Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HgmGhHhflSc83-12eOaUVFkQZ7A.roa
File: HgmGhHhflSc83-12eOaUVFkQZ7A.roa (raw, json)
Hash identifier: TVfWDXrhIGbWC7iEdqwCMqeSIvitThoDMENS1YOjOUg=
Subject key identifier: 1E:09:86:84:78:5F:95:27:3C:DF:ED:76:78:E6:94:54:59:10:67:B0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019EDABD3293E1E0FEC0E5C6C64C9AA75D45
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HgmGhHhflSc83-12eOaUVFkQZ7A.roa
Signing time: Thu 18 Jun 2026 12:38:12 +0000
ROA not before: Thu 18 Jun 2026 12:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 195.178.128.0/24 maxlen: 24
195.178.131.0/24 maxlen: 24
195.178.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:bd:32:93:e1:e0:fe:c0:e5:c6:c6:4c:9a:a7:5d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 18 12:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e098684785f95273cdfed7678e69454591067b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fc:b7:19:8a:56:a9:4f:d6:cf:6a:e8:ea:18:
e8:b7:c1:68:62:77:9b:54:85:34:07:49:cf:4a:fa:
71:41:66:09:6e:24:ed:53:fb:f0:d2:63:7f:18:0d:
d1:19:69:98:d5:ea:18:f7:c1:cd:40:4b:3a:ab:17:
5d:30:d4:2f:1b:e0:64:75:2e:38:67:87:7c:f5:39:
df:ec:bf:c7:2a:b5:ff:b0:33:b6:0d:b0:67:90:b4:
a8:72:73:29:d2:f4:e8:76:0b:a9:83:bc:ce:e9:b4:
2b:41:d8:3a:c8:38:c2:15:3b:a6:a3:2d:42:a4:01:
52:99:91:ce:5d:29:f8:e5:4b:1f:65:32:18:4a:46:
a3:fe:f1:1c:33:70:69:94:7e:03:79:5a:08:92:a8:
75:10:99:fc:fe:ba:38:4a:cc:4f:c7:47:99:7a:7b:
90:9c:81:1b:d0:b4:d3:b0:fb:3b:5c:75:99:8b:aa:
fe:7d:d9:d9:b6:94:cd:fa:29:34:a1:a9:ed:2c:09:
35:55:ca:c6:3a:ef:ef:bb:d3:8d:7f:fb:f1:db:da:
dc:09:34:7b:59:f6:7e:0b:30:0b:9c:75:15:2d:7a:
26:79:7a:96:69:4e:2e:4f:b9:54:6f:cf:4d:33:16:
1c:69:2b:ce:f7:dd:1b:a4:b3:84:f0:67:7f:de:47:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:09:86:84:78:5F:95:27:3C:DF:ED:76:78:E6:94:54:59:10:67:B0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HgmGhHhflSc83-12eOaUVFkQZ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.128.0/24
195.178.131.0/24
195.178.159.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6e:73:b4:a9:05:2b:d8:84:17:d3:4d:e8:e8:6b:95:83:4d:
76:1b:5e:95:b4:97:2b:fb:23:85:d5:bf:11:3a:e4:5c:9c:15:
ac:33:fa:81:76:7e:aa:8f:93:5e:44:36:23:8f:a9:f5:29:85:
90:c7:9f:0c:79:0b:5a:f6:32:5c:44:ca:55:54:3d:f4:ea:53:
36:f6:1e:66:ae:f3:39:58:54:c6:79:14:c7:54:a9:f2:d2:e7:
ef:9a:f4:fb:22:5d:1f:0d:34:5b:5b:23:cc:4d:45:9f:e1:2b:
2e:0a:d3:71:c6:9a:25:1d:19:a4:cd:28:f4:13:cb:4d:a0:a4:
c7:15:62:99:b2:ff:e9:79:8c:d7:c5:8b:f8:01:2a:1c:36:ee:
00:99:ef:c7:19:ab:90:ae:6b:e9:3c:4c:65:fb:1a:53:dd:53:
72:c5:71:66:f8:b7:16:0e:1a:86:27:52:a8:eb:66:24:d0:5b:
bd:36:a0:1e:50:70:88:de:72:2c:a7:26:4a:eb:ca:8d:4b:69:
cd:0d:95:2a:1d:e6:9d:7d:b5:70:f6:9b:98:0c:7b:7b:21:43:
d1:8d:45:2b:89:1d:44:31:12:a1:9f:4c:c5:eb:76:5a:92:8d:
48:04:4e:75:e6:d5:ef:ac:08:2d:80:88:2a:5d:00:cf:f7:65:
7d:88:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:37:21 2026 by rpki-client