Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/HPxCuEKasdXBfBVo_ZITh5PCg7o.roa
File: HPxCuEKasdXBfBVo_ZITh5PCg7o.roa (raw, json)
Hash identifier: djEH5n8TQdrm4j7irYK914Guor3cPdtWBBnny1Wt7pQ=
Subject key identifier: 1C:FC:42:B8:42:9A:B1:D5:C1:7C:15:68:FD:92:13:87:93:C2:83:BA
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 01A101FB53A537A09147CAFE7F0A643B57C4
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/HPxCuEKasdXBfBVo_ZITh5PCg7o.roa
Signing time: Sat 03 Oct 2026 13:36:50 +0000
ROA not before: Sat 03 Oct 2026 13:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219089
IP address blocks: 92.53.225.0/24 maxlen: 24
92.53.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:fb:53:a5:37:a0:91:47:ca:fe:7f:0a:64:3b:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Oct 3 13:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cfc42b8429ab1d5c17c1568fd92138793c283ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:1e:e9:4c:98:90:12:9d:83:29:ef:6d:37:
e2:99:02:7c:03:50:c3:35:67:59:d8:28:07:dd:67:
70:ca:e0:9d:df:a4:49:90:c6:bd:e3:d5:49:e6:11:
5e:28:b3:26:e2:9c:f9:8b:fe:25:c7:18:48:89:95:
a7:b0:02:ac:49:22:5a:d6:f5:9c:f0:99:07:d5:d4:
8b:a6:ad:bc:4b:fb:f5:00:41:86:bb:a2:6f:79:74:
bf:51:8f:9c:f7:1c:43:b1:26:f0:ec:5a:cd:52:79:
ee:5f:d0:79:6b:56:d7:77:de:ef:8e:da:19:22:a2:
0a:59:3d:3f:23:56:71:de:0d:4a:a3:a2:8b:d6:af:
a9:a2:2d:22:e0:b3:81:00:6c:bb:76:a8:3f:50:39:
8c:88:95:12:eb:4c:c9:2b:6f:d8:d4:12:a8:a1:4c:
90:18:34:3f:49:50:17:08:ca:b2:46:34:e6:37:13:
61:ae:81:95:15:b7:1f:e5:29:f3:37:81:a2:ab:1f:
9b:0f:f2:e1:b6:c0:b5:0b:8f:e1:b0:60:7b:93:63:
7a:1f:9f:16:8f:c9:4d:42:4a:09:d8:9c:29:55:c3:
3d:37:6a:1f:e1:de:82:f2:13:a6:92:9b:5b:89:5d:
d5:c8:b4:3c:8c:78:6f:b9:8c:da:82:8b:bc:cc:66:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:42:B8:42:9A:B1:D5:C1:7C:15:68:FD:92:13:87:93:C2:83:BA
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/HPxCuEKasdXBfBVo_ZITh5PCg7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.225.0/24
92.53.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:84:6c:61:ca:96:df:1d:09:84:49:d2:8a:12:fe:f3:42:13:
1b:3e:83:4d:7a:f4:f3:a0:72:dd:77:ec:88:1c:05:d4:30:bd:
5d:83:63:c3:82:a9:c8:ec:a3:27:39:14:c3:2c:cc:ba:b0:ba:
e6:5f:ef:25:83:27:f9:a6:53:b4:19:20:dc:78:4f:9b:cc:08:
af:92:3b:fb:3e:77:52:3f:02:85:08:a1:a1:be:33:f9:ca:a7:
4d:78:92:e3:7c:12:1a:68:48:e9:05:c0:94:b2:ef:ca:fc:67:
98:6b:b2:10:9c:00:5f:6d:60:9f:25:b2:c2:77:7e:c9:e0:79:
9a:30:e8:ec:99:22:20:a4:68:01:0d:ee:a8:5f:e4:31:ea:9a:
c4:e0:32:fd:dd:8b:bb:64:fb:34:b0:6b:5c:44:a6:9b:fd:44:
33:ee:b7:56:13:30:5d:fb:e5:11:20:37:c9:28:eb:a2:ad:c0:
3a:33:85:36:a8:44:f1:9c:90:02:ec:de:ad:4f:03:16:14:78:
57:13:41:36:a9:60:16:ae:40:ca:f6:7e:68:9f:9e:71:77:5d:
86:3f:0d:be:87:ac:61:e7:8e:4b:97:6b:24:83:50:f6:7d:ab:
db:58:31:41:67:aa:02:dc:dc:44:33:ec:ab:25:66:0a:7c:82:
29:16:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:36 2026 by rpki-client