Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/h0uAOEUI-ibYSxCIsCByTHYtsZM.roa
File: h0uAOEUI-ibYSxCIsCByTHYtsZM.roa (raw, json)
Hash identifier: 73z7ExdVrQpDFxLXve4S4EigI54vXhrIVOhvporYAcs=
Subject key identifier: 87:4B:80:38:45:08:FA:26:D8:4B:10:88:B0:20:72:4C:76:2D:B1:93
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019FEB39F2D8FD2BC6079A3895375A3D4EE0
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/h0uAOEUI-ibYSxCIsCByTHYtsZM.roa
Signing time: Mon 10 Aug 2026 10:31:11 +0000
ROA not before: Mon 10 Aug 2026 10:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202790
IP address blocks: 131.222.234.0/24 maxlen: 24
131.222.235.0/24 maxlen: 24
146.19.201.0/24 maxlen: 28
185.152.124.0/22 maxlen: 24
185.152.124.0/24 maxlen: 24
185.152.125.0/24 maxlen: 24
185.152.126.0/24 maxlen: 24
185.152.127.0/24 maxlen: 24
212.18.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:39:f2:d8:fd:2b:c6:07:9a:38:95:37:5a:3d:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Aug 10 10:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=874b80384508fa26d84b1088b020724c762db193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:21:a2:f5:28:08:27:02:9a:54:78:8d:46:
ed:d2:58:e0:fd:21:c6:56:d9:fa:2b:d1:3b:13:f9:
a3:43:31:98:11:ea:c2:47:6f:96:ab:24:2a:1d:2d:
34:9d:6b:36:a4:66:33:c7:57:b6:a8:27:0a:a5:e8:
0e:68:85:15:b9:e6:2b:52:ad:b3:18:da:55:26:6c:
e4:98:ad:0d:5e:6a:12:75:7c:a3:3d:11:64:48:89:
14:5b:59:4f:a3:eb:90:d9:ff:31:b7:0f:81:d9:73:
52:e8:a1:78:17:67:c6:ee:c0:19:28:60:46:c8:5f:
5d:bf:dd:05:86:6e:d7:43:59:49:02:fb:97:d1:0f:
15:5c:5b:8c:59:1c:4e:58:51:e9:90:53:d5:b8:1c:
f1:a1:f3:b5:d6:47:b6:bd:3f:ad:a5:9b:0a:cc:65:
38:bc:80:91:c4:0f:c2:18:f9:9f:0b:23:d2:e5:3c:
03:5b:34:65:f1:f8:05:af:8d:9b:55:4d:df:f0:e8:
50:c0:af:7e:c2:df:28:01:bf:18:2a:51:59:ef:fc:
f4:45:c8:87:6c:59:52:80:d9:ee:0f:4c:ab:e2:b8:
68:58:28:08:24:c2:91:3e:45:89:79:02:70:10:b3:
5b:af:2c:26:7e:1b:f4:11:43:53:45:00:85:fa:c2:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:80:38:45:08:FA:26:D8:4B:10:88:B0:20:72:4C:76:2D:B1:93
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/h0uAOEUI-ibYSxCIsCByTHYtsZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.234.0/23
146.19.201.0/24
185.152.124.0/22
212.18.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a3:b6:f7:c8:11:a4:c7:1b:0b:cc:40:06:0a:7e:8b:d4:36:
50:a1:ac:4b:29:c8:1d:92:ea:a2:ac:7f:9c:b7:01:6b:4f:8c:
dc:00:6f:91:d8:02:64:d3:b3:87:19:a7:aa:e5:44:3d:c2:e2:
54:3c:8b:3b:17:04:23:cc:23:d7:43:59:5c:4f:ce:f1:46:ee:
d2:76:19:6b:e0:5b:de:78:34:bd:37:00:f8:ab:44:56:0c:71:
98:d0:36:d8:f3:db:f0:af:6b:39:49:57:15:1f:6b:88:6a:d0:
af:19:0e:bc:b6:66:90:c2:37:09:3d:e1:5d:7c:75:f5:3e:7e:
4b:93:e6:c8:64:f6:a6:51:75:ea:94:e5:b7:20:5c:dd:c0:18:
da:70:36:b3:b5:7d:63:40:08:4e:5f:fc:05:98:9d:d2:ae:f9:
81:b9:60:70:02:8a:ce:76:63:42:2f:73:5c:9b:07:9a:66:02:
14:18:ee:2b:8b:4e:ba:5e:aa:50:9f:5f:30:ba:0f:a0:63:1a:
9a:a4:27:15:d5:19:58:a0:d6:82:1f:03:64:e1:6f:e1:ae:01:
28:af:10:1e:ef:ab:bc:75:13:be:03:d7:3a:ff:72:6e:dc:7d:
50:69:7d:95:32:38:a7:ca:99:53:d5:49:fb:28:73:09:1b:9c:
b5:5a:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:08 2026 by rpki-client