Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/MHoiiXnuGIuqxA752FuN8R9jVPM.roa
File: MHoiiXnuGIuqxA752FuN8R9jVPM.roa (raw, json)
Hash identifier: SzNrSEjkkP0W8NbngEMXpCh2YtsU8XXfcwLlB39QSQw=
Subject key identifier: 30:7A:22:89:79:EE:18:8B:AA:C4:0E:F9:D8:5B:8D:F1:1F:63:54:F3
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 01A0122FF3EA8321AE3D2356D8C1465311F3
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/MHoiiXnuGIuqxA752FuN8R9jVPM.roa
Signing time: Tue 18 Aug 2026 00:05:27 +0000
ROA not before: Tue 18 Aug 2026 00:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 199.204.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:12:2f:f3:ea:83:21:ae:3d:23:56:d8:c1:46:53:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Aug 18 00:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=307a228979ee188baac40ef9d85b8df11f6354f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:3f:d3:13:b3:54:00:db:dc:ce:d3:65:24:
43:b0:2a:2b:aa:5c:ed:78:5a:82:78:33:c4:72:75:
75:61:7b:f5:e8:70:d2:87:25:76:d6:fc:90:72:06:
32:63:64:15:03:8a:d3:a6:4c:04:53:0b:61:60:85:
ea:66:02:2d:75:9d:64:f6:af:2f:05:95:80:c5:8c:
8a:29:34:8f:2b:d8:57:0d:14:fd:12:be:ba:b6:9d:
ef:95:88:f4:bf:9f:59:2a:75:fb:06:25:ea:54:7c:
9c:98:4e:90:82:8d:f5:c2:22:c2:c5:66:19:b9:ac:
6c:96:f6:cd:13:34:68:a0:a5:aa:09:17:a1:c7:55:
ef:e8:d0:2c:f3:f1:92:62:89:1f:f0:8d:f9:33:29:
0a:1a:b9:1f:a0:39:34:42:d4:c9:23:26:5b:95:fb:
9c:87:a8:3b:60:84:7e:09:cf:03:a1:b5:7c:c7:0c:
82:b4:4c:95:a4:98:12:c5:0e:78:2a:48:2a:84:f9:
59:44:8b:5e:db:93:b7:78:c1:1d:f6:28:6e:94:a6:
96:8b:a0:7e:f0:f8:00:40:40:4b:d6:86:a5:7d:8b:
a9:6d:03:34:b4:b3:66:cf:63:b9:40:31:cf:37:19:
0b:17:f9:f7:03:d9:2c:ff:e1:06:1a:b3:4b:6b:7b:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:22:89:79:EE:18:8B:AA:C4:0E:F9:D8:5B:8D:F1:1F:63:54:F3
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/MHoiiXnuGIuqxA752FuN8R9jVPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.204.24.0/24
Signature Algorithm: sha256WithRSAEncryption
46:87:cc:e9:65:8b:7b:5f:34:d4:8b:62:73:c7:90:97:64:68:
13:71:94:c6:77:3c:77:f5:ea:99:84:ec:2c:d7:92:f9:c6:2c:
df:6b:ec:69:24:cf:f3:75:79:4e:21:37:d9:47:fc:ae:05:f7:
71:8a:8c:ea:b4:3d:43:21:dd:94:ff:cc:bd:3e:9b:ec:7a:72:
a1:42:16:03:d6:56:1a:69:2a:3a:22:7d:81:87:9c:7c:fa:5b:
24:62:be:69:fe:66:cf:e2:00:54:e3:70:5a:b7:a9:b9:ae:51:
f5:c4:e4:a1:be:fa:6b:ba:9e:a7:27:6d:5b:3e:f5:90:aa:53:
47:5c:d1:08:b7:7b:ff:02:d0:f7:f1:0a:e9:d3:19:06:04:b0:
28:08:4b:bb:b3:51:e5:ee:12:17:86:9d:ca:ec:58:ca:82:24:
d2:29:7b:b6:3a:21:f5:7b:db:9b:61:57:ec:0b:71:e3:09:14:
14:62:23:f1:73:d2:c0:6c:40:bf:2b:d8:25:2b:8b:03:c2:9f:
cb:e4:c1:1e:0b:f3:8a:45:04:cc:a0:24:cd:ab:99:73:07:26:
80:09:d2:28:29:dc:45:ec:37:5d:3e:78:75:99:0b:ee:0e:7a:
9f:90:9e:b0:62:72:ca:fb:12:98:49:ca:96:bd:fe:45:eb:69:
84:be:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:29:58 2026 by rpki-client