Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Hj5j0cmGzomQMFloPBsUhmbbTws.roa
File: Hj5j0cmGzomQMFloPBsUhmbbTws.roa (raw, json)
Hash identifier: Zkpy0fwr4vdvGuX8KEgket7oJFZMpDWO1vND9LhxMBM=
Subject key identifier: 1E:3E:63:D1:C9:86:CE:89:90:30:59:68:3C:1B:14:86:66:DB:4F:0B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F885FE8E41C92AC8DA9DE8962026419B5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Hj5j0cmGzomQMFloPBsUhmbbTws.roa
Signing time: Wed 22 Jul 2026 05:50:14 +0000
ROA not before: Wed 22 Jul 2026 05:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 109.121.47.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:5f:e8:e4:1c:92:ac:8d:a9:de:89:62:02:64:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 22 05:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e3e63d1c986ce89903059683c1b148666db4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:f2:fc:7b:ad:72:f0:7c:fe:52:cf:37:fe:
c6:f8:f4:27:54:8f:43:f4:59:cb:5d:2b:b7:a1:aa:
bf:9c:53:c6:d2:03:aa:01:af:e3:b2:2a:cf:a4:f2:
1b:83:d6:29:3e:6c:26:41:83:f4:cc:f9:5c:79:5a:
ee:88:0d:4c:75:42:ea:ef:9b:9c:c8:45:25:06:24:
fd:07:fb:da:75:96:08:8e:4e:b0:0b:1f:1d:b7:9b:
47:f4:ee:88:78:1b:56:d4:88:9b:4a:82:7f:f4:62:
4c:31:37:5a:01:f8:0e:41:df:88:0e:8f:59:cf:2c:
04:06:44:97:2f:24:4a:f6:fe:be:aa:d5:ad:4a:91:
fa:52:51:c6:85:77:ac:40:11:9f:a4:e4:e6:7c:54:
f7:41:e1:fe:fd:f5:c6:90:11:d5:c8:a9:79:cc:16:
df:1f:6a:3c:19:b7:aa:b1:51:85:99:68:8a:c0:ce:
fc:48:a3:b3:45:81:59:f4:5c:70:7f:10:1e:3b:9e:
89:02:19:5e:56:d2:38:e1:21:73:85:09:8b:c1:98:
66:f0:fb:dc:9e:c2:ce:bb:52:04:3b:ea:c6:7d:b7:
f9:22:06:bb:2d:dc:af:28:51:dc:18:df:ff:f8:b6:
20:c8:99:26:e2:b7:44:1d:d2:2a:69:e8:ae:b1:1d:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:63:D1:C9:86:CE:89:90:30:59:68:3C:1B:14:86:66:DB:4F:0B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Hj5j0cmGzomQMFloPBsUhmbbTws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.47.0/24
194.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d6:1a:84:ad:6d:7c:69:84:54:47:8a:f3:07:42:50:11:01:
20:75:0d:7a:61:b2:bd:bc:c7:4f:f0:c6:99:4c:26:50:c3:c3:
68:79:4c:22:ea:49:bd:5b:45:6b:06:7c:5b:b5:e3:94:a2:20:
0b:f7:59:42:0a:dc:2f:3f:23:b3:b0:cf:f9:a8:e8:3a:a3:1c:
ed:11:4c:45:03:37:8c:dc:56:e0:ac:ae:45:da:e1:d3:90:3b:
87:10:d8:7b:3f:0c:20:4f:43:0a:95:ba:90:3b:3c:c7:31:14:
2e:4f:94:af:86:96:8a:45:22:73:12:c1:75:56:a2:00:cc:32:
ba:08:34:9a:d9:07:00:86:7f:8e:fe:7d:38:25:ef:4e:45:aa:
90:0c:8f:f6:df:1b:96:da:88:d3:c4:19:57:d5:65:cc:cf:e6:
e1:8b:41:85:2b:08:41:c6:bd:d3:6f:ff:a8:1d:f2:4e:a9:42:
46:76:d9:c5:cc:58:62:7b:12:25:34:52:5e:25:25:58:b3:b0:
b5:4e:57:15:25:74:e2:6d:cc:3a:90:d0:b7:f2:c1:61:43:e3:
cb:05:89:4c:4f:b8:65:4a:14:1f:d0:c6:43:70:09:19:7a:c8:
b1:b5:fe:16:e6:6c:a5:7f:5d:2d:b8:87:07:9d:7a:9b:43:7e:
21:da:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:54 2026 by rpki-client