Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HHc3eTNMtGUjI58yvKholKU9QdA.roa
File: HHc3eTNMtGUjI58yvKholKU9QdA.roa (raw, json)
Hash identifier: UuU06SOr4sgoOjwwF3EmWNDf/mu+BkYOWo2WQY2vkec=
Subject key identifier: 1C:77:37:79:33:4C:B4:65:23:23:9F:32:BC:A8:68:94:A5:3D:41:D0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E925CBB10902A584C3782DE97A0FC061D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HHc3eTNMtGUjI58yvKholKU9QdA.roa
Signing time: Thu 04 Jun 2026 11:20:11 +0000
ROA not before: Thu 04 Jun 2026 11:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 14:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:5c:bb:10:90:2a:58:4c:37:82:de:97:a0:fc:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 4 11:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c773779334cb46523239f32bca86894a53d41d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:6f:19:df:20:8d:65:62:a3:89:4b:72:c6:
4c:c5:e4:42:0f:55:55:6b:cf:ab:f7:04:c2:1b:59:
0c:82:b6:ea:fd:fa:98:41:14:56:c8:d5:f7:bf:c4:
80:3e:c0:16:cf:f0:50:37:99:36:46:fd:23:e1:8a:
85:41:07:95:30:43:ad:11:ea:bc:7a:8b:c1:0c:c2:
60:d5:56:d9:50:94:84:1b:d0:d9:56:4e:d0:ba:eb:
c7:08:5c:a4:e1:8d:05:15:c1:61:26:c9:67:e1:7e:
ce:38:53:74:c0:18:f7:00:5f:99:5c:d2:9f:5c:e2:
62:63:e8:23:d6:6f:95:49:39:ca:c6:a5:0f:3d:a2:
9d:cc:d0:66:1b:f1:73:b9:0b:42:42:95:05:e4:bd:
a9:7e:e1:5e:5c:4f:da:20:88:b4:3d:e8:14:02:49:
90:f1:12:2c:18:b0:9e:02:cb:c5:94:a7:84:c9:00:
27:94:28:f0:a2:53:47:bd:c2:e9:80:84:02:bc:c6:
56:20:79:24:99:9f:52:ca:5a:3e:c3:f2:6c:20:c7:
3a:4d:aa:90:e7:64:f8:2b:59:16:6e:6d:70:61:85:
fc:6b:ae:6d:f1:37:2c:b2:be:e7:a8:e6:9c:e9:31:
a8:97:ac:cd:37:ec:fa:91:b2:bc:4f:1a:07:86:c1:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:37:79:33:4C:B4:65:23:23:9F:32:BC:A8:68:94:A5:3D:41:D0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HHc3eTNMtGUjI58yvKholKU9QdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
109.176.248.0/24
213.130.156.0/24
213.218.237.0/24
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
59:55:12:13:07:ad:17:25:79:4f:ba:ec:29:06:cb:55:bf:06:
3d:1f:bd:25:37:10:a1:c2:34:d0:36:4d:fe:67:75:60:b6:18:
61:08:71:6e:e0:53:91:c4:3c:2d:e8:62:27:78:68:59:e8:35:
c1:ec:43:cc:22:7c:e0:85:da:a6:da:f2:8f:3e:46:f1:f3:49:
9c:b3:88:6b:24:f1:1f:56:ba:f5:c0:da:2d:b7:4b:d0:67:73:
a7:6e:b1:53:2f:cc:ea:c8:fc:6c:5f:4f:3f:42:53:82:8e:b0:
fa:92:df:6e:5e:79:48:73:e8:5c:70:f7:d9:29:e9:44:bc:ed:
d7:8e:61:0d:d4:a1:54:f0:53:31:e4:e8:c1:79:c4:ce:3d:37:
af:31:59:8a:da:4e:8e:61:f3:dc:52:74:6a:41:a1:99:34:54:
d7:97:19:61:30:7c:2b:1a:32:4d:5d:6c:2f:b1:02:da:0a:e2:
03:69:3d:0e:ea:1a:d4:59:19:f4:11:be:ea:24:e6:73:71:f2:
d0:75:86:b9:fb:9a:8b:82:c3:37:fb:11:aa:b7:7c:3b:f1:0a:
dc:83:30:34:42:07:62:6e:f1:6b:ca:39:da:5c:96:e3:49:90:
31:ff:9f:3b:7a:9f:c0:28:7c:e9:77:08:b9:8c:58:40:a7:88:
26:27:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:09 2026 by rpki-client