Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/HV2EMgnuAtaqMPLEmHXYarCVNpI.roa
File: HV2EMgnuAtaqMPLEmHXYarCVNpI.roa (raw, json)
Hash identifier: kJvWjQO6p4obvK17uUJOQOaQMh6VU7iH+I1+ZH63XpI=
Subject key identifier: 1D:5D:84:32:09:EE:02:D6:AA:30:F2:C4:98:75:D8:6A:B0:95:36:92
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019EE1C4BFA71EE47A8AF786ACCEC201FA62
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/HV2EMgnuAtaqMPLEmHXYarCVNpI.roa
Signing time: Fri 19 Jun 2026 21:23:48 +0000
ROA not before: Fri 19 Jun 2026 21:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60542
IP address blocks: 45.139.9.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:c4:bf:a7:1e:e4:7a:8a:f7:86:ac:ce:c2:01:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 19 21:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d5d843209ee02d6aa30f2c49875d86ab0953692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:9b:bc:1f:0c:26:dc:42:d0:cc:a9:4b:d0:
c4:8a:34:6e:b8:f5:7a:cb:fe:5d:71:ff:3d:8b:1e:
9d:94:ea:d4:18:05:56:94:8c:53:98:5a:7f:59:7f:
e6:87:4b:f5:40:02:74:fb:39:e6:2e:6e:0d:17:fe:
b1:0d:15:5a:b2:97:06:a5:50:7d:58:8d:cd:ee:b1:
01:18:1b:67:9e:88:a7:a4:8a:af:c9:ee:63:72:30:
f8:65:02:3f:b8:2b:74:3a:08:05:db:8b:e1:24:53:
ba:e8:a0:9d:56:dc:10:7a:d2:28:44:d6:f1:2f:f0:
9d:10:1d:bb:01:6c:72:08:ba:17:d5:2d:79:7b:4a:
81:cd:c8:35:b8:5e:11:30:7b:1f:93:55:77:75:cb:
d5:86:bb:80:15:2a:3b:cb:0b:1f:81:1f:c2:58:92:
dd:c6:7e:1d:5b:5a:55:ae:5b:82:54:88:d1:da:17:
af:d0:7d:4c:38:75:2f:6a:e6:73:ce:44:92:6b:01:
48:d1:26:bd:3d:0f:6d:04:26:00:5c:fc:9a:87:a2:
c9:d8:1e:35:3a:1c:08:42:ea:16:d5:e7:d4:e9:16:
53:e2:c9:43:7f:d9:32:95:12:5c:ce:85:23:18:1c:
e4:6b:4a:92:70:ea:59:22:31:e8:4d:c9:8c:96:ce:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5D:84:32:09:EE:02:D6:AA:30:F2:C4:98:75:D8:6A:B0:95:36:92
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/HV2EMgnuAtaqMPLEmHXYarCVNpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
185.105.238.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ae:9e:30:4d:f3:a6:b3:a0:50:7c:c5:7f:16:c7:ff:06:1d:
17:8e:88:6a:22:2f:d8:81:2a:f1:de:68:11:9b:45:6c:be:1a:
24:ec:fe:63:63:d9:a3:f7:3d:9d:d9:b8:c8:45:c3:21:85:87:
45:78:d5:e8:d6:7c:bb:a3:1f:44:57:25:d4:af:0f:59:a2:6f:
08:4d:5b:be:fa:e7:76:55:dc:90:df:04:e0:25:12:fb:45:ee:
21:db:3c:99:26:99:c2:ad:33:82:7a:3d:3d:c1:d4:14:2c:96:
a7:2b:e1:81:d2:8b:b7:a2:31:76:ce:7f:36:34:87:8f:a4:14:
b5:b8:9f:37:2a:44:cc:b5:1d:06:39:54:d3:dc:bb:79:6a:f5:
49:bb:ad:05:fb:b9:f6:b7:fc:cf:f0:a4:ba:9b:9a:40:7f:94:
7d:98:b0:de:b1:70:84:9c:87:0a:1a:1e:04:af:24:d9:43:25:
0c:2f:45:36:8c:ca:9b:b7:4a:7e:2f:96:79:af:1f:56:25:e0:
f4:d5:ab:de:ec:95:30:1e:93:d7:c5:48:0e:1e:a1:73:2a:4e:
1c:fd:82:c1:33:35:32:28:23:50:97:f8:a2:07:27:7c:a6:15:
70:5d:96:2a:95:09:6a:99:f7:99:06:de:fd:1d:9b:a7:d3:dd:
d2:db:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:08 2026 by rpki-client