Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/HbrZxv3rFmYvOI7Eop0nkYECxd8.roa
File: HbrZxv3rFmYvOI7Eop0nkYECxd8.roa (raw, json)
Hash identifier: OXGy2BQiH96x2J046pj+6huPSG1SPtHGW1r2zU30Q0g=
Subject key identifier: 1D:BA:D9:C6:FD:EB:16:66:2F:38:8E:C4:A2:9D:27:91:81:02:C5:DF
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F3905EED720F4AAFDA6B923A0011A73C5
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/HbrZxv3rFmYvOI7Eop0nkYECxd8.roa
Signing time: Mon 06 Jul 2026 20:01:57 +0000
ROA not before: Mon 06 Jul 2026 20:01:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.27.0/24 maxlen: 24
89.187.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:05:ee:d7:20:f4:aa:fd:a6:b9:23:a0:01:1a:73:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 6 20:01:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dbad9c6fdeb16662f388ec4a29d27918102c5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:90:32:ed:5d:8d:91:a2:5d:c2:a8:3a:63:
38:be:9a:57:2b:b4:0d:f4:86:59:54:93:7f:7b:a4:
1a:77:5f:cc:3b:24:60:b4:65:03:fb:ee:69:b3:58:
fa:94:fb:e4:07:1c:17:d5:e5:3c:bc:f7:04:12:fb:
79:6c:f1:e1:1b:4c:b4:27:0f:d1:10:af:49:57:38:
48:3e:5e:bc:75:4e:35:ac:0b:68:77:17:cd:09:3d:
ff:8f:6b:df:ef:ad:9d:9a:7a:eb:b8:5b:32:74:d4:
c1:f2:f2:be:5c:39:1b:c7:28:a6:14:14:0f:d8:fc:
86:16:b8:7f:21:9c:70:0d:7d:d0:66:b1:59:d8:bc:
e6:c5:4e:b2:39:0d:a3:92:cd:a3:af:78:8b:b3:30:
2d:d3:15:77:e9:b7:ee:48:26:f6:c3:76:db:53:b4:
4b:7c:82:40:a3:ea:45:f2:59:3e:8d:4e:2b:ab:72:
e9:50:f2:92:ed:56:87:cd:db:bd:dd:2b:08:d4:ec:
2c:d3:1b:98:5b:7f:35:16:78:2f:61:cc:ac:77:d3:
b8:47:9b:59:bc:5c:36:28:ed:4c:59:e1:2f:87:1c:
29:da:a9:1f:aa:30:6e:13:f6:54:4f:a9:74:92:0c:
8f:00:4b:ba:af:9b:e1:de:71:69:f7:d4:58:c7:3a:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:D9:C6:FD:EB:16:66:2F:38:8E:C4:A2:9D:27:91:81:02:C5:DF
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/HbrZxv3rFmYvOI7Eop0nkYECxd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.9.0/24
89.187.27.0/24
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:72:9e:d6:60:59:f5:17:55:f6:f2:20:45:26:14:b2:de:0c:
b4:0a:22:b8:a3:ab:c7:75:cf:d5:17:59:45:0e:99:b6:d8:36:
8d:08:e0:6b:85:1c:18:1a:60:a9:0c:13:b4:9b:55:f9:4b:54:
8c:c3:10:e6:63:3e:b7:e7:6e:3b:28:bf:71:37:4b:60:6c:ee:
d1:e0:1b:cc:8a:ae:39:ad:1b:f9:ed:a6:15:c4:cb:7d:cb:33:
07:39:4a:5a:25:f4:21:a7:64:08:f3:22:72:83:5c:ca:1f:e9:
ad:f8:47:49:a4:c6:82:01:54:58:3b:62:ab:dd:66:01:c6:35:
74:32:c6:f1:90:76:99:ec:0c:d4:2a:cd:f2:2f:2d:57:11:4e:
44:2f:7b:e3:a6:e9:ce:b1:32:0e:f5:28:ea:82:01:52:74:9b:
24:27:bb:09:2d:6a:3a:b7:65:0a:b1:31:5b:83:a5:78:6d:7e:
cc:de:97:95:db:ed:25:e8:ff:d9:6f:e5:33:6f:f4:4f:12:b1:
10:30:9e:c9:fb:5a:dd:fc:e8:2a:49:29:e1:fe:b1:49:bb:88:
c6:76:11:ae:6e:a7:d4:2c:98:db:72:1f:77:a1:ab:fd:63:10:
72:b9:cb:de:c0:59:24:e3:94:08:1f:df:26:18:49:80:9a:90:
a0:60:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:42 2026 by rpki-client