Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HkFRTCRJHQBGvTYA_Tr8CxO5oZM.roa
File: HkFRTCRJHQBGvTYA_Tr8CxO5oZM.roa (raw, json)
Hash identifier: srT1SKcCTTSUeJOGWkp+ttN9OSFugI/0FkUfvZkstC8=
Subject key identifier: 1E:41:51:4C:24:49:1D:00:46:BD:36:00:FD:3A:FC:0B:13:B9:A1:93
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F7E1A834F93860E1583CA17C838C9E22B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HkFRTCRJHQBGvTYA_Tr8CxO5oZM.roa
Signing time: Mon 20 Jul 2026 05:58:14 +0000
ROA not before: Mon 20 Jul 2026 05:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.175.105.0/24 maxlen: 24
81.18.48.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.219.7.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:1a:83:4f:93:86:0e:15:83:ca:17:c8:38:c9:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 20 05:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e41514c24491d0046bd3600fd3afc0b13b9a193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:22:a9:06:cd:ee:15:86:8e:d2:67:d3:04:
64:51:a1:19:80:4a:fd:9a:35:81:8a:4c:be:52:4c:
6b:be:49:ec:3a:61:42:58:a5:8c:22:af:ed:51:2c:
db:39:ed:e0:93:e6:b0:d8:b6:7a:90:4f:d0:a2:1b:
2f:14:19:38:77:b0:f9:a6:33:c4:3c:05:d5:df:31:
02:6b:73:b2:ec:74:0b:7e:14:28:96:3d:82:ab:38:
7e:1f:81:2a:81:a1:dc:dd:da:a5:19:90:50:0b:33:
f5:b9:01:48:56:be:9e:da:99:dc:fb:06:91:69:f8:
e4:7b:c9:72:05:e9:38:ca:d3:2f:6e:3f:ae:fb:ac:
68:32:06:34:3e:34:9f:eb:8b:7c:92:fa:f3:8a:63:
05:99:01:2d:43:ce:c4:b8:ad:68:72:6e:e3:78:90:
74:bd:4e:cf:06:e4:e5:a9:98:af:9c:1a:38:9b:27:
11:aa:9e:1f:fe:19:ac:17:21:4e:aa:13:6b:22:15:
de:0a:1c:0e:47:df:ac:c2:bb:cf:38:85:03:bc:7a:
9a:26:c4:2b:8b:b6:0b:53:f1:16:59:e9:aa:0e:3f:
58:bf:1a:53:78:07:f4:2c:a5:2d:fb:24:32:bf:bf:
6f:c6:0b:0e:7d:e7:e6:3a:5b:d4:58:33:0a:81:d0:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:41:51:4C:24:49:1D:00:46:BD:36:00:FD:3A:FC:0B:13:B9:A1:93
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/HkFRTCRJHQBGvTYA_Tr8CxO5oZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.105.0/24
81.18.48.0/24
109.121.44.0/24
178.219.6.0/23
185.47.91.0/24
188.255.198.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e9:4a:00:42:1a:8e:60:4b:98:c1:38:bc:2a:82:33:1b:7a:
08:56:85:01:de:71:6c:fd:63:0c:ef:ac:cd:52:b0:2f:e7:15:
5d:21:83:c6:54:78:23:34:e5:a7:7e:9e:42:ab:a6:7b:23:38:
31:2a:10:40:cf:37:47:3f:c8:43:39:f8:7d:45:8c:34:6a:a1:
41:5d:7b:4a:bd:26:5b:6d:a6:c2:8b:78:03:3a:a6:80:de:8d:
ed:07:62:50:92:c9:20:48:0a:65:90:92:9e:01:f8:22:e2:64:
fb:0b:54:c8:29:f6:5e:19:95:7e:ad:50:62:7c:df:97:07:63:
b4:5c:24:eb:64:a6:6c:a0:bf:e0:6b:e7:7a:c1:b0:5d:d5:26:
07:3f:45:fa:71:32:e4:97:67:69:cb:14:3e:bb:5b:6e:a4:1e:
cf:b9:73:26:a9:74:94:09:f2:5a:53:6a:bd:e9:29:d6:29:29:
87:f6:a6:70:f5:b6:c1:cf:22:8a:0f:55:33:e6:39:54:c8:fc:
9f:38:6e:d3:6d:42:1b:af:31:93:50:6c:40:f3:95:17:bf:eb:
a3:81:ad:9f:c3:28:43:6b:4d:f3:f7:e5:34:ee:71:28:b2:07:
59:31:2a:f8:1a:79:06:87:a9:48:1c:eb:f7:44:d6:92:00:73:
13:f7:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:55 2026 by rpki-client