Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/HXuTzX9VfifSgh_by8R4gzXpV0A.roa
File: HXuTzX9VfifSgh_by8R4gzXpV0A.roa (raw, json)
Hash identifier: VupAOJRlaCiEgZ7wECzmuZMBjr0LXoaZxVyyqAIjAFU=
Subject key identifier: 1D:7B:93:CD:7F:55:7E:27:D2:82:1F:DB:CB:C4:78:83:35:E9:57:40
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019D01A30309E5DB5A199BD7573CC2BCEE0B
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/HXuTzX9VfifSgh_by8R4gzXpV0A.roa
Signing time: Wed 18 Mar 2026 15:49:13 +0000
ROA not before: Wed 18 Mar 2026 15:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 72.56.46.0/24 maxlen: 24
72.56.47.0/24 maxlen: 24
72.56.48.0/24 maxlen: 24
72.56.49.0/24 maxlen: 24
72.56.50.0/24 maxlen: 24
72.56.51.0/24 maxlen: 24
72.56.56.0/24 maxlen: 24
72.56.57.0/24 maxlen: 24
72.56.59.0/24 maxlen: 24
72.56.60.0/24 maxlen: 24
72.56.61.0/24 maxlen: 24
72.56.216.0/24 maxlen: 24
72.56.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:a3:03:09:e5:db:5a:19:9b:d7:57:3c:c2:bc:ee:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Mar 18 15:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d7b93cd7f557e27d2821fdbcbc4788335e95740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:54:cb:d5:bd:63:78:c0:87:6a:69:fa:c8:
4d:bf:85:76:33:b4:5e:eb:21:eb:88:af:b9:de:cb:
c7:b6:7b:0c:4e:ed:1d:3b:ab:a2:c8:fb:1c:aa:0b:
e6:e4:1a:1f:cf:0f:11:2b:e2:9a:2b:ec:71:14:9c:
dc:e1:31:af:4d:43:cc:59:7b:aa:82:9b:07:11:b0:
3e:6d:6f:03:87:13:e8:26:ab:84:a1:39:a7:ef:b1:
63:1a:c2:a1:85:b5:b2:08:31:07:23:84:53:35:71:
1c:f1:3a:3f:e4:1b:09:16:9e:ca:21:4d:69:c0:a1:
42:c9:69:40:51:88:d3:da:6b:ef:e2:66:fc:9e:bc:
c1:4a:32:ce:c1:00:66:45:a8:c9:c8:72:9a:10:56:
1e:be:40:78:86:1e:86:19:b8:ce:96:d0:a5:f6:ce:
43:be:bf:62:18:a9:f8:c1:69:f8:0d:e3:30:83:b5:
ca:9b:a4:1e:eb:91:c3:37:66:90:0e:28:52:59:24:
3b:79:20:86:4f:dd:f0:ec:07:48:4e:ab:b5:cb:45:
be:92:7e:4f:16:50:95:7b:67:25:78:4f:a9:94:ba:
d5:75:b3:a4:ce:07:f0:0d:57:3c:3e:1a:cc:b5:fb:
20:fd:89:4e:f0:ed:2d:d8:25:41:d4:12:24:29:78:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:93:CD:7F:55:7E:27:D2:82:1F:DB:CB:C4:78:83:35:E9:57:40
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/HXuTzX9VfifSgh_by8R4gzXpV0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.46.0-72.56.51.255
72.56.56.0/23
72.56.59.0-72.56.61.255
72.56.216.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:68:e6:0e:b1:9d:0d:76:59:d9:03:19:d6:5d:0e:db:a6:db:
c0:04:05:83:08:0b:57:f5:d0:f3:ef:b6:22:de:d0:fa:cc:75:
6b:23:1c:cc:2d:64:08:86:d8:32:00:5a:a6:c7:18:d1:81:d4:
c2:41:f9:b9:6a:11:9c:ea:fd:b7:23:42:2e:83:cd:07:d4:94:
e7:f1:0e:31:5d:28:47:46:13:41:a0:52:de:07:d7:85:cb:f2:
56:69:7d:94:7d:4d:8f:78:65:6d:d6:87:39:65:3d:34:93:41:
d5:1d:70:7a:f2:93:b6:b0:d9:54:45:12:13:7e:46:9c:46:fb:
50:68:83:7e:b7:50:83:4e:06:c8:2e:62:3d:32:77:42:6d:91:
25:0d:7b:47:1c:e3:da:9d:94:c4:85:e1:6b:0a:04:9d:ec:a6:
d4:f4:e9:bd:d7:c5:1b:57:9f:44:82:27:1b:aa:a8:96:cf:60:
dc:57:27:d8:a5:a8:f7:d1:9b:ca:5a:ec:2f:b7:e0:72:fa:a7:
ac:a2:46:8d:f4:46:a4:0e:a2:5f:e0:e3:6e:1d:e4:22:7a:e2:
1b:55:67:08:a4:63:7f:a4:1e:b4:27:a8:f6:a1:08:1f:37:86:
53:d1:d5:2a:52:0b:a0:04:fc:be:a4:37:a5:aa:8e:cd:b7:4e:
e0:e3:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:51 2026 by rpki-client