Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/hxtJjNM-jXAId3t9QxiU4RhKDn0.roa
File: hxtJjNM-jXAId3t9QxiU4RhKDn0.roa (raw, json)
Hash identifier: kCGRegaekycExv3Ea9rc9bDXuzaYL1+3mHe+GykP47o=
Subject key identifier: 87:1B:49:8C:D3:3E:8D:70:08:77:7B:7D:43:18:94:E1:18:4A:0E:7D
Certificate issuer: /CN=adce3ba30bd043406616e231f831c03bc70dfec3
Certificate serial: 019F2368AA0B731EADEC800E78449D3BC50F
Authority key identifier: AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/hxtJjNM-jXAId3t9QxiU4RhKDn0.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 193.242.97.0/24 maxlen: 24
2001:67c:18a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:aa:0b:73:1e:ad:ec:80:0e:78:44:9d:3b:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3ba30bd043406616e231f831c03bc70dfec3
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=871b498cd33e8d7008777b7d431894e1184a0e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:8f:20:8e:ea:7b:48:4c:a7:eb:28:31:e5:
80:6a:e9:6c:17:46:3a:13:98:d4:e5:e9:55:5a:86:
f6:89:a1:20:91:7a:69:31:00:ff:26:5d:2a:df:bf:
eb:07:2c:a3:49:ef:c9:61:90:30:95:a3:3d:d6:d6:
46:b2:6e:a0:5c:d8:8f:e2:f0:73:1b:a9:87:9e:25:
4a:36:fb:48:17:35:7a:8f:34:5c:03:d6:93:fe:01:
22:86:5d:09:d0:70:c2:46:5e:a8:5b:3e:81:33:43:
c6:5f:7b:dc:37:49:f9:28:00:3a:e3:5b:a4:4b:0a:
3a:0e:9a:30:cf:06:f7:d2:ba:5a:8b:38:4c:aa:ca:
8e:70:9f:af:21:95:1f:d7:e2:12:69:cc:b0:fd:10:
39:26:17:da:b6:ec:09:d6:ba:3e:35:30:1a:43:fb:
10:6a:f8:2c:53:1f:a0:28:54:28:d5:ca:c4:90:03:
c2:99:8c:35:15:72:7d:81:39:a1:44:1f:09:55:4f:
83:a1:cf:76:27:a5:ed:b8:7c:e5:06:d6:40:0d:dd:
8d:6e:1a:91:f0:87:03:f9:32:a7:cb:e2:2d:7a:5e:
c5:2e:4c:76:3a:60:76:77:15:4d:33:e8:60:98:27:
58:11:fb:7e:bb:3d:0b:25:d7:4a:47:ce:fc:bc:1a:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1B:49:8C:D3:3E:8D:70:08:77:7B:7D:43:18:94:E1:18:4A:0E:7D
X509v3 Authority Key Identifier:
keyid:AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/hxtJjNM-jXAId3t9QxiU4RhKDn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.97.0/24
IPv6:
2001:67c:18a0::/48
Signature Algorithm: sha256WithRSAEncryption
01:96:99:b8:23:6e:ad:67:ab:2f:7f:c5:9e:cd:14:64:47:60:
b0:12:fc:9e:85:7b:32:c5:db:aa:90:77:00:72:6f:9c:a9:11:
c0:66:c3:2c:0d:b2:64:61:37:98:87:ca:99:b8:25:cb:df:85:
4a:21:c4:e4:00:8f:c9:98:60:67:47:1b:8e:fc:73:fe:8f:bd:
8f:63:aa:5b:ab:4d:88:82:ff:72:ec:7f:af:f8:9f:07:f0:b0:
72:7a:2b:fb:db:c1:34:32:2a:4b:b4:d9:18:7e:86:24:88:f6:
d3:7a:27:fd:39:4d:54:a2:80:73:c6:59:68:b3:37:46:72:dd:
32:90:5d:e1:4a:e5:9f:83:90:17:a6:82:1f:4e:4d:27:39:49:
ed:9d:61:f3:35:8c:93:52:8d:9f:45:b4:87:9e:ef:30:54:ba:
2f:3c:17:94:51:c2:87:8f:60:f2:2a:4b:0b:82:be:6c:5d:13:
54:a2:3a:78:34:6e:a4:ee:78:ad:e4:e9:61:54:6c:31:77:9c:
1f:64:cf:e7:3d:21:11:0d:f5:77:ff:33:9e:73:f7:36:c0:a2:
ba:b5:21:ba:dc:8f:7b:46:1d:87:dc:70:ae:8b:7a:cb:af:bb:
4a:96:8d:62:63:f2:c8:54:1a:64:da:a9:fd:1e:f5:ac:8e:8f:
91:61:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:31 2026 by rpki-client