Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HbqbSjjdlH4TkWp4IEUlK88tWo8.roa
File: HbqbSjjdlH4TkWp4IEUlK88tWo8.roa (raw, json)
Hash identifier: xmhwR8cRZld+UbPLhWTz7vQhe1VcCUmdbtziS4HKJtA=
Subject key identifier: 1D:BA:9B:4A:38:DD:94:7E:13:91:6A:78:20:45:25:2B:CF:2D:5A:8F
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A00FC7CDFB8B8F190D1479FA0419C79B9D
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HbqbSjjdlH4TkWp4IEUlK88tWo8.roa
Signing time: Mon 17 Aug 2026 12:52:27 +0000
ROA not before: Mon 17 Aug 2026 12:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197401
IP address blocks: 187.13.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:c7:cd:fb:8b:8f:19:0d:14:79:fa:04:19:c7:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 17 12:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dba9b4a38dd947e13916a782045252bcf2d5a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:5c:ae:37:b3:ea:e9:31:23:5e:16:53:02:
91:d4:20:a3:f1:fc:b8:c9:ed:c4:6b:bd:cc:b7:ee:
96:95:97:e7:f9:39:03:74:cd:e7:0b:ab:b8:94:63:
65:00:59:2b:a2:47:fa:ed:d5:66:f8:e9:d0:48:a8:
03:a0:5a:d8:d8:05:97:74:06:da:74:76:d3:9a:d9:
a1:74:e4:9b:83:dd:e8:33:86:0e:06:e0:f9:d8:0e:
1b:f1:f1:4e:c0:bd:6d:99:61:8f:f9:7d:6c:92:2a:
f4:fc:83:a6:d4:e5:39:1b:85:5c:0f:5e:0e:de:09:
bb:c8:68:36:9c:a6:4e:e5:92:d1:53:d7:22:89:7a:
12:8c:65:28:3c:d3:1a:c3:51:62:b6:da:01:53:79:
bb:9b:8d:54:69:80:ed:ec:17:ec:75:37:60:2c:fd:
4a:b1:a1:46:ea:c3:e9:ec:ca:b0:d9:85:2f:50:a9:
8e:21:ce:bc:e7:7d:eb:ca:eb:a5:e4:0c:40:90:44:
e6:1d:ad:60:cf:13:bd:d9:6e:ef:be:48:98:28:27:
80:3c:da:d6:2d:c4:35:a7:de:d6:5d:7e:ac:23:31:
8b:3b:d8:16:12:b3:3f:59:3e:02:2b:d4:5f:2f:7f:
8b:a6:1d:8f:16:10:31:0d:84:88:8d:8c:d6:cf:ec:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:9B:4A:38:DD:94:7E:13:91:6A:78:20:45:25:2B:CF:2D:5A:8F
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HbqbSjjdlH4TkWp4IEUlK88tWo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.72.0/24
Signature Algorithm: sha256WithRSAEncryption
36:99:33:ee:93:70:85:e1:3c:91:9a:56:1a:c8:91:5a:0f:ce:
ac:1a:5d:a0:9e:06:03:d1:3a:ee:23:8d:ca:5a:c8:c1:62:82:
66:3a:9a:e0:68:46:62:36:a4:b2:2f:fa:19:19:55:0f:a5:ab:
ac:92:b3:84:b7:9d:59:75:7d:db:f9:f9:3c:a5:f2:2c:a7:af:
e5:7e:bd:bd:63:b2:26:e3:91:30:63:7f:f6:c9:33:61:a4:7c:
ed:d4:d4:04:e4:4b:32:aa:0b:9c:1e:cf:90:5a:54:89:53:7c:
41:64:d7:85:79:ba:7c:06:1b:c7:20:79:0b:09:70:2a:c5:a3:
8e:7d:b3:97:a7:50:0c:9b:68:9d:a8:35:57:3a:64:8d:07:d6:
c8:89:6f:e5:5d:54:78:ed:ab:35:20:32:95:da:9f:1c:f0:8c:
9f:e6:8a:e7:45:2d:6c:3d:8e:9c:89:42:37:ad:6e:02:e1:e8:
8f:97:ec:db:47:57:2e:5b:a2:9b:f4:8c:b7:45:ba:29:a6:a2:
62:69:3b:07:e9:4e:8f:85:69:fe:71:8c:2e:84:05:ce:fb:cc:
c7:a6:27:84:1d:ca:e7:34:fc:32:f9:1a:6c:3a:ac:86:3b:05:
97:80:e6:78:3b:19:7e:ef:85:57:26:13:37:57:80:c3:9d:a9:
a0:fb:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:30 2026 by rpki-client