Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/hOGDR0EybYX5uiEIH4dx1wBVH0I.roa
File: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (raw, json)
Hash identifier: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=
Subject key identifier: 84:E1:83:47:41:32:6D:85:F9:BA:21:08:1F:87:71:D7:00:55:1F:42
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019F476C8B0B7C64EB815B9DD1A0C50145B0
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/hOGDR0EybYX5uiEIH4dx1wBVH0I.roa
Signing time: Thu 09 Jul 2026 15:08:43 +0000
ROA not before: Thu 09 Jul 2026 15:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402148
IP address blocks: 152.175.28.0/22 maxlen: 24
152.175.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:6c:8b:0b:7c:64:eb:81:5b:9d:d1:a0:c5:01:45:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jul 9 15:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84e1834741326d85f9ba21081f8771d700551f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:57:a6:d8:e1:2c:58:22:95:71:23:e7:42:
ed:61:5d:b4:a1:6d:11:e6:b2:49:da:93:5f:66:8b:
f2:7d:f8:b3:22:b2:c4:f0:26:20:f6:4f:b0:de:5e:
a1:f7:e3:dd:de:93:a6:c6:4d:cd:5d:87:7d:aa:98:
b3:97:1e:7c:37:92:6a:fd:9f:90:d7:89:e3:1c:3b:
69:da:43:2e:99:1c:c2:16:8c:23:35:c6:f3:56:73:
7b:20:ea:0a:f1:98:25:e9:e0:f3:d7:a2:d5:55:3f:
90:45:7f:36:dd:f4:b1:a4:23:d1:53:3f:2b:82:7e:
ea:9a:6f:ba:32:86:04:d3:34:06:95:c4:cd:98:e1:
11:0c:29:c1:a8:c2:a5:20:e5:02:c2:cb:70:57:f5:
45:60:b0:ba:79:49:9f:3a:a8:1a:af:59:a0:2f:95:
8c:0a:ec:f0:18:2b:60:b0:9a:37:2c:30:fe:0c:65:
3f:e0:ee:5e:61:b5:46:19:92:db:b0:58:2a:0c:d1:
45:d9:22:1a:1f:09:4d:27:ee:73:e6:6b:c9:d5:f0:
8b:01:ee:5c:a1:c2:84:79:71:70:b7:77:f0:fa:07:
c4:0e:29:0f:e3:c3:25:49:90:06:dd:ab:b0:f2:54:
f0:a7:00:09:a4:84:e9:2e:c8:e6:13:a2:f5:60:cb:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:83:47:41:32:6D:85:F9:BA:21:08:1F:87:71:D7:00:55:1F:42
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/hOGDR0EybYX5uiEIH4dx1wBVH0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.28.0/22
152.175.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:93:ba:8e:48:75:5f:2a:b6:47:16:d9:4a:3e:6a:d4:2b:c8:
f8:61:11:dd:9c:be:09:0b:c7:eb:97:ba:01:e1:46:ee:00:23:
3a:54:a4:69:64:4a:44:4c:a4:1e:69:1a:fb:49:57:97:58:26:
6f:3a:dc:77:10:6b:4d:ad:21:fe:82:3b:92:7e:0c:86:81:43:
aa:75:92:b4:fa:0c:34:df:f3:90:29:0a:3b:2e:65:dc:fd:9a:
78:d2:48:53:dc:d5:78:9f:c2:ab:88:39:63:f3:51:f7:00:e1:
83:7c:76:90:ab:6c:b7:1f:b8:b2:e9:52:a7:16:d9:37:32:a0:
9d:db:04:ce:df:e7:df:2b:eb:2b:9a:e7:bb:91:64:d5:6b:6d:
18:5a:51:de:c0:9a:2d:9c:a0:f8:75:4d:ce:17:79:f8:07:f4:
ea:be:bb:3b:ae:ab:53:7b:9f:16:eb:2e:f2:ad:9f:e8:97:bb:
d2:d1:a1:af:3d:31:f7:93:33:27:a4:05:9a:be:a7:71:d8:c8:
be:3c:37:76:14:b6:26:5e:6e:47:3d:82:1b:52:41:63:a2:e6:
0e:a4:54:9f:60:74:73:ff:6c:3a:bb:10:74:62:24:05:9b:fe:
fd:1a:ac:f1:9b:a6:f6:45:b8:ee:80:50:45:e5:4d:e5:0d:bc:
16:2b:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:25 2026 by rpki-client