Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/HgjghS0TcS3sXKEDkSBK8StqoPg.roa
File: HgjghS0TcS3sXKEDkSBK8StqoPg.roa (raw, json)
Hash identifier: 9Et6fejSW975AgeOObLCQ5alU9YtwwctRwBtQTF5i5g=
Subject key identifier: 1E:08:E0:85:2D:13:71:2D:EC:5C:A1:03:91:20:4A:F1:2B:6A:A0:F8
Certificate issuer: /CN=425a758a61252ba060329022fcdd7f5358620f93
Certificate serial: 019EB0596EF140A4A82FDE58960094A45E89
Authority key identifier: 42:5A:75:8A:61:25:2B:A0:60:32:90:22:FC:DD:7F:53:58:62:0F:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/HgjghS0TcS3sXKEDkSBK8StqoPg.roa
Signing time: Wed 10 Jun 2026 07:05:11 +0000
ROA not before: Wed 10 Jun 2026 07:05:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31736
IP address blocks: 185.230.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:59:6e:f1:40:a4:a8:2f:de:58:96:00:94:a4:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425a758a61252ba060329022fcdd7f5358620f93
Validity
Not Before: Jun 10 07:05:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e08e0852d13712dec5ca10391204af12b6aa0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b9:15:f5:31:bd:24:0f:5c:37:88:76:74:fe:
d4:90:28:14:87:13:de:9f:44:e9:42:87:a9:82:e7:
ee:a3:a0:1b:3d:1c:c5:cb:87:35:ef:39:0f:5e:19:
43:6a:5d:99:ac:64:a4:cf:cb:5b:e7:81:a3:92:ed:
ad:9d:dd:0e:3f:df:a2:c1:00:34:47:41:c2:65:0c:
08:7f:29:37:21:58:2e:27:45:a2:d8:aa:ba:c2:81:
41:b3:b8:ac:5d:0b:c7:3b:95:bf:94:a8:25:cc:0e:
2d:88:64:a1:f6:b1:e3:0f:46:da:b6:5f:41:e9:10:
9b:d7:d7:1e:6f:b3:e3:21:8b:f8:02:9c:9d:47:de:
ae:43:79:d3:20:e4:1f:a9:e8:5e:8b:ab:84:ef:15:
1f:4a:13:a1:5b:8b:90:f9:cf:2c:36:e0:05:78:4a:
26:d6:22:fb:8f:5e:57:e3:4c:c0:36:52:ef:72:a9:
2c:e9:26:61:36:b7:4e:a1:56:32:a3:70:d2:22:49:
59:39:77:9c:8d:6e:f3:1a:b7:6a:83:fe:c2:4d:0a:
06:43:4c:e8:07:7a:31:d3:8c:91:0d:91:46:d1:94:
e0:65:00:06:5a:15:88:30:55:59:ca:2a:c3:00:f6:
56:bd:66:ca:e0:55:15:72:6b:64:35:8c:7e:ac:2c:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:08:E0:85:2D:13:71:2D:EC:5C:A1:03:91:20:4A:F1:2B:6A:A0:F8
X509v3 Authority Key Identifier:
keyid:42:5A:75:8A:61:25:2B:A0:60:32:90:22:FC:DD:7F:53:58:62:0F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/HgjghS0TcS3sXKEDkSBK8StqoPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.116.0/22
Signature Algorithm: sha256WithRSAEncryption
60:17:1b:91:0d:0a:8c:32:6d:1a:a4:20:8a:b4:11:b6:5f:87:
f8:e9:a2:95:6d:71:81:54:e6:26:4c:52:9c:67:27:07:9b:55:
5e:87:b3:ec:8b:41:dd:22:43:f9:dd:3f:6e:7c:46:fb:13:bc:
56:59:00:ae:ba:e3:de:7c:a2:b9:75:41:aa:1e:b4:8c:63:8a:
16:f7:ee:b3:9a:c1:9a:1f:2a:28:f7:ac:d1:38:f1:8a:98:23:
2a:72:74:13:ff:df:ea:d3:ea:ff:53:ec:50:b7:80:ed:bc:1c:
c8:83:d7:02:2b:de:49:0a:1f:6a:b1:22:18:4f:ed:56:5f:c9:
9f:1e:ea:9a:e0:89:c7:07:9b:16:16:15:ab:3a:ce:b2:21:5a:
15:66:0e:ef:05:65:f6:c7:23:f5:9c:d9:1c:4f:41:9e:73:0d:
87:56:e2:ba:bd:4d:0c:8d:ed:80:60:e8:13:73:e7:a2:aa:b7:
bf:da:d9:15:50:0d:21:36:be:27:05:71:d9:49:7e:a9:9f:68:
34:df:e0:ec:9f:33:4c:5c:e9:fe:f2:c0:05:21:83:a8:65:da:
cd:3e:60:fe:85:9d:5d:94:f7:7a:50:9d:b4:b8:79:f1:a4:6b:
a3:64:89:63:ec:22:30:4c:f0:ab:06:7c:13:07:89:4d:21:fe:
69:d9:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:13 2026 by rpki-client