Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HzWCiN5xlSAAG-LkXAXAKTKh_i0.roa
File: HzWCiN5xlSAAG-LkXAXAKTKh_i0.roa (raw, json)
Hash identifier: XpXt06+bCAFuYWDJMTUzptDCZG3KonqcsPdoW5tBgT0=
Subject key identifier: 1F:35:82:88:DE:71:95:20:00:1B:E2:E4:5C:05:C0:29:32:A1:FE:2D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E93EA0EC204EDC6E8C4D4C8EC613DAF27
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HzWCiN5xlSAAG-LkXAXAKTKh_i0.roa
Signing time: Thu 04 Jun 2026 18:34:10 +0000
ROA not before: Thu 04 Jun 2026 18:34:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 147.90.19.0/24 maxlen: 24
158.173.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:ea:0e:c2:04:ed:c6:e8:c4:d4:c8:ec:61:3d:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 4 18:34:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f358288de719520001be2e45c05c02932a1fe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:2f:e0:2d:b8:d2:8b:d7:f6:a7:2d:f6:33:
eb:cd:fb:d9:6e:25:ef:70:7f:9e:1b:66:bb:c5:c1:
93:e7:91:74:1c:ff:ea:4d:9e:81:8b:ba:e6:16:b7:
ca:31:6f:8a:1e:d3:49:71:13:48:80:30:bb:21:2c:
3f:b2:2d:56:ff:70:1f:c1:d3:8f:bf:6f:31:c7:7e:
31:78:1b:2f:7c:01:7e:8f:50:dd:fd:40:5e:84:cd:
6c:13:cf:04:88:1e:e7:0a:8f:52:f0:78:78:56:5f:
c7:61:7e:d0:23:a9:26:c1:40:9c:85:50:47:a8:ea:
f2:4a:8e:e1:dd:14:3a:e6:34:75:42:93:2b:fd:61:
af:4c:ba:fe:b8:94:2c:e5:7b:33:34:35:d8:e1:d3:
86:07:3b:d8:f5:2e:31:a5:40:1b:d0:51:02:3e:51:
99:24:a6:a4:9b:98:7d:70:50:f7:f3:89:d7:c2:7b:
2f:25:97:5b:5c:fb:d2:63:bc:3c:4b:45:e3:5b:20:
68:84:df:c2:61:67:3a:6a:e0:b6:20:26:43:bc:ad:
44:a4:d1:81:0a:af:cd:31:db:57:2f:f7:a8:5f:b5:
7c:17:48:e2:46:4b:1c:af:52:9e:66:c6:6b:2b:51:
68:bd:06:24:28:47:b3:21:1f:43:ff:58:ac:aa:5a:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:82:88:DE:71:95:20:00:1B:E2:E4:5C:05:C0:29:32:A1:FE:2D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/HzWCiN5xlSAAG-LkXAXAKTKh_i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.19.0/24
158.173.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7a:8e:53:f5:cf:c5:ff:de:6d:40:a0:1c:16:79:e0:91:f7:
5c:18:eb:39:a7:56:8a:f2:f6:cb:3c:7c:8e:6c:e3:b7:b0:d5:
89:9c:30:8e:ed:dc:db:7c:5c:5d:8a:7f:6d:61:b2:8c:a3:01:
da:b3:6d:e9:c4:a8:ad:2b:d8:18:b5:34:2c:b1:cc:f0:67:1d:
2d:db:93:0b:4e:01:ef:63:8b:9a:67:ca:70:c2:48:36:77:8e:
bf:d1:d3:37:07:2e:26:39:61:ad:c5:b5:d0:d7:6b:5b:23:b0:
f7:6f:21:a4:d4:8b:a3:c7:07:67:db:45:4b:8d:fa:f1:f3:84:
55:44:80:57:f9:1f:3f:e6:e4:c8:64:72:b4:88:2f:82:80:8c:
db:1b:f9:9e:a6:1e:bc:c8:47:34:65:66:4e:c6:f2:52:00:f1:
7c:d7:81:26:cd:e2:86:83:c7:6e:6c:d2:2c:b2:32:7f:76:a3:
2e:be:2d:f1:f7:c1:19:a7:69:f8:34:af:7d:60:b1:29:28:57:
37:91:d2:ac:8a:d1:bb:05:fa:37:dc:5a:6f:26:12:85:06:ce:
2c:25:59:1b:82:37:db:7c:1a:8c:43:75:d2:f0:c0:56:3d:ec:
78:b2:67:24:69:22:ff:6c:65:5b:9b:7e:72:25:36:ad:51:e1:
7b:f4:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:04 2026 by rpki-client