Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/HZuqAD7c7zD61eQDUNc43p13Rus.roa
File: HZuqAD7c7zD61eQDUNc43p13Rus.roa (raw, json)
Hash identifier: CLnSiDlapsSBOMDzZqR931D1WlMkd94ux2JTr6MJ7iY=
Subject key identifier: 1D:9B:AA:00:3E:DC:EF:30:FA:D5:E4:03:50:D7:38:DE:9D:77:46:EB
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019F439AC2BC4A2B66B6EF0E72ACB02B90A2
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/HZuqAD7c7zD61eQDUNc43p13Rus.roa
Signing time: Wed 08 Jul 2026 21:20:43 +0000
ROA not before: Wed 08 Jul 2026 21:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219334
IP address blocks: 45.94.18.0/24 maxlen: 24
2001:913:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:9a:c2:bc:4a:2b:66:b6:ef:0e:72:ac:b0:2b:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jul 8 21:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d9baa003edcef30fad5e40350d738de9d7746eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:8a:c7:59:96:46:60:f6:b6:93:fa:a2:c0:
34:ef:63:78:54:77:1e:dd:1d:b6:b1:c5:11:e2:61:
cd:d4:b9:07:ac:31:46:82:97:03:3c:19:e1:18:fe:
dc:c1:ff:57:57:e2:60:c5:28:c2:55:50:51:56:15:
91:5a:ed:21:3d:15:12:40:12:53:fe:7d:cd:32:be:
ee:0c:39:ee:9e:8f:c8:b5:34:08:60:b7:4a:31:9a:
0a:a8:48:98:e9:6f:8a:f6:63:a5:32:eb:06:49:f4:
b1:9b:33:f6:9e:71:2e:1a:41:93:23:13:f8:ad:b2:
95:9b:e8:af:c2:ab:aa:f2:71:ed:ac:8e:db:dd:26:
47:55:f1:6f:0f:f5:59:34:e3:80:a7:75:18:47:12:
f9:82:66:a2:2c:a6:73:5a:76:f2:b0:15:e6:8c:12:
ad:d1:5a:9a:e4:a7:88:38:66:b2:cd:8f:86:f6:59:
06:33:59:65:3b:53:74:9e:ab:ee:3a:d3:a6:55:01:
57:ed:67:0e:11:53:4f:76:dd:fe:eb:8d:3d:cf:65:
5f:6e:11:92:82:d9:4b:53:bc:d4:57:49:06:26:ea:
c7:c3:9f:2e:63:03:94:ab:b9:e2:97:b9:f9:5c:92:
ae:a7:dd:14:56:80:68:0a:6b:b6:91:06:5e:d3:20:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:AA:00:3E:DC:EF:30:FA:D5:E4:03:50:D7:38:DE:9D:77:46:EB
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/HZuqAD7c7zD61eQDUNc43p13Rus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.18.0/24
IPv6:
2001:913:3000::/36
Signature Algorithm: sha256WithRSAEncryption
b0:08:e6:81:ba:85:80:ed:02:c2:40:13:c9:68:c6:80:2e:b7:
d0:37:a1:4d:c0:2a:9a:fc:3b:39:93:38:77:32:aa:47:14:b7:
3c:f9:2c:d5:05:5f:2e:b3:8b:9a:73:12:97:97:a1:3f:cb:7d:
15:d4:e5:e9:8e:72:1f:ff:df:de:6d:8b:8c:5b:b0:97:b9:69:
4e:3a:ac:58:14:87:0a:b4:83:79:06:3e:e4:d4:58:1b:be:17:
a4:d5:03:30:6c:49:a1:49:17:8a:2a:ce:5b:a3:a9:57:6a:3f:
15:32:9a:98:c1:06:3e:df:1b:e4:58:9b:4d:88:f1:6b:4e:a2:
18:28:ce:2d:25:c3:fb:f5:dc:69:48:83:b9:bb:00:2b:33:3e:
dc:1f:7d:8e:00:1b:9b:dd:df:77:82:f5:b6:3a:51:29:05:d2:
fe:b4:49:68:c7:12:cd:d4:9c:05:9c:eb:9d:8a:37:e0:65:43:
54:00:02:c4:74:f0:cd:cb:31:38:aa:8b:35:c3:43:54:60:fc:
df:30:81:4a:ed:51:f4:e5:16:5a:d3:e8:8f:f2:c2:ad:d4:a9:
4e:6e:64:08:3e:65:6d:a1:ac:ff:90:4b:10:6d:28:74:69:4e:
fb:89:e9:34:ed:d3:ae:0d:32:d1:b8:70:9c:6f:67:54:7b:e2:
9d:b5:cd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:47 2026 by rpki-client