Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HTJC2qZTBYDhGgfALmgUlKoz0kM.roa
File: HTJC2qZTBYDhGgfALmgUlKoz0kM.roa (raw, json)
Hash identifier: Vg72KYq8FpDkXlgW/uLekPa+EBrW49AgOGqNznkZa4Y=
Subject key identifier: 1D:32:42:DA:A6:53:05:80:E1:1A:07:C0:2E:68:14:94:AA:33:D2:43
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01A12F4CB5A3D8CF584F9766ECA4D3FF637D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HTJC2qZTBYDhGgfALmgUlKoz0kM.roa
Signing time: Mon 12 Oct 2026 08:48:38 +0000
ROA not before: Mon 12 Oct 2026 08:48:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35273
IP address blocks: 193.43.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:4c:b5:a3:d8:cf:58:4f:97:66:ec:a4:d3:ff:63:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Oct 12 08:48:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3242daa6530580e11a07c02e681494aa33d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:54:e1:ac:89:6f:ee:a8:cc:fa:71:cb:5f:
d3:b5:08:46:c3:68:48:57:0a:8d:08:00:d8:c5:cc:
55:3c:31:ea:57:a0:fc:0d:99:42:3b:67:ed:86:74:
ce:15:07:cb:de:5d:9e:e8:b4:4d:50:3f:88:15:36:
31:90:70:e1:44:54:56:08:5a:d7:9f:fb:e3:44:c1:
0e:24:7a:a7:4c:8b:f8:43:b9:d5:f3:fe:d1:d3:7d:
91:10:0d:b5:a4:b9:db:10:76:8a:13:f6:ac:7e:50:
a5:7c:98:85:b5:55:84:f4:92:7b:38:9f:0b:ad:01:
3d:0a:56:fd:5d:fe:61:42:24:aa:af:07:84:22:94:
aa:fb:fe:69:ba:3b:16:fa:dc:0a:bc:2e:cf:59:02:
37:55:43:ee:e0:71:ad:6f:43:06:b7:80:36:b2:f9:
d0:15:87:70:cc:57:eb:22:2e:6f:76:ae:63:f9:8f:
40:13:e4:fd:42:1c:b8:f4:cf:11:28:d7:1d:a8:82:
7c:7e:cd:b4:e3:73:6e:3d:a1:6c:61:98:eb:e9:6e:
e3:da:25:72:b0:d4:a6:81:c0:63:f0:c5:43:3e:39:
37:8a:8a:05:8d:f2:a3:df:f0:ea:d9:53:e2:7c:42:
b6:b4:ba:5a:76:17:e8:9a:66:3a:54:61:e0:af:34:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:42:DA:A6:53:05:80:E1:1A:07:C0:2E:68:14:94:AA:33:D2:43
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HTJC2qZTBYDhGgfALmgUlKoz0kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.252.0/22
Signature Algorithm: sha256WithRSAEncryption
41:31:d0:49:18:a2:be:ad:fb:d7:b5:aa:33:5c:04:41:48:22:
63:73:0e:30:fc:d1:70:77:8f:61:24:dd:44:04:78:67:70:07:
84:56:b9:5a:8c:16:be:05:63:f8:44:af:63:29:5e:4b:36:af:
87:97:9d:a6:4f:40:43:5f:4a:1d:1b:80:4b:8a:5c:2f:5a:40:
6d:d5:1c:34:f0:63:7f:44:2b:9f:57:2c:80:78:60:d8:8f:0f:
37:fb:3b:17:dd:6d:01:be:8e:bd:ab:5b:c6:a2:8b:b4:aa:88:
cf:5d:37:27:38:2b:4a:16:8a:91:1d:87:14:9c:8b:7f:25:d7:
41:e2:50:52:36:f4:69:4a:ad:96:86:90:00:e7:38:80:3e:09:
dc:3a:bc:dd:76:9c:b2:c6:e7:a3:0d:7e:2a:a2:9e:95:92:ec:
49:f7:a0:67:2a:b8:c3:e9:eb:a0:2c:e6:e3:0d:80:6d:74:76:
66:00:13:be:9d:f0:51:75:69:05:1e:56:0b:0e:af:95:86:73:
39:eb:60:37:87:33:08:47:8e:da:9f:91:e2:c2:4b:a6:64:c6:
70:58:5f:2b:09:89:4f:0c:d5:3e:9c:62:26:45:76:15:0f:7a:
68:e1:f4:61:a3:b2:ec:7e:30:f2:9c:d5:3b:ad:85:3f:e4:8d:
8b:c8:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 13:16:14 2026 by rpki-client