Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/HCkTO8KxnQW5z_1GFAOAHjIGab8.roa
File: HCkTO8KxnQW5z_1GFAOAHjIGab8.roa (raw, json)
Hash identifier: XoAXikNwV8c/+4uyw3oTAAVmB0UR0KOtZ+V3aJEPK8c=
Subject key identifier: 1C:29:13:3B:C2:B1:9D:05:B9:CF:FD:46:14:03:80:1E:32:06:69:BF
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019ED1043D9248B32539006AE0DED038F166
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/HCkTO8KxnQW5z_1GFAOAHjIGab8.roa
Signing time: Tue 16 Jun 2026 15:19:36 +0000
ROA not before: Tue 16 Jun 2026 15:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29605
IP address blocks: 46.19.176.0/22 maxlen: 22
46.19.180.0/22 maxlen: 22
89.107.168.0/22 maxlen: 22
89.107.172.0/22 maxlen: 22
93.188.168.0/22 maxlen: 22
93.188.172.0/22 maxlen: 22
185.48.44.0/23 maxlen: 23
185.48.46.0/23 maxlen: 23
212.67.32.0/21 maxlen: 21
212.67.39.0/24 maxlen: 24
212.67.40.0/21 maxlen: 21
217.19.48.0/21 maxlen: 21
217.19.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:04:3d:92:48:b3:25:39:00:6a:e0:de:d0:38:f1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jun 16 15:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c29133bc2b19d05b9cffd461403801e320669bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:f5:0e:f1:81:58:4b:25:36:04:82:22:5a:
d8:b8:c3:a3:18:a8:a2:5b:bd:7f:af:48:df:b8:5d:
45:e1:7f:c4:54:1f:b9:26:b4:1c:7b:65:0b:53:10:
2a:a3:45:cc:55:39:98:03:08:2b:ba:cf:6e:f4:a9:
99:05:04:6f:3f:51:67:75:e7:8e:ae:c2:e8:fe:56:
b5:dc:51:eb:d6:b3:00:14:09:70:8c:1f:eb:f0:1f:
b6:ca:6e:52:14:97:3e:07:a5:75:87:29:d8:c3:f0:
8d:44:e6:96:8f:9b:97:48:a2:39:60:40:1b:b5:49:
45:0e:c0:13:c1:92:94:22:8c:1e:62:b8:4c:4f:de:
88:53:aa:e6:5b:85:80:99:eb:c0:b9:9d:83:58:de:
40:37:7d:75:da:b4:18:1b:1b:93:0f:63:06:f4:cb:
4b:aa:0d:6e:e6:eb:97:85:d2:7b:ec:42:d7:14:44:
b6:e1:57:2c:e2:a1:d2:ac:97:b7:86:88:62:44:a5:
4a:c0:79:23:88:e6:9c:49:5c:8e:fb:fc:7d:bb:2e:
77:2c:b8:99:9c:5e:d9:61:81:7d:10:e7:b4:1d:0d:
d1:28:a9:f5:82:cb:72:31:0e:98:31:51:d5:5e:b7:
57:f5:93:f5:a7:fa:14:5d:73:29:3e:00:a2:a7:c3:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:13:3B:C2:B1:9D:05:B9:CF:FD:46:14:03:80:1E:32:06:69:BF
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/HCkTO8KxnQW5z_1GFAOAHjIGab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.176.0/21
89.107.168.0/21
93.188.168.0/21
185.48.44.0/22
212.67.32.0/20
217.19.48.0/20
Signature Algorithm: sha256WithRSAEncryption
85:88:83:09:5b:20:2d:9a:8b:24:92:6c:4c:2d:e9:5c:5e:8f:
8c:e9:32:97:e7:5a:dc:6e:5d:c4:a2:58:72:32:18:b1:bf:82:
ff:36:db:93:a4:8b:52:43:f2:48:c5:43:3c:a6:dc:4c:9a:79:
aa:7c:a3:70:db:73:17:b9:bd:87:33:13:77:60:72:36:88:7a:
df:45:b1:78:12:91:e8:58:e5:eb:df:3f:2d:a0:ac:67:3c:7b:
7d:05:22:00:5d:99:82:ac:ac:33:ca:e7:01:b7:51:6a:ee:1b:
5b:b5:71:3b:e0:b6:92:32:b8:0b:0c:f1:e4:0d:9c:6c:6a:4b:
1a:ad:9b:a9:5f:9b:8d:98:8b:5b:61:ef:35:5a:5b:a2:e2:87:
f6:7f:85:8b:f9:5b:66:7c:58:9e:25:02:a6:ca:67:8a:9e:3a:
59:86:39:37:1a:67:14:6b:58:f2:17:f5:4a:33:c3:85:f3:ff:
9c:e2:74:e1:af:5c:fb:0f:2b:98:66:20:28:33:b5:fb:39:25:
a0:5b:40:10:00:8c:61:b1:45:f3:c1:57:0e:b8:38:d0:d4:fa:
a0:d9:8b:ea:88:58:ff:23:3a:05:86:99:4d:7a:66:9b:29:99:
fe:5b:80:07:fa:1f:4a:f5:37:03:5f:36:09:81:68:b7:5f:bc:
43:6b:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:37:11 2026 by rpki-client