Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/fhggUi6tfoaIeacDMVh7ucBgWEs.roa
File: fhggUi6tfoaIeacDMVh7ucBgWEs.roa (raw, json)
Hash identifier: dgqS8/QzcpGNir6kNNn3rNs+Fs305XRQP/rvNZT21e0=
Subject key identifier: 7E:18:20:52:2E:AD:7E:86:88:79:A7:03:31:58:7B:B9:C0:60:58:4B
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 019EE0F4029F026C1496D3DA275554693E78
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/fhggUi6tfoaIeacDMVh7ucBgWEs.roa
Signing time: Fri 19 Jun 2026 17:35:48 +0000
ROA not before: Fri 19 Jun 2026 17:35:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41869
IP address blocks: 185.12.58.0/24 maxlen: 24
193.28.7.0/24 maxlen: 24
194.127.198.0/24 maxlen: 24
217.197.164.0/22 maxlen: 24
217.197.165.0/24 maxlen: 24
217.197.166.0/23 maxlen: 24
2a02:20c8:5920::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:f4:02:9f:02:6c:14:96:d3:da:27:55:54:69:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Jun 19 17:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e1820522ead7e868879a70331587bb9c060584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:3b:e1:83:d0:7a:64:31:a8:f5:f8:14:3b:
bd:a9:1f:2a:1c:63:02:10:76:19:6e:c8:a0:c6:62:
9d:a7:6b:ab:d3:03:e3:24:50:b5:bd:ec:52:5c:8b:
f1:bf:2d:8d:f9:f6:fb:e6:a7:2f:e9:22:95:f1:0d:
79:89:11:47:e9:fa:48:dd:fb:89:fa:7c:06:1b:2b:
9c:98:34:af:cb:2f:7c:d6:91:a6:77:03:94:b4:fb:
7b:80:b2:89:73:b7:e1:71:a7:ea:f5:f2:ee:23:b3:
ea:29:9b:9c:23:2b:b6:35:e4:50:72:75:3b:f0:99:
9d:84:92:d0:66:56:33:1d:b4:4e:39:aa:0b:a8:53:
77:e0:16:14:91:61:37:b3:f8:15:a9:73:b5:8d:61:
b6:6d:fe:e6:5d:9d:a7:c7:26:f0:9a:5b:80:f1:17:
9d:91:f5:a6:f5:be:03:db:c3:a7:bb:51:18:b2:de:
4d:2f:93:53:26:93:be:79:c5:c1:6f:ec:95:f5:cc:
ac:dc:58:e4:bf:59:0c:11:4f:33:1b:2d:84:72:51:
c6:63:c7:90:4e:e3:a0:1d:bc:63:ee:1d:73:24:c2:
1d:12:9b:63:80:4a:6f:c4:47:45:cc:29:50:8a:65:
31:3c:49:cb:a2:db:bf:3c:9b:97:d8:7d:99:a2:ce:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:18:20:52:2E:AD:7E:86:88:79:A7:03:31:58:7B:B9:C0:60:58:4B
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/fhggUi6tfoaIeacDMVh7ucBgWEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.58.0/24
193.28.7.0/24
194.127.198.0/24
217.197.164.0/22
IPv6:
2a02:20c8:5920::/44
Signature Algorithm: sha256WithRSAEncryption
1b:13:c4:48:8f:43:9b:03:c0:d9:60:4f:02:c3:3a:ba:94:13:
c5:68:64:c5:37:fa:ee:70:62:0a:7b:f8:41:a2:f7:d0:c8:1a:
7e:aa:03:9f:2d:4f:7d:a1:ca:df:96:ee:ec:d9:65:ad:b5:27:
1a:32:9d:42:3a:f3:45:23:e9:dd:b5:c6:12:46:d7:94:11:3a:
e7:2a:80:08:0e:b7:04:09:0d:69:98:e6:25:f1:2a:72:78:f5:
b2:22:9a:0f:25:5d:41:d7:c6:4c:e8:46:a1:d6:cc:56:34:dc:
b3:cb:cb:a2:08:d0:8f:17:07:73:75:30:81:54:c9:5e:e0:5d:
e5:28:4f:4f:ea:e2:bb:07:8d:ee:84:78:85:53:cf:b1:b2:92:
30:bf:e2:28:d3:8c:8e:e6:5a:47:7d:e7:f2:45:78:47:cf:be:
05:a0:49:0e:59:fb:f3:96:07:d4:02:c9:0d:f6:e3:54:01:e0:
fc:53:8b:07:6d:7a:21:aa:83:39:4b:c9:1c:32:31:c9:35:87:
4e:10:47:a8:49:11:ce:41:ef:ed:e0:f8:89:06:a7:a0:0d:1f:
a6:97:33:90:28:f7:da:5f:e9:ec:dd:21:9a:7a:89:03:d7:46:
ee:e6:a2:d2:94:7c:f0:e8:06:a8:1d:c1:e0:c3:9f:0d:10:cd:
fc:3a:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:32:58 2026 by rpki-client