Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HjvgJRPx6nFd-W8E5sifYjdKON8.roa
File: HjvgJRPx6nFd-W8E5sifYjdKON8.roa (raw, json)
Hash identifier: +M3XJuSMLQrQtbGAfzgIsTAV7QGRo7Q522xL8OK4Bzw=
Subject key identifier: 1E:3B:E0:25:13:F1:EA:71:5D:F9:6F:04:E6:C8:9F:62:37:4A:38:DF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019CB9C035774570F5F47EE4CB0AAD1B237F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HjvgJRPx6nFd-W8E5sifYjdKON8.roa
Signing time: Wed 04 Mar 2026 16:48:27 +0000
ROA not before: Wed 04 Mar 2026 16:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 91.208.61.0/24 maxlen: 24
212.192.16.0/23 maxlen: 23
212.192.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:c0:35:77:45:70:f5:f4:7e:e4:cb:0a:ad:1b:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 4 16:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e3be02513f1ea715df96f04e6c89f62374a38df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:b9:75:ff:ae:ca:28:5f:a8:08:78:75:ab:
83:d9:4a:d4:fc:05:48:07:e0:7d:5f:8d:d2:be:1e:
2f:ec:94:66:06:6f:95:a9:dc:c8:d8:87:57:b7:3d:
49:cb:b2:cf:5c:d8:2e:f2:30:eb:b8:2c:57:ff:e2:
8a:d0:39:c4:4f:16:07:91:6e:db:23:c3:3e:d0:0e:
49:cc:80:6f:18:48:5c:fe:a9:38:95:75:d9:61:6f:
4b:46:2b:e0:b7:10:70:d6:e7:2e:56:80:c1:e5:05:
e7:83:fa:ab:75:34:e1:1c:f1:06:57:48:33:80:a9:
62:c0:7c:97:69:e9:d7:bc:b0:18:c4:a5:06:9a:b3:
7c:ce:ff:67:5c:82:3b:71:94:6b:ff:f4:19:a3:83:
99:00:b7:52:91:88:ad:df:96:55:a1:d6:52:48:0a:
ad:32:05:db:44:9a:79:36:9e:f3:b5:2b:ca:ed:43:
00:2a:56:94:c6:90:8d:56:0e:9e:00:3f:a9:45:03:
cf:ce:44:a6:e6:c9:73:54:b8:35:d3:7e:07:ec:78:
9c:64:db:f1:97:c7:2f:e8:e9:cc:fd:84:c8:d7:ce:
c9:86:ab:e9:d0:86:33:91:5d:12:f9:42:3a:d4:32:
3a:51:66:ba:53:39:d7:77:bf:0c:fc:67:19:2e:02:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3B:E0:25:13:F1:EA:71:5D:F9:6F:04:E6:C8:9F:62:37:4A:38:DF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HjvgJRPx6nFd-W8E5sifYjdKON8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.61.0/24
212.192.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:3d:33:c9:e4:dc:74:65:4c:3f:9e:ac:3d:38:74:a9:4e:e2:
6c:b5:f0:7b:73:13:e3:b1:b5:df:ea:4c:38:3c:86:4a:4a:5f:
d9:4a:1e:1d:b0:0b:1b:e5:b6:1b:7f:60:32:24:9e:a3:81:9a:
62:e2:f2:4f:7f:46:27:e9:62:18:a1:cc:07:3d:5d:92:8d:9c:
1c:45:a9:62:f4:b8:0f:7e:ef:59:ad:aa:ef:14:10:fc:8a:44:
e2:5f:a5:14:82:a9:46:c1:1f:ea:d5:16:c7:5d:a1:7f:5f:93:
66:48:85:2f:d8:af:c8:a6:ac:51:0a:a5:a4:85:53:48:4d:5c:
f9:56:82:f9:f6:23:41:8d:6c:bb:72:9f:30:24:85:22:c7:20:
9e:6b:1d:0c:e1:26:ba:6e:5b:36:c5:f4:72:94:0b:fb:8f:a7:
fe:23:7b:a4:de:69:90:c0:cf:93:32:3b:a7:99:1a:4e:3e:d0:
89:57:ce:87:dc:b6:5b:d1:95:0e:e5:27:45:76:43:27:15:b3:
b4:65:80:8d:b1:65:8b:d0:96:5a:a4:cf:e5:11:72:e3:12:9e:
da:cc:64:4b:ba:20:85:ee:dc:2e:a6:47:c9:28:b9:03:6a:6b:
0c:e6:a3:a2:8c:4b:3b:37:76:be:3a:cf:c4:8f:01:dc:3e:af:
79:e4:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:23 2026 by rpki-client