Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/HiZTjeXxPL5UIfjY96XqMWqTBQQ.roa
File: HiZTjeXxPL5UIfjY96XqMWqTBQQ.roa (raw, json)
Hash identifier: p6Iat8BE8A2SkYe418gBt7rVZPajqInsyq2ODAIMOIM=
Subject key identifier: 1E:26:53:8D:E5:F1:3C:BE:54:21:F8:D8:F7:A5:EA:31:6A:93:05:04
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 019DC9E33FFB94E9E143EA8833BC03F63950
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/HiZTjeXxPL5UIfjY96XqMWqTBQQ.roa
Signing time: Sun 26 Apr 2026 13:03:26 +0000
ROA not before: Sun 26 Apr 2026 13:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64458
IP address blocks: 45.90.72.0/24 maxlen: 24
45.90.73.0/24 maxlen: 24
45.90.74.0/24 maxlen: 24
45.90.75.0/24 maxlen: 24
185.81.97.0/24 maxlen: 24
185.81.98.0/24 maxlen: 24
194.59.170.0/24 maxlen: 24
2a05:8640::/29 maxlen: 48
2a05:8641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c9:e3:3f:fb:94:e9:e1:43:ea:88:33:bc:03:f6:39:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Apr 26 13:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e26538de5f13cbe5421f8d8f7a5ea316a930504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:bb:5d:b4:7a:bb:98:a4:ad:d2:cf:b6:b1:
51:b5:b8:94:e5:c1:2a:2f:bd:1d:e6:fd:ed:fe:d1:
ae:2d:0f:d1:73:7f:c6:e2:e0:be:e7:55:b2:f8:00:
79:de:ff:b6:d2:9e:18:50:43:5e:6e:ca:4a:fa:9a:
6e:e5:e8:07:94:eb:6e:62:fb:aa:f6:7f:a8:a6:fe:
3e:f8:1b:1c:1b:22:65:57:74:14:b2:fa:37:99:7f:
2b:07:2f:d7:3e:e3:24:b2:71:0e:b6:cc:9d:f1:1c:
97:63:14:10:ca:56:a5:09:33:75:97:86:8b:fd:c2:
f3:a2:aa:49:9c:c2:da:66:8e:47:46:55:06:f1:a8:
45:d9:aa:a6:40:4b:b3:04:9a:a9:be:a5:bb:67:ab:
8e:6e:a0:a3:ee:bc:e9:73:2c:9b:e6:6b:3d:48:64:
75:85:c1:4b:9d:7a:15:ed:54:2f:74:74:a2:74:76:
05:21:81:8e:3e:d0:65:61:fd:a5:16:3a:a6:b7:34:
1d:7c:74:56:c1:ec:01:ad:02:92:dc:50:1d:91:42:
dc:01:00:7e:cc:85:7e:08:cc:d7:62:02:9b:fe:8c:
4e:4b:45:5e:38:c9:b0:1d:41:54:b6:a3:40:64:a5:
af:3f:f5:fd:6c:94:22:24:5a:91:d0:ce:08:77:ec:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:26:53:8D:E5:F1:3C:BE:54:21:F8:D8:F7:A5:EA:31:6A:93:05:04
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/HiZTjeXxPL5UIfjY96XqMWqTBQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.72.0/22
185.81.97.0-185.81.98.255
194.59.170.0/24
IPv6:
2a05:8640::/29
Signature Algorithm: sha256WithRSAEncryption
14:77:82:d4:77:8d:48:16:6b:01:53:6f:ed:6d:09:98:83:01:
6b:77:41:83:f6:23:4d:60:ec:3b:bf:39:e9:cf:99:bf:43:c7:
af:37:e3:bc:12:21:99:08:12:88:7b:39:22:11:22:b2:09:3a:
38:e5:33:b2:8c:dc:d2:bb:10:a8:db:4a:4b:9c:e4:a3:00:36:
62:8c:66:b9:fd:0b:ef:4e:cd:5b:92:fd:a2:5d:94:2c:12:9d:
9d:f6:a2:0e:14:ac:f0:4b:37:a3:c0:bc:d8:0e:db:fc:c6:90:
3d:5b:41:74:6b:59:eb:36:62:6f:c8:6b:59:2b:ca:7a:3d:ec:
cf:af:47:d4:96:42:e6:02:a2:ea:da:a3:6c:85:48:b0:26:c2:
1c:72:05:63:8b:61:e0:13:85:b8:08:8d:c8:db:5e:23:ec:b6:
2c:20:dc:34:a1:3f:66:27:95:5d:28:29:ab:34:26:ba:e7:04:
60:d5:23:7a:fa:3f:55:6e:d1:42:ba:66:4f:96:3c:e4:36:12:
f0:2d:53:a2:24:95:8d:a6:63:7d:67:49:57:4a:59:5f:6f:42:
f3:f2:26:d6:6b:1b:bd:2a:1a:04:39:12:55:d4:34:40:b8:43:
0d:df:92:98:8b:9f:d2:2b:5e:d7:2b:cb:1a:0c:ec:5a:1c:ed:
a7:9d:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:48:30 2026 by rpki-client