Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HEgD-us_3rEqrW96M6pRFkevdP8.roa
File: HEgD-us_3rEqrW96M6pRFkevdP8.roa (raw, json)
Hash identifier: rJxyBMs0TD+KztKsYk1N1R83gt55ANmL5UbARjDaKUU=
Subject key identifier: 1C:48:03:FA:EB:3F:DE:B1:2A:AD:6F:7A:33:AA:51:16:47:AF:74:FF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DFDA15A231CAFE10CC7098C78432EDC9E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HEgD-us_3rEqrW96M6pRFkevdP8.roa
Signing time: Wed 06 May 2026 14:11:43 +0000
ROA not before: Wed 06 May 2026 14:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 178.219.0.0/24 maxlen: 24
178.219.1.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:a1:5a:23:1c:af:e1:0c:c7:09:8c:78:43:2e:dc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 6 14:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c4803faeb3fdeb12aad6f7a33aa511647af74ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:2f:f4:9d:e1:82:1f:d5:ec:28:a4:a1:90:
32:7d:1b:cf:b4:fd:1c:18:f4:16:08:d3:9d:3b:95:
60:d9:9e:c5:cb:5a:b2:50:12:f7:eb:93:6f:4e:d8:
c9:65:6a:d8:2b:01:1a:f9:11:d2:0d:ea:65:f4:cc:
83:d5:e5:a5:6b:ff:ec:c6:8d:e7:24:06:e1:fd:e5:
6e:1c:ae:d3:80:57:82:6e:93:e0:46:c0:c2:fa:f1:
dd:7f:fa:f0:f5:72:25:f1:f7:e1:4c:b6:37:96:9e:
58:fa:17:02:b8:63:a4:65:73:0f:65:d2:c6:63:2b:
a8:cc:92:8d:cd:40:6a:3a:83:8e:59:f1:99:cb:ad:
42:15:49:2e:ea:a1:59:2e:ab:97:3e:57:64:ca:cc:
b3:75:7b:4f:56:0c:cf:22:9a:06:ab:39:d5:ae:ca:
a1:76:83:38:55:a1:d9:87:85:67:e5:90:f3:49:f9:
21:9f:b2:19:48:e4:97:d0:45:4d:d9:ce:65:cf:1e:
03:4b:0d:ac:10:7d:1f:3d:c2:6f:e9:2b:dd:c8:e7:
67:13:0f:66:47:9c:73:76:9e:a9:3f:a2:1b:87:99:
26:a2:cb:bc:82:43:85:ef:09:32:99:86:b6:8d:de:
9f:24:71:d4:84:df:dd:2e:35:fd:2d:13:8a:9a:b9:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:03:FA:EB:3F:DE:B1:2A:AD:6F:7A:33:AA:51:16:47:AF:74:FF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HEgD-us_3rEqrW96M6pRFkevdP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.0.0/23
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:92:06:c7:97:55:11:a6:75:33:57:d0:a8:bf:5e:89:2c:e4:
5f:b8:48:64:b4:73:56:6f:b6:a6:8a:23:c7:b9:d6:54:41:db:
46:2f:8c:8a:cd:32:23:5a:6a:65:2d:a1:95:e3:09:ca:d6:f3:
14:82:b8:f9:34:89:ca:bb:c9:c4:ce:78:a9:ae:73:cb:d0:88:
41:87:93:fd:50:29:50:12:ef:90:20:c8:c6:bb:7b:6c:a9:37:
5e:b5:c7:9d:4b:cc:73:4f:72:aa:39:66:82:52:53:fe:eb:3e:
f9:60:c4:3a:4f:0e:45:3e:f0:02:71:47:62:3d:8f:c3:3c:83:
ef:c6:6a:c6:8c:45:63:25:61:10:b7:35:b9:9d:0d:e3:38:0a:
70:e7:44:36:62:f2:57:23:f3:50:09:d6:bc:76:81:54:c6:e3:
0c:dd:03:83:42:8c:58:6d:c0:ec:d5:d2:7d:6a:93:e2:61:ec:
23:22:26:23:cc:c6:11:62:6a:75:6b:fd:2f:31:49:91:97:19:
52:f2:20:c5:ed:e0:81:99:7e:ec:1a:e2:34:37:ae:1c:45:81:
4b:a4:1e:9e:58:4a:7e:b0:89:7a:8d:56:60:57:5c:1c:5d:76:
12:24:7a:27:fc:8b:4e:d5:ce:4e:25:56:c3:58:d2:db:91:f0:
8e:6d:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:19 2026 by rpki-client