Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/bH_Hhgkzgr3cr8aJVvKyD9nwlqE.roa
File: bH_Hhgkzgr3cr8aJVvKyD9nwlqE.roa (raw, json)
Hash identifier: WbKOuY7HoOV9d7cK2xEfZvnUcpUxcroHE/9nktqVRBA=
Subject key identifier: 6C:7F:C7:86:09:33:82:BD:DC:AF:C6:89:56:F2:B2:0F:D9:F0:96:A1
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F62A1E1A52F05379D53D09425F90FA3AB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/bH_Hhgkzgr3cr8aJVvKyD9nwlqE.roa
Signing time: Tue 14 Jul 2026 21:56:43 +0000
ROA not before: Tue 14 Jul 2026 21:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52037
IP address blocks: 91.205.228.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:a1:e1:a5:2f:05:37:9d:53:d0:94:25:f9:0f:a3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 14 21:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c7fc786093382bddcafc68956f2b20fd9f096a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c2:e6:33:eb:f7:77:d3:5e:d1:60:c6:b3:d5:
60:09:c8:4b:ee:a1:ac:f1:e8:6f:41:1f:d5:fd:ff:
50:32:9d:08:5a:af:51:5e:3d:84:9a:f1:e6:46:7e:
8c:d9:e2:54:99:ef:cf:a1:4b:6e:f0:7f:28:ed:82:
4f:e4:91:b0:1f:c8:3f:df:d0:e7:d5:fd:b1:b8:3f:
7e:3d:cb:c4:89:17:26:16:96:ff:27:89:d9:f3:8a:
bf:b1:5a:93:f6:87:21:d6:4e:74:99:f0:12:b1:53:
fd:6a:d6:89:a9:34:31:07:48:ae:94:b1:1c:3f:c7:
61:5c:8b:59:fe:16:ee:50:63:fb:e9:dc:7f:e0:f4:
91:67:03:c5:54:1c:76:76:3f:27:56:be:51:e8:3b:
0e:7f:6f:02:1a:ef:97:f2:33:15:21:07:6a:09:52:
0e:80:d8:99:1b:75:0f:a0:96:de:ee:70:6c:8a:0b:
af:8e:c7:48:c0:fd:ee:2e:12:bc:f9:d7:74:80:f0:
17:99:bd:f8:2a:20:ef:53:14:82:60:43:a7:be:99:
71:b3:2d:a2:95:80:a8:88:bf:ad:75:f2:6f:2a:43:
9c:d4:f7:b2:87:4e:ce:88:ab:fe:91:29:10:04:68:
f6:de:30:89:75:06:fc:52:2d:3e:0c:97:66:65:c8:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7F:C7:86:09:33:82:BD:DC:AF:C6:89:56:F2:B2:0F:D9:F0:96:A1
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/bH_Hhgkzgr3cr8aJVvKyD9nwlqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.228.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5d:dc:da:b7:54:97:c3:27:97:fe:f7:8f:3e:dd:25:fd:57:
f6:b6:89:55:1e:19:e8:5a:73:0d:de:7f:bc:0c:4e:dc:64:2a:
6d:f8:f8:cc:9c:8d:b1:dc:fd:eb:ad:c8:88:85:bf:b8:12:42:
0a:92:a1:e9:ec:85:96:42:4d:38:c8:4c:58:9c:35:d2:fc:ab:
69:b0:4d:82:5d:28:c5:bc:9a:cb:fe:56:5b:3b:e2:bd:13:f5:
42:f3:f2:7c:9a:3c:27:ee:05:18:bc:d6:f5:b6:fb:fa:8c:c3:
4b:cb:f9:e5:33:e0:99:86:28:d2:3f:2c:ea:e2:7e:93:62:62:
cd:62:c8:95:b3:3d:05:54:59:ed:3f:0b:ab:ba:a5:77:5c:93:
70:33:d9:b7:09:00:ca:70:1e:b2:8a:ec:c1:ec:7b:09:fa:1b:
59:47:ee:df:eb:00:c4:97:d9:f5:33:d5:56:de:83:55:39:55:
f4:5e:6e:95:de:d0:e8:1e:7b:d3:0c:5b:15:8c:fa:17:d7:36:
0c:d2:5a:57:cc:f1:8f:75:36:f0:07:81:fc:59:f7:97:42:d2:
2c:c0:44:dd:10:00:a5:b6:f6:d6:2b:96:5d:0e:fa:6d:b0:82:
34:d5:46:80:1b:ea:8d:18:ed:94:9a:51:6b:d0:ef:5b:93:91:
70:18:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:25 2026 by rpki-client