:0a:0b:be:
98:4b:2b:5b:31:5e:16:e8:2d:a7:ad:8b:c8:21:22:
23:05:85:db:a7:bd:1e:7b:35:9e:b6:de:ff:c0:3f:
5d:2f:51:ac:45:06:69:0a:98:58:8c:01:ef:2a:41:
c3:ae:dd:92:7f:16:42:b6:4f:bb:f3:94:e9:dd:d5:
46:56:a6:1e:20:ac:40:27:83:ec:d3:e6:81:63:04:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:03:34:72:49:54:74:C1:E6:46:2C:4F:52:21:54:23:96:A8:1B
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/hx4DNHJJVHTB5kYsT1IhVCOWqBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.19.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a4:82:9d:9f:02:34:ff:ca:3d:37:d1:f7:44:a5:db:d1:5d:
e4:4f:8b:c8:b7:f0:11:3b:b6:19:ff:9d:f2:a9:4e:28:5d:55:
85:22:dd:03:23:36:96:cb:3f:f4:6c:b9:f1:55:07:89:69:8d:
6d:a4:a5:58:61:7a:44:3e:54:84:e7:0a:cb:c9:87:84:ef:2e:
fd:2c:f0:f5:84:19:85:8d:ee:2b:80:4c:70:f3:c5:6c:a2:71:
96:d1:25:38:cf:2d:1d:2a:fa:5b:08:64:24:93:16:43:fd:5c:
9c:6c:a9:8e:5d:ff:7c:ca:5b:a6:93:b0:49:5c:1d:4d:c0:f0:
9b:0a:86:3b:5f:f0:22:26:91:1a:33:b5:56:62:55:2e:1e:e6:
f6:b4:8c:47:de:bb:94:99:1d:7e:81:48:03:4e:b3:14:7b:97:
4d:89:c1:4f:a8:87:1e:10:95:10:a8:19:cf:7c:a4:35:92:65:
89:39:37:0d:9f:1a:d6:85:a7:6c:0d:99:8e:87:02:20:2f:ab:
20:77:b8:4d:b0:45:fd:0f:70:9b:d9:1d:88:54:a3:24:fb:a5:
19:3d:36:b3:3c:19:97:5d:62:5a:51:ef:be:c5:f0:6a:cd:88:
b0:5d:41:f0:fc:f0:25:d4:69:a4:b8:69:e4:bf:65:16:40:c6:
47:44:b4:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCB8mCLgVVBQptpOfMIEyuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwOTA4MTY1NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzFlMDMzNDcyNDk1NDc0YzFlNjQ2MmM0ZjUyMjE1NDIzOTZhODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9exizAxrHHkiEjbnkiPV6OAI0HV
hTCIJMSEO3eQpAFIrBmeLlkhqf/AYBR6al30/hvhQlLzu6rENGcBaVqL0kJqzAVW
1bYsnHY6bNyP3nyGrkFDOHytoByTDKR+tv46KgPs5i07wmfmcmr5NVFgFHDyNHMr
9h2RuTa+5cYNfopgdojE8JboVWjYl2b117LWnwJcP605wch0wn1XBuW8xDlLyGGs
qMKoJxKLRIgTC/0KC76YSytbMV4W6C2nrYvIISIjBYXbp70eezWett7/wD9dL1Gs
RQZpCphYjAHvKkHDrt2SfxZCtk+785Tp3dVGVqYeIKxAJ4Ps0+aBYwTTRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIceAzRySVR0weZGLE9SIVQjlqgbMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvaHg0RE5ISkpWSFRCNWtZc1QxSWhWQ09XcUJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV8TMA0G
CSqGSIb3DQEBCwUAA4IBAQAppIKdnwI0/8o9N9H3RKXb0V3kT4vIt/ARO7YZ/53y
qU4oXVWFIt0DIzaWyz/0bLnxVQeJaY1tpKVYYXpEPlSE5wrLyYeE7y79LPD1hBmF
je4rgExw88VsonGW0SU4zy0dKvpbCGQkkxZD/VycbKmOXf98ylumk7BJXB1NwPCb
CoY7X/AiJpEaM7VWYlUuHub2tIxH3ruUmR1+gUgDTrMUe5dNicFPqIceEJUQqBnP
fKQ1kmWJOTcNnxrWhadsDZmOhwIgL6sgd7hNsEX9D3Cb2R2IVKMk+6UZPTazPBmX
XWJaUe++xfBqzYiwXUHw/PAl1GmkuGnkv2UWQMZHRLSf
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:00 2026 by rpki-client