Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/HDFBj63zZKtSC6Jw4UiShUElLMM.roa
File: HDFBj63zZKtSC6Jw4UiShUElLMM.roa (raw, json)
Hash identifier: dM6soWydRdWA9tO0ayG6aaBJ/bKBsqmgot+omBKKzgI=
Subject key identifier: 1C:31:41:8F:AD:F3:64:AB:52:0B:A2:70:E1:48:92:85:41:25:2C:C3
Certificate issuer: /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial: 019F2368A99AC826A505AC6544C591CBC625
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/HDFBj63zZKtSC6Jw4UiShUElLMM.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34549
IP address blocks: 89.37.101.0/24 maxlen: 24
89.47.58.0/24 maxlen: 24
185.131.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a9:9a:c8:26:a5:05:ac:65:44:c5:91:cb:c6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c31418fadf364ab520ba270e148928541252cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:82:ec:b6:29:12:d7:40:22:fa:a6:a3:1e:
7b:7f:8f:ba:2a:ca:14:4b:f7:d5:f0:98:2c:d7:1e:
65:f9:72:88:a2:c0:42:22:69:8b:68:86:57:d4:bf:
8b:d2:a4:23:73:20:64:95:eb:7a:a4:a3:69:27:8d:
a0:68:4a:6f:6b:8b:ce:f5:a3:f2:10:53:a3:69:80:
2b:1b:46:99:4d:b4:80:03:1a:0e:14:1d:44:fe:71:
3d:e8:15:76:0a:05:9c:fc:27:f3:b4:59:2d:10:1d:
e8:ed:1c:18:07:e6:a0:f8:82:14:19:4b:83:5b:be:
a1:1b:ef:01:cc:25:d8:52:96:09:c8:98:ea:f3:1c:
a9:d4:e5:31:28:1c:8a:12:d9:86:61:41:26:52:e4:
8f:e0:06:44:ff:77:85:b9:ea:80:31:2d:13:78:bb:
b5:72:7b:df:90:9a:4e:f5:dd:c2:56:1c:d4:e6:8e:
3e:20:8a:d1:e0:aa:9e:79:a6:b5:7c:95:33:5d:60:
0c:fd:e7:2d:68:77:2a:d4:ca:ab:68:17:60:12:42:
ad:fe:d9:1c:b0:ab:ee:6c:73:4b:f3:29:64:f6:b5:
cd:f2:8b:2b:d3:21:5c:4a:d5:75:5e:d6:38:a4:72:
38:ff:e3:40:87:b5:4b:b9:46:1a:2d:2e:1d:38:90:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:41:8F:AD:F3:64:AB:52:0B:A2:70:E1:48:92:85:41:25:2C:C3
X509v3 Authority Key Identifier:
keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/HDFBj63zZKtSC6Jw4UiShUElLMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.101.0/24
89.47.58.0/24
185.131.52.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2e:00:64:9f:1e:a3:a2:f9:66:9c:b4:5c:67:7f:ab:00:40:
e1:65:bf:e2:1c:f8:11:c6:c7:81:75:c4:60:c4:d2:71:4f:0a:
44:52:d4:ea:11:50:76:6e:e2:b6:cf:07:31:95:b9:dd:5a:9b:
a9:e4:f7:71:ba:98:10:3e:1c:98:07:6b:b3:a7:7a:15:53:62:
6c:e2:30:33:d9:39:db:0d:77:77:bf:4b:e5:18:db:fe:e8:9f:
5b:8f:1f:84:e9:69:81:1a:d0:cf:3d:2d:63:1b:89:17:58:4a:
c1:ef:3f:dc:c9:55:21:78:f1:41:16:81:e6:94:50:39:18:4b:
d5:2a:dc:61:ba:42:46:ba:ce:2a:14:cf:eb:32:05:e4:87:13:
47:63:d5:21:10:4f:34:e7:eb:37:3a:c3:3b:a8:76:5c:79:73:
c9:c5:ed:9e:15:a4:38:4a:b6:87:9c:04:05:1c:d8:95:0b:29:
68:c0:fd:c0:db:4b:4d:5e:45:15:c1:ab:90:34:2a:a1:b1:86:
12:fb:38:5e:8d:cc:bf:7a:fa:41:59:51:c8:74:cc:2c:a1:d4:
0f:f8:ef:7d:ed:4c:61:32:fc:7b:dd:1e:39:86:33:0b:6c:31:
0a:79:da:be:f8:73:9e:d4:09:03:a0:fb:22:0e:18:81:5d:6a:
d1:10:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:12 2026 by rpki-client