Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/HXYyIJwp77xrh-D2GvGeIYjlxSc.roa
File: HXYyIJwp77xrh-D2GvGeIYjlxSc.roa (raw, json)
Hash identifier: Yaww4KhCdEduJ3ZeARFzOtzBnj3+LePhr5NqSxinVtE=
Subject key identifier: 1D:76:32:20:9C:29:EF:BC:6B:87:E0:F6:1A:F1:9E:21:88:E5:C5:27
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019EC15D835EB7C1D41F63FC27289DB88BE6
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/HXYyIJwp77xrh-D2GvGeIYjlxSc.roa
Signing time: Sat 13 Jun 2026 14:23:11 +0000
ROA not before: Sat 13 Jun 2026 14:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210099
IP address blocks: 46.31.78.0/24 maxlen: 24
85.117.236.0/24 maxlen: 24
85.117.237.0/24 maxlen: 24
85.117.238.0/24 maxlen: 24
185.17.112.0/24 maxlen: 24
185.17.113.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
185.17.115.0/24 maxlen: 24
185.73.200.0/24 maxlen: 24
185.73.201.0/24 maxlen: 24
185.73.202.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
185.165.77.0/24 maxlen: 24
185.165.78.0/24 maxlen: 24
2a04:7c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:5d:83:5e:b7:c1:d4:1f:63:fc:27:28:9d:b8:8b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jun 13 14:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d7632209c29efbc6b87e0f61af19e2188e5c527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:06:52:f3:0a:c9:3a:12:cf:db:38:9f:ca:
f4:37:b4:a0:5c:2a:4a:ab:25:7b:7b:1b:0d:31:6c:
b7:ad:db:ae:0a:89:dd:59:3a:43:24:bc:5f:f0:4f:
e8:69:10:85:4b:6e:dd:22:8e:28:b9:59:19:c9:a2:
f6:23:13:21:56:71:03:c7:d4:57:c6:f3:fd:f1:8a:
3c:ec:cb:35:4a:d9:01:41:8a:02:84:ae:5e:3e:cf:
32:68:d2:0e:37:fb:37:46:0c:d4:52:e5:d4:73:2a:
db:dc:d8:79:4b:e8:34:20:fe:bb:fe:1d:cc:ab:30:
2a:9a:c0:84:07:89:07:e4:e2:f3:6d:4c:e8:94:ee:
12:85:8a:11:6f:69:bd:ef:99:18:6f:8b:59:5d:24:
b4:26:92:e2:29:08:c5:2d:a8:3c:1b:9b:0d:ae:9a:
ca:44:00:22:a8:0c:41:3c:20:ef:50:de:f4:14:0a:
fe:28:19:bc:6a:15:da:31:65:aa:1c:3f:c5:e9:0e:
a7:5f:aa:f6:32:eb:f4:fe:25:b2:57:a4:c8:a8:d5:
73:ea:99:b6:30:eb:45:0e:8d:d0:2b:83:6f:ec:6d:
4e:e6:8a:e5:dd:63:64:ce:bb:44:db:12:6d:17:e5:
cc:89:8f:18:26:4a:36:50:9c:15:a5:24:49:81:c5:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:32:20:9C:29:EF:BC:6B:87:E0:F6:1A:F1:9E:21:88:E5:C5:27
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/HXYyIJwp77xrh-D2GvGeIYjlxSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.78.0/24
85.117.236.0-85.117.238.255
185.17.112.0/22
185.73.200.0/22
185.165.77.0-185.165.78.255
IPv6:
2a04:7c1::/32
Signature Algorithm: sha256WithRSAEncryption
42:94:bc:05:ae:2f:0e:65:89:7b:e3:28:52:a8:b0:5c:5d:53:
ae:4e:95:cc:4c:26:ea:65:51:7c:03:a4:2a:12:e9:58:ed:4b:
16:16:7d:d8:da:1e:37:ed:05:83:43:8c:ea:f3:72:6c:75:d8:
da:e0:37:55:86:05:d9:bd:85:a5:62:4f:a9:47:76:b9:9e:d4:
db:13:ab:f7:f0:58:74:cf:74:fc:b1:43:e5:85:e3:ef:02:dd:
d1:51:c2:97:c4:fa:1a:37:e5:4e:fd:b0:ab:41:02:f3:57:03:
a6:c3:dc:9a:92:a0:ee:95:55:28:ed:a7:f9:ed:ff:c9:ce:29:
c0:65:c8:52:93:af:35:b2:17:0c:89:ab:82:47:39:df:74:6f:
f3:5b:d5:d4:79:68:05:17:f3:44:0b:9a:79:86:d6:3b:08:e2:
82:b7:fd:da:81:5c:5f:0a:6d:e0:00:f3:36:02:a1:1b:18:ef:
7b:41:7d:d4:55:ed:b4:0e:27:78:7e:92:4c:a9:2f:44:78:d7:
7e:70:78:92:ef:80:99:2e:82:bb:53:6c:fd:f7:46:96:58:90:
ea:f4:28:2f:1c:e4:91:5f:bf:a8:fe:2e:38:9b:4d:e9:38:02:
9f:56:c8:77:35:24:90:21:70:de:a4:10:87:19:4e:8d:6b:80:
23:c1:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:10 2026 by rpki-client