Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/KHGfuqBuKcECvDzePm6wGEq5_lQ.roa
File: KHGfuqBuKcECvDzePm6wGEq5_lQ.roa (raw, json)
Hash identifier: AUNt+MM0/f79M6CU5QImL6LhPWeLCLQniQuRrTK91KY=
Subject key identifier: 28:71:9F:BA:A0:6E:29:C1:02:BC:3C:DE:3E:6E:B0:18:4A:B9:FE:54
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01A0DEDFA7631ED94BE70A26E2B39424CA0F
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/KHGfuqBuKcECvDzePm6wGEq5_lQ.roa
Signing time: Sat 26 Sep 2026 17:59:54 +0000
ROA not before: Sat 26 Sep 2026 17:59:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 45.80.228.0/22 maxlen: 24
185.221.196.0/24 maxlen: 24
185.221.199.0/24 maxlen: 24
185.246.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:df:a7:63:1e:d9:4b:e7:0a:26:e2:b3:94:24:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Sep 26 17:59:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28719fbaa06e29c102bc3cde3e6eb0184ab9fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:52:48:c3:c0:bb:ab:29:ce:4c:ff:f9:18:
e5:7b:18:3e:f1:d6:e8:5b:03:92:cc:ab:ed:ba:37:
6a:b9:28:07:d1:5e:92:dc:a1:64:cc:cc:60:a6:91:
0c:9f:c8:c8:ba:93:30:14:33:a2:82:82:42:0b:16:
f6:ec:f2:13:a9:07:91:c9:03:ef:88:49:fc:db:b1:
81:17:30:98:aa:74:e0:ca:7e:d1:d6:9f:bb:e5:e6:
03:24:a9:2e:3f:8d:8a:e5:b8:24:7c:87:64:a7:92:
1e:e3:8b:e0:a6:2d:67:bd:6d:83:b3:58:89:c5:cf:
35:ad:c6:a2:94:c3:1d:37:ae:74:70:5f:b0:5e:06:
32:42:39:e0:85:a7:0e:97:ad:1c:1d:61:7c:51:0f:
f5:d9:87:4f:8a:6f:b1:e2:f4:cd:23:21:10:a3:de:
e8:f1:14:69:9a:6f:8b:43:47:d1:4d:3e:bc:79:be:
9f:90:2a:81:ee:8b:9b:49:97:73:31:82:40:80:d2:
13:f7:9c:c8:12:9e:9f:4d:4a:92:52:3a:28:76:fd:
bd:ae:00:18:27:9b:b1:eb:98:6b:c7:43:33:4a:7a:
cf:f5:d3:bd:5f:b5:b7:b2:38:05:53:18:36:3b:e9:
0e:b0:a7:a1:6a:f2:99:32:73:0a:34:ac:59:f9:1d:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:9F:BA:A0:6E:29:C1:02:BC:3C:DE:3E:6E:B0:18:4A:B9:FE:54
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/KHGfuqBuKcECvDzePm6wGEq5_lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
185.221.196.0/24
185.221.199.0/24
185.246.217.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b5:99:01:b0:4c:d0:52:91:78:5b:0b:ff:49:55:f2:f9:49:
27:62:5c:99:e9:25:90:8e:4f:4d:c2:8c:93:f4:c9:53:43:b4:
f5:3e:88:c6:7d:de:e4:38:0f:ea:d7:54:c9:c6:dc:49:61:78:
e9:16:16:98:ee:fe:13:ba:be:27:00:d9:ce:b2:b8:a3:d6:73:
b3:66:e1:b6:51:d0:04:e9:98:94:0e:a8:1b:f7:e2:e9:01:75:
91:ae:5f:0a:37:8e:65:7d:4e:88:aa:ba:57:98:34:1d:dd:dc:
bc:17:46:f4:75:8a:5d:39:ab:71:a0:f8:e9:a4:90:80:5a:9d:
1f:74:40:9e:e4:1d:f9:45:c8:3e:b0:93:9c:09:49:9b:19:50:
c1:45:ff:6c:96:85:ee:ce:26:62:5e:90:3c:2a:2d:2e:da:1c:
c4:f2:ac:0a:17:11:cc:33:3c:36:9a:63:48:4b:c5:8e:0f:a8:
f5:e1:00:e9:a0:9c:bb:e4:5a:8f:77:e6:c0:cb:87:8a:3f:29:
a3:8d:b2:1d:27:2a:44:92:02:de:d1:95:c3:71:d5:c8:2f:e8:
49:24:34:5b:a7:1b:39:23:b2:36:a6:96:42:65:24:b5:25:bb:
3d:2b:ef:78:ba:a5:77:1e:26:13:d9:03:2a:3c:23:c7:d7:a7:
29:b8:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:18 2026 by rpki-client