Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_hBOrFv7fim--KrBCy30YmUAo3I.roa
File: _hBOrFv7fim--KrBCy30YmUAo3I.roa (raw, json)
Hash identifier: qzAl3O9RiG1n+2GEMGj8zSfO491bHrCZda9IZnWLPqI=
Subject key identifier: FE:10:4E:AC:5B:FB:7E:29:BE:F8:AA:C1:0B:2D:F4:62:65:00:A3:72
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019E842C2A0507720E356E9FF9CB81CDDD55
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_hBOrFv7fim--KrBCy30YmUAo3I.roa
Signing time: Mon 01 Jun 2026 17:12:26 +0000
ROA not before: Mon 01 Jun 2026 17:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 141.137.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:2c:2a:05:07:72:0e:35:6e:9f:f9:cb:81:cd:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jun 1 17:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe104eac5bfb7e29bef8aac10b2df4626500a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:7b:91:8e:71:08:79:17:86:48:74:91:fe:
dc:4d:d0:3e:f7:68:58:a6:9e:9c:fc:d4:f2:fb:84:
c7:bb:c8:b9:83:b0:bf:0f:73:56:3a:b0:f8:ad:3c:
d4:3d:26:b8:6e:0e:88:15:20:5c:ae:69:b1:cd:17:
60:b0:1d:99:f8:7c:7e:d3:28:14:29:91:b8:a6:c5:
b9:c8:fe:c1:45:cf:d4:74:9d:e5:bf:1d:15:1a:e8:
12:4d:22:9e:32:cd:6c:ab:f8:fa:4e:ed:dc:cd:a0:
5a:f8:3a:cd:b5:c6:2d:f5:6b:ae:18:9f:42:99:f7:
4e:fd:f3:2f:a8:28:42:1e:cd:f3:b0:34:2f:e9:e1:
7f:42:ed:6e:3c:07:7b:7f:ac:b4:bb:39:6c:c4:b6:
49:38:1a:3c:80:b7:b2:09:c9:65:2a:88:59:79:d0:
8f:d2:ed:1a:ae:e4:8b:5e:c8:8a:2a:93:45:2d:b0:
6a:aa:86:02:93:4d:2a:6b:06:9b:56:8c:77:2a:28:
c3:2a:fc:a6:3e:1f:93:ab:99:9a:47:e1:6a:fe:78:
99:e5:9a:02:9d:33:88:e0:b7:70:b2:84:08:19:79:
38:0c:75:eb:44:00:41:a5:54:34:f0:39:38:f2:f5:
e8:b1:01:35:b9:3c:a8:1e:36:c6:e1:24:af:8a:8f:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:10:4E:AC:5B:FB:7E:29:BE:F8:AA:C1:0B:2D:F4:62:65:00:A3:72
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_hBOrFv7fim--KrBCy30YmUAo3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.137.224.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5f:8c:3d:f9:cb:f4:14:65:68:8e:e7:28:e7:84:c7:3c:96:
4c:85:a7:e6:2d:4b:e4:f4:73:22:f6:49:26:bb:b0:06:25:ad:
bc:01:0e:a0:de:c3:98:39:a4:cb:61:eb:95:e1:6d:20:4b:73:
81:e2:de:44:19:1d:93:09:df:c4:03:01:48:e8:85:6b:ab:d6:
07:cc:05:a7:39:72:2b:c6:43:5f:5c:62:67:c5:6a:1f:d7:03:
f2:c5:c5:8c:7b:d0:41:ad:fd:66:f5:b7:3d:5a:7e:ca:75:c6:
3c:2c:67:25:80:b6:63:51:a7:8a:db:f1:d8:fa:06:e0:52:42:
03:7a:3e:1a:61:aa:1e:f5:94:48:74:da:2c:6e:64:ca:a2:cd:
dc:5b:da:77:f4:6f:60:32:a6:16:39:6f:e1:b9:7a:ab:0d:bd:
ad:dd:de:1b:f3:6d:fe:88:2c:1a:0e:5a:65:c0:ad:22:1f:14:
31:9f:7d:f3:f5:94:fa:f1:6f:9e:31:0b:fd:f5:ac:0e:97:17:
da:16:7f:b6:a6:cf:24:1d:ed:e2:75:00:e8:15:e5:a7:05:23:
49:c1:81:45:22:cc:91:e6:db:db:05:78:da:25:b1:b5:83:c0:
4e:df:37:e8:e6:63:d4:11:48:0b:43:1f:44:27:fa:bc:5f:7c:
33:9c:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:11 2026 by rpki-client