Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hHYOy_HEpnB8T0BWiEReCRY04hg.roa
File: hHYOy_HEpnB8T0BWiEReCRY04hg.roa (raw, json)
Hash identifier: ukBpmnpraZhW7DcCO71G605V5rOcRy+N7L4lGJoxgP0=
Subject key identifier: 84:76:0E:CB:F1:C4:A6:70:7C:4F:40:56:88:44:5E:09:16:34:E2:18
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019ED5B1EF271673B236D946C1E7339661E6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hHYOy_HEpnB8T0BWiEReCRY04hg.roa
Signing time: Wed 17 Jun 2026 13:07:48 +0000
ROA not before: Wed 17 Jun 2026 13:07:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 217.79.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:b1:ef:27:16:73:b2:36:d9:46:c1:e7:33:96:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 17 13:07:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84760ecbf1c4a6707c4f405688445e091634e218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:0b:de:6e:e4:6f:25:9b:eb:53:fb:cc:87:
3a:44:6f:e6:af:1f:d6:c1:87:7a:70:ac:03:3b:8a:
4c:cd:7f:be:b5:17:ea:7e:d4:ae:f0:25:7e:eb:50:
96:3d:dc:9d:f7:87:74:9d:6f:92:0a:8a:44:0a:e3:
62:2b:15:62:de:75:49:aa:83:a3:b7:32:65:70:e9:
31:88:6d:d0:52:43:b2:fa:ee:14:b6:dc:0e:8b:1d:
9d:be:71:2e:d3:f4:b2:06:99:2d:4d:ec:1b:2e:1c:
19:a6:1a:b6:00:cc:9d:6c:97:76:c4:c5:c6:80:48:
86:0e:c3:2d:fc:e7:97:8e:86:45:f7:c7:0e:33:be:
e7:31:06:bd:80:a3:e5:13:d2:ac:c1:3b:6d:ed:15:
90:cf:80:37:76:71:83:d8:39:1e:29:b7:14:aa:36:
9f:ea:a0:5f:e9:2b:87:93:77:e9:33:25:b4:85:f2:
82:1b:1e:60:36:58:a7:0b:00:27:37:b7:aa:ad:dc:
6a:81:67:01:6e:e9:b3:24:8d:4e:77:bf:79:74:79:
46:e6:58:0f:56:21:e1:b7:24:0e:6f:2a:c1:42:fa:
5f:f1:0b:2c:8f:b6:61:85:a4:ae:e3:3a:68:5d:6c:
bf:f0:e7:35:1a:d4:48:99:1c:ec:77:89:ba:30:77:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:76:0E:CB:F1:C4:A6:70:7C:4F:40:56:88:44:5E:09:16:34:E2:18
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hHYOy_HEpnB8T0BWiEReCRY04hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:65:0b:bc:a7:24:56:20:14:94:c1:b8:f7:00:51:18:bc:60:
0f:95:08:d4:aa:e6:2d:bb:76:52:01:07:fa:82:56:a0:d5:ab:
60:68:ea:b7:22:42:93:4f:54:1f:a4:28:2d:ea:c6:4e:a8:46:
5b:79:2b:8f:80:41:68:46:18:1e:11:81:57:ce:d8:71:35:fe:
75:b8:2b:9b:80:7b:91:61:f6:5e:eb:de:ca:23:64:e4:96:1b:
88:8f:c6:72:83:d2:aa:32:12:5a:ba:8a:c1:71:9a:5c:b2:7f:
42:ce:c9:d7:6e:b2:42:94:a5:a2:9f:00:24:be:af:7c:35:cf:
8e:59:c9:51:d2:8c:ed:be:88:35:03:2b:b4:17:76:2c:c9:57:
1b:dd:4e:68:24:b9:86:41:14:a1:38:45:85:d6:8a:04:5d:fd:
5b:bd:bd:05:96:5b:43:59:c7:f7:37:d1:80:ce:71:b7:be:45:
06:78:cc:28:bd:75:65:10:34:b6:34:5c:2c:eb:b5:fb:cb:99:
e8:02:e3:b1:d7:15:88:45:2f:8a:72:fc:3c:6d:15:3d:04:89:
a5:11:fb:63:f9:1c:5c:45:28:ac:ef:1b:7e:62:0f:ee:e7:e7:
29:ac:5a:d5:33:59:6b:f0:aa:02:30:53:a3:61:11:fb:3b:f9:
aa:a3:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:39 2026 by rpki-client