Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HMnJVGsw1KKSHSxZYJQk0PPJv4A.roa
File: HMnJVGsw1KKSHSxZYJQk0PPJv4A.roa (raw, json)
Hash identifier: cmHnOSBKknYL6Ik8PCsxIYH0OUFFybK95ALGrR3Wsno=
Subject key identifier: 1C:C9:C9:54:6B:30:D4:A2:92:1D:2C:59:60:94:24:D0:F3:C9:BF:80
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686527C77C44DC1194F0BC9AA65740
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HMnJVGsw1KKSHSxZYJQk0PPJv4A.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 179.255.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:27:c7:7c:44:dc:11:94:f0:bc:9a:a6:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cc9c9546b30d4a2921d2c59609424d0f3c9bf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:c7:7c:6c:26:3b:63:16:02:4d:d0:f4:74:
bb:2b:74:8e:f1:49:f9:32:15:04:69:3c:52:40:7a:
eb:b7:23:ec:e4:56:0e:28:ec:e8:4e:27:88:2e:0b:
2b:2b:8c:25:b9:2a:1e:6c:8b:21:54:ef:6b:de:b5:
a9:c5:a3:20:91:ef:fb:6b:ce:ab:f1:12:39:9e:d2:
8c:b0:77:f8:cc:cf:1c:8c:63:e3:56:3c:43:81:c5:
07:fd:f6:e6:48:2f:e0:1a:c4:0e:aa:f6:d3:ce:a2:
3b:8e:db:da:cf:4e:cd:26:e1:7b:c6:33:3e:b8:c5:
2b:d3:ac:ab:d5:46:c3:3e:ba:7f:2a:97:ad:e9:b5:
8f:a4:d4:99:32:40:be:e1:59:31:d3:a4:00:fd:48:
7b:25:40:2b:cb:52:ef:0d:29:f3:39:b6:96:e2:b0:
73:9e:82:42:e3:26:e8:de:d3:38:6d:cf:7c:1d:7a:
ff:e8:78:82:f9:d1:3f:bd:4a:87:45:42:75:0d:fe:
69:0d:45:5b:e3:f4:07:cf:33:1c:cc:86:07:49:58:
e8:b6:d5:52:0e:ad:79:dd:ea:37:30:8d:17:f4:dc:
97:cb:53:96:5f:de:b5:a5:f0:10:00:f1:41:07:ab:
08:7d:b4:72:67:01:de:c6:34:07:6a:f1:14:ea:c1:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C9:C9:54:6B:30:D4:A2:92:1D:2C:59:60:94:24:D0:F3:C9:BF:80
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HMnJVGsw1KKSHSxZYJQk0PPJv4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.255.184.0/24
Signature Algorithm: sha256WithRSAEncryption
88:06:fa:03:bd:98:40:77:b9:ff:36:a2:9a:04:d7:72:08:47:
83:14:85:2b:11:52:d7:44:35:63:7b:b5:73:e8:76:e6:82:27:
db:bd:75:0c:d2:1e:52:ef:95:12:da:88:23:6b:16:44:05:a0:
c9:36:bd:92:09:ab:0b:c8:81:cc:7c:39:3e:ab:db:d5:91:fd:
a4:41:61:16:ff:ed:fe:34:07:7d:71:a6:cd:50:7f:83:2e:34:
03:4d:fb:2c:e8:3e:ab:11:88:34:b8:d3:0c:da:fc:3a:dc:1e:
c3:8a:3c:b6:dc:17:d5:62:4c:d6:7b:77:7f:39:5b:57:ac:2f:
43:0b:7c:d0:2f:e8:1b:b1:a4:5a:20:13:1c:75:0c:8c:89:1f:
5c:db:c9:cf:83:ff:c3:74:bd:35:d0:65:92:64:e2:c1:a5:32:
5e:0d:26:f6:01:b7:97:5f:94:1b:bf:8c:87:af:9e:f1:dd:b0:
83:c5:c2:29:b7:f5:26:96:9e:4d:f4:5f:c5:2d:8a:43:68:62:
02:99:61:4b:ce:9d:8a:ea:aa:ab:e6:9b:44:0c:41:d1:33:45:
0e:5a:f8:ad:32:26:73:d1:ba:88:92:8f:3a:18:09:4f:42:57:
5c:0f:c9:94:50:17:62:95:3c:87:74:91:a8:e3:cb:eb:9c:8c:
a8:fb:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:07 2026 by rpki-client