Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/HSZJOMMgqldMqXCQrjEqHsBDzGw.roa
File: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (raw, json)
Hash identifier: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=
Subject key identifier: 1D:26:49:38:C3:20:AA:57:4C:A9:70:90:AE:31:2A:1E:C0:43:CC:6C
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019E1B6186927D6EF8087B9D503B667225BA
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/HSZJOMMgqldMqXCQrjEqHsBDzGw.roa
Signing time: Tue 12 May 2026 08:50:36 +0000
ROA not before: Tue 12 May 2026 08:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 185.136.135.0/24 maxlen: 24
2a05:9080:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:61:86:92:7d:6e:f8:08:7b:9d:50:3b:66:72:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 12 08:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d264938c320aa574ca97090ae312a1ec043cc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:58:f3:04:4f:38:7e:2a:5e:55:04:1a:5a:
75:bd:a9:3c:97:0d:93:2a:db:da:15:36:2a:96:cf:
fe:bd:87:38:ac:df:48:eb:f4:88:04:c2:67:b5:0e:
af:64:80:11:ed:f2:b5:c0:42:35:37:c1:fc:9e:71:
6e:d6:de:69:9c:ed:d5:5e:e3:a4:82:68:42:34:94:
8c:ed:13:9a:65:fd:f4:89:eb:f7:79:81:0f:4e:8b:
c9:15:35:2d:73:c1:39:52:ad:4e:a2:93:39:90:82:
c0:21:37:17:73:12:fd:b0:d3:f9:e5:b0:bc:d0:af:
94:b9:90:b7:3a:e4:e6:cc:fc:8a:51:f6:22:da:e0:
49:b8:50:ea:ee:82:cf:f5:dd:f2:2f:2a:ad:e3:3a:
ac:0e:9f:a0:52:9e:25:cc:77:9c:b0:3a:0a:1a:df:
2c:12:51:ec:60:d8:c1:37:39:23:f8:d0:d3:a2:5f:
bc:00:3f:17:f2:b5:45:d6:ad:e0:7e:ce:54:b7:58:
7e:5e:46:59:e7:19:ed:c9:a9:99:b8:5a:fa:e1:eb:
b4:71:58:81:ec:56:90:77:5d:10:0f:00:1d:d3:3c:
bd:f8:2b:d3:f1:a1:e6:03:81:a5:4e:de:91:13:ee:
56:4f:a1:5a:6b:26:c9:2b:91:1d:1a:f9:59:04:5a:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:49:38:C3:20:AA:57:4C:A9:70:90:AE:31:2A:1E:C0:43:CC:6C
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/HSZJOMMgqldMqXCQrjEqHsBDzGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
IPv6:
2a05:9080:12::/48
Signature Algorithm: sha256WithRSAEncryption
62:79:09:d3:e8:1c:21:25:7b:96:26:16:c2:bd:42:e6:33:0a:
94:04:b1:6d:ed:a8:9f:c6:3d:51:d6:68:48:17:46:c1:4b:c4:
91:06:c9:07:c7:0d:2f:51:33:24:e9:f4:52:6f:46:ab:5b:f4:
b5:1d:a5:44:dd:1e:b5:bd:4f:3d:fa:e4:de:9b:83:7e:23:80:
61:81:af:59:8a:77:31:0b:f8:2f:96:56:39:30:f1:73:0d:2a:
3f:45:00:5b:bc:c4:d0:2a:bd:50:f5:3b:2b:51:93:07:a4:0d:
c4:26:56:bd:92:b5:3f:e9:d1:a9:62:db:ca:4c:ed:d8:09:7b:
a4:e4:94:42:83:9e:77:e1:ce:70:ef:2e:31:95:c4:aa:f6:2b:
13:9d:a1:44:cc:2c:e3:7d:f7:77:85:8a:ac:6d:b0:17:a5:9b:
86:c8:03:20:9c:91:4d:60:a7:51:fc:30:0a:42:51:08:38:bf:
37:38:a7:e5:65:23:42:80:5e:b0:55:3a:5e:ce:38:0b:eb:95:
89:dc:20:e3:db:98:36:c4:fe:3c:52:b6:24:35:74:d9:25:39:
9c:8a:8d:7d:97:c0:21:21:f8:f3:ed:ba:f0:9f:3f:8c:c9:03:
7c:80:35:6c:f5:eb:cd:6d:a1:6e:43:d1:78:12:71:1a:67:ea:
81:4f:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:23:47 2026 by rpki-client