Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/HrGcgBvg4DY29ekAPoOs0k_ceU8.roa
File: HrGcgBvg4DY29ekAPoOs0k_ceU8.roa (raw, json)
Hash identifier: Zi9LIDXSmXdYftVe/mbJqu9FZB8L69cv5MK/RNZAW5k=
Subject key identifier: 1E:B1:9C:80:1B:E0:E0:36:36:F5:E9:00:3E:83:AC:D2:4F:DC:79:4F
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019EFEB2446422BCD5022250DEAC22DAACC5
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/HrGcgBvg4DY29ekAPoOs0k_ceU8.roa
Signing time: Thu 25 Jun 2026 12:12:36 +0000
ROA not before: Thu 25 Jun 2026 12:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44578
IP address blocks: 81.85.92.0/22 maxlen: 22
81.85.92.0/24 maxlen: 24
81.85.93.0/24 maxlen: 24
81.85.94.0/24 maxlen: 24
81.85.95.0/24 maxlen: 24
90.156.220.0/23 maxlen: 23
90.156.220.0/24 maxlen: 24
90.156.221.0/24 maxlen: 24
185.209.49.0/24 maxlen: 24
188.244.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:b2:44:64:22:bc:d5:02:22:50:de:ac:22:da:ac:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Jun 25 12:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb19c801be0e03636f5e9003e83acd24fdc794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:90:d3:01:10:8b:9e:ea:67:de:4b:ed:23:
f4:26:1d:a1:b9:3f:e9:b9:77:16:ad:03:70:7e:13:
87:c6:69:12:fa:b9:db:80:8c:2b:13:19:c0:52:fd:
92:51:e6:2c:0c:22:b9:db:ad:61:45:de:6b:1a:be:
7b:b0:dd:f2:a2:a9:a3:eb:3a:f7:2e:21:d1:dd:4b:
ab:3e:d6:61:bd:2e:62:59:53:24:a5:3d:4b:a8:46:
b7:55:cf:b3:c0:72:44:44:4b:90:02:6f:86:e6:0d:
b3:f0:af:46:8a:6e:f8:4c:60:a3:58:e5:0a:67:c3:
b2:a3:51:45:52:3c:9b:d2:10:74:bd:ee:da:1e:42:
d0:04:0b:57:8d:ee:7a:ed:42:9f:14:25:b8:7e:bf:
56:dc:be:67:be:a4:d6:6a:75:cb:47:bb:d5:3f:cf:
a1:24:aa:9d:fa:a1:32:0d:ee:af:62:1b:43:11:55:
a1:65:78:5c:91:b2:c0:81:24:49:34:4d:57:cd:4e:
7d:17:cd:1b:c4:ca:ba:13:19:51:6f:e8:99:41:23:
d2:e3:b3:7f:96:f0:85:22:67:e0:c6:62:2f:32:7b:
af:b8:ef:48:cd:1a:53:1e:1f:be:4c:e1:5d:1a:0f:
2f:bd:4a:41:49:8e:6d:dd:eb:6a:92:90:18:12:c7:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:9C:80:1B:E0:E0:36:36:F5:E9:00:3E:83:AC:D2:4F:DC:79:4F
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/HrGcgBvg4DY29ekAPoOs0k_ceU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.92.0/22
90.156.220.0/23
185.209.49.0/24
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e3:3f:52:b0:c9:95:b3:c5:3a:10:49:54:04:6a:81:26:b4:
26:b6:30:4c:43:e7:61:79:b6:92:af:ec:0a:0f:ef:8e:d0:a7:
05:9e:85:48:ad:6c:91:0c:96:ea:4e:14:20:aa:de:00:33:ce:
9f:02:f4:0e:f9:7c:3e:60:5f:e5:78:f9:c9:36:2d:43:07:82:
b2:99:ed:be:7b:4a:8c:d3:a4:a2:16:50:ff:4e:53:0e:5d:db:
2f:1e:83:24:35:bc:f0:71:bc:c2:3c:a3:36:8b:bd:e3:7e:f2:
8d:f9:cf:11:48:e0:2c:05:bb:d5:de:59:90:d5:d1:40:9d:34:
c6:0b:5a:51:45:1b:4a:cf:1b:19:a2:a0:b8:90:5f:16:a9:e9:
64:7d:cd:8c:a9:e1:a7:83:53:55:59:e6:d7:51:17:18:da:3b:
be:48:c8:5d:93:b8:39:27:de:73:ac:e2:37:fc:80:1f:76:45:
80:48:de:ec:a0:c7:ca:73:a2:0c:7b:9d:0b:66:72:d4:24:5d:
6f:f9:b8:fb:24:50:b6:85:5b:80:b5:96:ac:a2:79:e4:d8:06:
5f:cf:42:29:4e:a7:4c:85:3b:38:96:cd:ea:64:01:6e:fa:77:
29:25:38:76:f1:ce:6e:9e:1b:8f:88:02:6b:4c:ea:1c:6d:77:
58:13:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:28 2026 by rpki-client