Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/HuEY34udS6NV-YDPpjea0aNFi0c.roa
File: HuEY34udS6NV-YDPpjea0aNFi0c.roa (raw, json)
Hash identifier: pVQxj2ViUYUGndkYhj9FGK9Ul0vumv6nIIv5saeIXvY=
Subject key identifier: 1E:E1:18:DF:8B:9D:4B:A3:55:F9:80:CF:A6:37:9A:D1:A3:45:8B:47
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019F36879815D5D76CA6F89D19E32B7924DC
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/HuEY34udS6NV-YDPpjea0aNFi0c.roa
Signing time: Mon 06 Jul 2026 08:24:43 +0000
ROA not before: Mon 06 Jul 2026 08:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 91.235.158.0/24 maxlen: 24
194.187.100.0/24 maxlen: 24
194.187.101.0/24 maxlen: 24
195.95.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:87:98:15:d5:d7:6c:a6:f8:9d:19:e3:2b:79:24:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jul 6 08:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ee118df8b9d4ba355f980cfa6379ad1a3458b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:d9:52:b6:e9:bb:f3:b7:e8:58:be:d0:6b:
15:d3:c4:c8:31:14:fc:f8:2c:44:f8:4f:6e:14:f5:
8d:b2:e2:43:4b:8f:f8:e8:f4:35:b5:ba:e6:40:74:
7a:46:be:9c:62:47:bc:23:5c:f2:0d:14:18:9b:9f:
60:36:0b:10:30:d0:aa:6c:04:4b:7d:61:89:92:7e:
a4:10:99:b2:a1:20:dc:7e:ff:a2:1c:8e:64:d0:76:
28:78:65:85:5d:dc:bf:83:9e:c6:a5:5d:16:c7:b7:
c5:e0:e7:7d:b8:b7:36:58:3c:c5:51:86:c1:e9:b5:
ac:68:e1:4f:ac:46:92:61:62:94:45:a6:2f:0e:a4:
89:0d:2c:b8:da:a5:81:c1:e5:2f:fd:6b:9f:7a:bb:
10:61:36:89:7c:c2:06:55:17:44:b1:94:d6:7d:73:
df:22:9f:b2:12:da:b3:82:af:89:d9:11:7e:01:90:
ed:81:e6:71:9f:ac:f0:c2:b1:20:6e:73:3d:1d:26:
49:68:f1:c6:0d:7d:e1:ae:83:b4:f7:d8:c6:70:cd:
67:5c:5b:69:98:99:ce:0e:f6:80:2c:ab:e1:c0:27:
5a:61:4a:c4:32:d4:61:1e:06:0d:2d:a7:31:3b:9a:
77:af:79:4c:50:39:96:c6:6d:94:a0:9b:b4:10:74:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:18:DF:8B:9D:4B:A3:55:F9:80:CF:A6:37:9A:D1:A3:45:8B:47
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/HuEY34udS6NV-YDPpjea0aNFi0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.158.0/24
194.187.100.0/23
195.95.216.0/24
Signature Algorithm: sha256WithRSAEncryption
60:20:39:41:38:0c:93:9b:67:f1:97:02:ab:a7:ed:42:31:94:
08:25:49:40:5a:63:46:05:49:4d:ff:ec:4d:92:49:db:5d:01:
6b:73:fc:84:fc:8c:80:98:f0:2d:4b:54:ca:55:9d:5b:c5:8a:
a2:f1:c1:0b:a4:70:a7:9d:5f:90:86:b9:f3:ab:81:7a:01:ab:
7c:c5:5f:e7:8f:db:2e:79:97:d0:6f:43:87:b0:09:02:03:2a:
7a:4c:42:49:e2:56:43:4b:29:4d:0a:03:f4:70:3c:e4:e3:82:
34:19:2c:14:95:d0:3f:f0:19:b3:6c:e8:bb:cb:8e:95:c5:0c:
c4:e4:d6:f0:c1:38:fc:e4:e9:c4:68:0a:52:32:70:af:45:b4:
e5:97:ee:8e:b1:6d:58:71:79:36:ba:84:25:ac:c3:11:46:76:
52:2c:45:be:30:69:ad:16:29:da:34:d6:87:18:ed:db:19:16:
0b:25:8e:7f:f2:fe:bb:d4:d4:0a:5e:72:2f:fc:4b:b4:2f:23:
a8:cb:9b:a1:35:41:ec:7b:c8:0d:61:80:29:d1:fd:2a:1e:fa:
db:80:24:9b:ed:74:cf:18:a7:df:9b:f1:06:ef:d5:d5:61:a4:
49:64:69:99:93:25:49:72:6d:92:02:29:fe:12:6e:e8:0c:4b:
33:bd:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:48 2026 by rpki-client