Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/H1hAgBWXuEqOG7AIC78_WRtcIDk.roa
File: H1hAgBWXuEqOG7AIC78_WRtcIDk.roa (raw, json)
Hash identifier: 3hkU/e8z2KjznGBY0eB3U2px9IDIQw4LZfm2Hjiu/Mg=
Subject key identifier: 1F:58:40:80:15:97:B8:4A:8E:1B:B0:08:0B:BF:3F:59:1B:5C:20:39
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE15E53AF33C2D6B5D096ECE82AEC
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/H1hAgBWXuEqOG7AIC78_WRtcIDk.roa
Signing time: Tue 15 Sep 2026 21:49:28 +0000
ROA not before: Tue 15 Sep 2026 21:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13768
IP address blocks: 198.34.179.0/24 maxlen: 24
198.34.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e1:5e:53:af:33:c2:d6:b5:d0:96:ec:e8:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f5840801597b84a8e1bb0080bbf3f591b5c2039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:fd:bd:41:e3:72:34:c2:25:b7:a8:de:35:
d1:2e:57:68:f9:a5:f1:c4:b2:b9:7e:eb:26:86:bf:
5c:45:7a:9e:79:20:d5:ed:50:89:2f:13:f6:07:85:
09:d2:0c:01:6d:82:1f:49:57:ed:55:7d:76:53:66:
0d:b1:2f:1c:cb:b1:0e:e4:24:4b:87:c9:ea:2c:1f:
e5:bb:6e:83:4c:93:12:4a:a2:ca:0b:d6:12:d7:8f:
02:f2:d2:36:37:2e:60:03:38:0f:ec:7a:38:e4:a8:
2a:eb:da:cb:db:5b:58:2d:07:5a:50:fe:f8:80:fe:
87:89:43:a4:48:27:92:5b:46:54:14:fe:80:ba:e1:
d8:9a:7e:f4:dd:63:25:6a:b6:59:c0:f2:be:e6:11:
ce:e8:24:04:49:80:49:c7:b7:28:71:ab:46:c7:01:
24:d8:85:05:ba:8c:87:79:d7:4d:39:63:87:dc:c9:
9e:e4:b3:b0:04:f1:0b:04:17:48:fb:8b:ce:78:1b:
6e:92:15:ed:1f:46:e1:cf:b2:36:87:10:78:ee:e6:
7e:32:e9:a1:23:4d:28:25:78:49:0c:31:72:ce:82:
d2:7d:8b:42:91:bd:97:9b:1e:0c:ef:f6:23:ad:3a:
e7:2c:dc:bf:56:8c:6c:bb:1d:2a:bb:d9:dd:af:60:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:40:80:15:97:B8:4A:8E:1B:B0:08:0B:BF:3F:59:1B:5C:20:39
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/H1hAgBWXuEqOG7AIC78_WRtcIDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.34.179.0-198.34.180.255
Signature Algorithm: sha256WithRSAEncryption
b7:f3:d6:87:26:98:57:a9:94:b1:26:fd:11:20:e8:b0:9b:40:
44:11:f1:5f:50:35:2c:bf:c5:91:0d:0e:8e:82:47:88:e5:3c:
3f:0a:f2:b9:19:78:8e:69:90:d4:a8:ea:55:9a:1a:b4:4d:1e:
37:2b:63:d7:d5:b0:bf:0b:a2:ab:4e:1c:90:4a:03:9a:16:c9:
05:bb:00:fa:f4:79:c4:80:0c:d3:6d:ac:89:09:69:1d:46:f9:
4a:b7:b1:cf:05:5f:5f:9d:80:35:11:59:da:99:56:39:b3:d7:
e5:a5:51:d8:f6:85:6c:a3:0b:b5:e3:cd:10:f3:a2:df:ca:ae:
ff:2d:84:b9:73:df:1d:41:02:af:a1:cf:30:48:ae:72:a1:20:
f5:70:bf:e4:7d:93:3b:f8:d5:67:ab:58:e3:34:ef:ad:ac:aa:
d1:a6:70:08:8b:60:cc:7d:ff:0a:6f:a5:3e:bc:6d:01:f0:a8:
a6:7d:3b:d9:36:76:8a:00:5c:4e:79:f2:43:ab:0d:c3:1e:61:
59:ed:93:2d:f0:62:e6:17:96:0f:83:b7:25:63:9a:34:43:69:
6a:b5:ae:83:f5:b8:69:68:41:37:6b:1d:fb:fe:95:73:dc:7b:
c7:8d:df:a3:bb:5e:5c:3d:30:d5:0f:67:11:a5:a0:e6:d7:33:
c4:e4:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:56 2026 by rpki-client