Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HxbopZkkzFEqftnzLScwLUcRGZ4.roa
File: HxbopZkkzFEqftnzLScwLUcRGZ4.roa (raw, json)
Hash identifier: W3AtOKoeJQMa23CIXe+I12fEkRaNKvtRkRc4+b8xI+Q=
Subject key identifier: 1F:16:E8:A5:99:24:CC:51:2A:7E:D9:F3:2D:27:30:2D:47:11:19:9E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A01E266519191F89313B7AF25066026A7D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HxbopZkkzFEqftnzLScwLUcRGZ4.roa
Signing time: Thu 20 Aug 2026 07:50:27 +0000
ROA not before: Thu 20 Aug 2026 07:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152460
IP address blocks: 217.79.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:26:65:19:19:1f:89:31:3b:7a:f2:50:66:02:6a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 20 07:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f16e8a59924cc512a7ed9f32d27302d4711199e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:01:1c:33:e9:2a:21:89:79:63:68:07:7e:
6b:33:2b:d3:85:4d:95:a5:e2:6e:20:22:23:7f:f8:
6c:e0:82:b2:da:06:40:ce:7e:83:53:cb:d8:de:ed:
ab:e3:4b:ab:36:73:15:3d:e0:f9:7a:73:dc:d4:50:
fb:c9:97:6b:48:30:9a:87:88:21:1d:c4:64:40:97:
04:c9:84:32:4a:81:41:e7:a5:9c:8b:4d:59:3a:a7:
df:54:b3:4b:56:64:4c:af:a4:26:bb:7f:a2:81:6c:
68:95:37:8c:8a:2b:22:b9:d2:3a:32:b7:5a:c5:07:
2f:78:b7:d2:0a:c5:cd:a7:fd:b5:ce:f4:17:28:ec:
a4:36:6f:0e:0a:4c:e5:2e:fd:86:ee:f1:67:56:15:
a9:76:9f:fa:f5:24:bf:eb:c1:1e:b1:db:7e:d1:91:
d8:e8:9f:6c:90:31:45:0d:ac:00:80:50:05:2d:ec:
4d:0f:c1:a4:a8:f0:3e:a7:b8:38:05:cb:24:86:6d:
17:0c:aa:8f:b6:fc:ff:1f:80:40:83:cf:02:d7:37:
d9:9f:9f:ed:9b:aa:96:a6:e3:76:a7:48:0f:d7:f9:
81:0c:14:06:e2:91:0b:cf:12:1e:65:c2:0b:7a:a3:
bc:5a:8b:8d:3f:03:b4:93:e9:e4:6e:27:77:39:f4:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:E8:A5:99:24:CC:51:2A:7E:D9:F3:2D:27:30:2D:47:11:19:9E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HxbopZkkzFEqftnzLScwLUcRGZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:29:f4:eb:ca:e6:c1:06:39:81:63:e1:0a:2b:58:6a:30:cb:
a3:94:6c:20:15:26:a4:85:58:07:84:52:b8:a8:4d:72:a3:92:
ea:f4:15:e9:ae:26:b5:59:66:cd:db:52:ed:70:3e:38:d1:8c:
c3:b6:d1:d9:6f:d9:22:bf:35:33:72:5f:68:5b:6e:12:3d:99:
62:74:c5:1e:a4:85:77:c9:78:d4:a6:3d:d1:09:0b:d4:93:92:
99:30:d1:a1:33:d3:2d:95:d7:ba:3f:ce:99:27:f2:56:81:e5:
f2:ec:7e:ee:2c:e1:8c:29:77:ce:77:77:16:f2:2d:ce:e7:a4:
28:b0:a4:02:56:15:d6:87:65:bb:c9:18:82:73:46:8e:be:22:
b3:52:1a:fc:8b:09:b3:ab:ee:37:3b:da:f8:3f:c1:ec:49:0f:
74:99:01:ea:9b:c8:15:15:2b:ef:34:38:96:9b:13:e0:e7:5c:
25:88:41:90:29:f9:95:14:0b:53:f4:46:e9:e9:19:39:6e:a0:
7a:3c:47:a2:7d:23:6e:9a:ef:f7:c9:fa:6e:c1:7d:4d:77:c6:
f1:30:f4:2e:e6:7d:a9:2b:be:84:57:77:8d:a8:ea:4d:6c:da:
d8:a3:9e:40:f0:6c:d7:91:e5:8f:41:c5:4d:e0:e1:b0:f3:dd:
f8:81:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:36 2026 by rpki-client