Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa
File: Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa (raw, json)
Hash identifier: 0WIJOCOExiKp2DYhPrLVRQLqyJ77eB0LpuUyAmyPTrY=
Subject key identifier: 1D:BD:07:16:3B:D3:45:CA:FE:C7:71:64:36:C1:8C:10:57:CC:51:FD
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 019F489441F78159472C4386A481EB4096C8
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa
Signing time: Thu 09 Jul 2026 20:31:43 +0000
ROA not before: Thu 09 Jul 2026 20:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210820
IP address blocks: 193.111.235.0/24 maxlen: 24
193.177.242.0/24 maxlen: 24
2a13:ef80::/48 maxlen: 48
2a13:ef80:2::/48 maxlen: 48
2a13:ef80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:94:41:f7:81:59:47:2c:43:86:a4:81:eb:40:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jul 9 20:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dbd07163bd345cafec7716436c18c1057cc51fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:6d:61:27:b8:f8:8f:97:12:29:12:3b:a7:
47:0c:19:43:89:ad:a1:73:67:53:e9:75:76:20:8c:
70:b5:78:48:a3:41:84:45:59:a5:be:9d:59:f3:80:
09:0c:70:98:ed:56:83:a5:d7:f5:ef:7e:27:5d:b1:
c6:4a:41:77:7a:7c:04:3e:5a:04:99:8f:7b:e1:13:
50:88:1a:6e:2b:ec:95:d8:4a:8f:f6:e2:eb:36:ab:
9d:ad:27:b8:fc:fd:77:e4:ef:83:2d:24:e5:75:aa:
eb:4f:86:cd:57:98:48:e1:9a:24:a4:ca:85:9d:6c:
ad:02:4a:4c:84:22:c2:09:0e:56:17:3c:c2:63:36:
34:48:03:ea:24:72:6f:57:e8:a5:78:df:1f:3a:32:
97:b8:58:a4:d6:1f:df:d2:1f:75:51:94:aa:25:db:
3f:ff:1d:64:5a:6d:c4:91:a0:9d:96:f8:22:8a:bf:
96:e9:04:8c:aa:67:bc:1e:4d:79:54:2d:23:8a:90:
c1:23:a4:f8:59:31:62:29:51:60:aa:ae:00:6a:6e:
6d:66:97:78:49:1b:b8:af:26:11:1b:c6:84:70:4e:
c7:f3:99:67:0b:cd:ab:18:7f:2c:9d:5f:10:50:7a:
7d:56:ef:b3:0f:e2:b4:3a:75:c9:91:b0:73:3a:49:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BD:07:16:3B:D3:45:CA:FE:C7:71:64:36:C1:8C:10:57:CC:51:FD
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/Hb0HFjvTRcr-x3FkNsGMEFfMUf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.235.0/24
193.177.242.0/24
IPv6:
2a13:ef80::/48
2a13:ef80:2::/47
Signature Algorithm: sha256WithRSAEncryption
b8:e4:82:20:81:bb:6f:e6:93:c3:e5:a0:f5:b1:bb:39:c5:a1:
be:9d:3b:37:33:40:9b:7f:26:80:b7:3c:19:f7:c0:8d:31:41:
7f:1e:bf:b1:6f:02:e8:e1:03:03:8d:8c:43:9e:37:2e:1f:a1:
04:51:a5:a9:24:64:f7:80:93:79:05:7d:bf:b5:e5:96:cf:c7:
4d:2d:95:68:bb:3f:37:f1:0d:2d:e0:89:18:14:c9:8e:5b:b2:
b6:29:1c:23:be:bf:a7:5d:7c:59:43:c9:a6:33:bc:9b:4e:4a:
52:be:b4:c8:2e:0d:4d:fc:d0:17:0c:07:7d:6e:5c:8a:d9:4d:
19:69:03:c2:f1:44:7f:d0:2e:8e:c8:26:dc:c2:d4:16:1d:87:
28:16:b9:c8:39:96:2e:d4:07:e1:60:d0:7e:bd:87:b0:1d:98:
75:71:9b:52:fe:1f:43:6d:2f:b4:4e:28:c2:71:48:68:f7:94:
4e:64:2a:c6:31:35:6c:cb:2d:c5:ce:8f:b7:09:42:08:44:97:
2d:bc:52:f5:46:43:56:77:ab:07:15:c9:1b:c7:7e:ce:c7:13:
2a:63:24:12:58:65:82:c0:63:ca:8d:44:3c:39:b5:d1:6d:5b:
98:4a:1d:06:0a:dd:02:6b:99:23:86:ed:fc:8a:18:8b:a0:49:
8b:c8:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:38 2026 by rpki-client