Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa
File: Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa (raw, json)
Hash identifier: 7Unt41gac4VJPO6WgXz6nTsMAqDIpRKki/h8i6n5VGc=
Subject key identifier: 1E:4A:AD:E4:87:FF:D2:53:CF:2E:04:0B:28:67:DD:AA:B3:8E:80:FC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019E610940B645336DEDD631E5DB82B8F779
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa
Signing time: Mon 25 May 2026 21:27:36 +0000
ROA not before: Mon 25 May 2026 21:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216332
IP address blocks: 85.137.160.0/24 maxlen: 24
85.137.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:61:09:40:b6:45:33:6d:ed:d6:31:e5:db:82:b8:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: May 25 21:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e4aade487ffd253cf2e040b2867ddaab38e80fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:d4:80:12:53:2d:48:e7:cd:83:d9:4f:90:
a7:1d:bd:0b:b3:d2:b6:db:6c:75:74:ff:20:05:9f:
9f:71:12:05:28:09:c1:62:61:67:ea:a9:60:8b:ec:
b1:e2:c3:4e:ab:dc:4b:fd:08:4c:1e:90:36:76:27:
b6:80:cb:e4:6d:28:b5:f3:68:3c:ae:a6:a2:57:4f:
b3:fe:1e:9c:f6:58:ba:dd:6b:f7:31:fd:86:bb:8a:
72:4c:b2:be:7c:c3:de:fc:68:4c:d4:ff:4c:9d:b5:
d6:cf:4d:50:a2:49:4d:50:50:6a:dd:5d:c2:80:e6:
d2:c1:36:46:be:f3:ce:3f:09:51:6d:24:ac:ab:71:
71:e4:73:6a:78:cb:5a:99:d7:03:d4:a5:9c:c5:10:
58:bd:3e:c6:af:62:d1:0e:0e:09:5a:95:83:39:c3:
6b:34:55:81:6e:85:ea:76:83:98:f4:1d:2f:c7:ec:
68:44:8a:10:1b:c0:e9:80:9d:d0:19:06:f1:3f:df:
1e:b5:23:98:ec:1c:97:dd:ce:a0:1e:6b:3a:1a:b3:
a8:7a:de:c2:59:1b:1e:6e:eb:65:71:68:ad:a7:d6:
a4:cd:46:e1:5d:f4:e6:42:d5:e8:79:43:0f:0a:d0:
98:cc:1d:4d:7e:c2:4d:bc:e3:c3:14:9e:a6:cc:cf:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:AD:E4:87:FF:D2:53:CF:2E:04:0B:28:67:DD:AA:B3:8E:80:FC
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Hkqt5If_0lPPLgQLKGfdqrOOgPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.160.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:47:a4:f9:f4:07:8b:a0:8f:7f:db:45:95:18:63:46:c1:18:
f6:27:43:9d:dc:a5:53:e8:e5:08:12:af:1f:91:17:dd:2c:e7:
74:19:88:f4:9c:d3:a2:41:51:28:75:50:87:56:99:9f:c1:82:
3d:5e:75:84:1f:f0:f4:d0:fe:30:0f:9d:47:5c:d7:7c:41:cb:
33:6e:fd:20:b5:69:ca:e7:0b:3f:01:2e:4e:95:58:15:92:61:
e1:e6:61:89:3e:82:21:0e:d7:eb:86:2b:a3:40:7c:d4:4c:34:
d0:1f:49:70:1c:3e:2d:83:30:50:22:b8:ff:76:c2:e0:01:5a:
6f:0f:b8:af:09:08:6a:5d:d4:f4:24:16:14:a6:90:61:19:12:
78:9f:43:f6:1e:69:1d:fc:f4:80:05:7b:a7:2a:bd:8a:d0:24:
93:a2:67:45:b9:db:ef:7b:18:53:d0:53:a3:c8:51:51:8e:d8:
ee:c3:77:60:bf:21:11:8e:26:24:d9:28:13:81:cb:3f:10:e4:
0e:21:d0:49:b6:22:15:fe:28:de:fa:3f:90:d9:9d:3d:bd:91:
cb:16:d9:fe:cf:4c:d7:56:dc:c1:d2:bd:b5:ab:09:4a:78:ff:
91:2f:f8:a3:1b:0b:28:9a:f0:67:de:92:3d:b5:50:24:ec:18:
92:97:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:39:17 2026 by rpki-client