Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HrMj_GnwQIFuTnfdxxyIjE-1fTA.roa
File: HrMj_GnwQIFuTnfdxxyIjE-1fTA.roa (raw, json)
Hash identifier: C0n20k3l0t5enAnvei+Ir6HCzxKKQiDD91+lXP6nt/Y=
Subject key identifier: 1E:B3:23:FC:69:F0:40:81:6E:4E:77:DD:C7:1C:88:8C:4F:B5:7D:30
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23685BD20F9929CE1EB291D0E61ED941
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HrMj_GnwQIFuTnfdxxyIjE-1fTA.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41718
IP address blocks: 191.44.34.0/24 maxlen: 24
191.44.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5b:d2:0f:99:29:ce:1e:b2:91:d0:e6:1e:d9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb323fc69f040816e4e77ddc71c888c4fb57d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:09:fc:f0:b9:cf:36:98:86:c0:b9:4e:52:
41:93:44:76:bf:91:3a:0d:75:c1:f5:3d:40:51:52:
a6:39:a7:d3:ff:95:76:b7:d2:bb:bc:29:d5:e7:f7:
f7:81:9a:3a:4a:2f:ef:1b:5c:24:0b:85:da:1b:33:
5a:7a:62:84:2c:d6:3f:3a:ab:9f:78:cb:93:b6:4f:
17:d7:ae:03:1f:6f:d0:32:0b:76:40:d3:41:cd:9f:
61:ac:bd:10:b3:5a:c6:c7:f0:93:de:24:b3:55:7c:
a3:e8:2c:78:b1:43:5b:1d:25:27:65:4a:5d:9b:62:
fe:8b:6b:36:5c:6d:0c:8d:93:00:70:d8:11:22:12:
44:b0:74:bc:78:85:02:a8:b9:c6:7d:de:6c:03:a1:
91:4c:3d:4b:9b:87:b1:c7:f4:28:96:dc:38:f1:e7:
5d:7c:f9:1f:ab:1a:7e:af:61:00:be:73:f2:63:4d:
6d:df:f3:52:4d:4e:14:a7:76:46:66:2a:72:99:22:
67:cb:d2:b8:20:ab:68:a9:ed:57:65:94:b0:f1:c9:
99:4a:f5:d7:32:e3:ad:59:ab:6f:88:c5:50:12:0c:
4d:dd:aa:be:f5:3e:cd:b7:a7:52:c7:4e:a2:42:09:
2b:83:80:f7:44:4d:f1:0e:fa:ef:be:09:22:b2:92:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B3:23:FC:69:F0:40:81:6E:4E:77:DD:C7:1C:88:8C:4F:B5:7D:30
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HrMj_GnwQIFuTnfdxxyIjE-1fTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.34.0/23
Signature Algorithm: sha256WithRSAEncryption
53:51:86:a9:fa:c9:e8:bb:18:d3:5c:ed:07:df:78:d7:1d:00:
f7:83:a3:27:9f:b4:66:9c:4d:15:42:d3:7d:8f:cd:70:ea:31:
b9:16:be:01:bf:25:75:59:92:c0:93:a3:10:29:07:82:f1:42:
bb:82:1e:bc:aa:a0:3e:de:ef:c0:fe:b4:44:22:3f:59:49:90:
0f:72:26:41:92:9b:b4:e5:7e:a2:38:91:5a:3f:62:3f:58:38:
f6:3c:7f:7d:0b:40:2c:aa:43:c0:d3:19:5c:2c:a4:8e:79:37:
1c:59:50:97:a9:e3:8f:fb:76:c2:2d:e6:f0:ce:01:67:c7:fa:
f1:89:58:60:26:62:c0:2d:09:89:e2:8a:4b:92:a6:c6:c7:44:
58:92:64:89:f9:93:fa:2f:5f:f5:e5:e9:a4:2a:30:bd:1f:98:
18:d3:d9:79:cd:f2:5a:fd:12:2a:a5:93:3a:68:75:95:56:9b:
23:ae:90:77:96:8f:81:50:37:b6:86:f7:91:35:dd:77:e2:b4:
6a:67:fa:8c:59:4a:82:de:62:76:ae:e4:8f:db:8e:47:e5:5b:
46:f3:7a:b8:82:7d:3b:41:66:0a:cd:4b:f3:46:58:3d:2c:ea:
92:5a:07:22:73:ee:f5:40:d5:05:93:eb:a0:7a:f1:6a:bb:1e:
e7:d9:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:44 2026 by rpki-client