Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EHH0nFwwBOA2M22Z0l_iCK1TDmE.roa
File: EHH0nFwwBOA2M22Z0l_iCK1TDmE.roa (raw, json)
Hash identifier: jDdWomoIZlijnWT475/CXlpqe1CJwgbfdV7//OimLis=
Subject key identifier: 10:71:F4:9C:5C:30:04:E0:36:33:6D:99:D2:5F:E2:08:AD:53:0E:61
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019DBACACFF8551B7E97545DEF02FA309862
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EHH0nFwwBOA2M22Z0l_iCK1TDmE.roa
Signing time: Thu 23 Apr 2026 14:42:26 +0000
ROA not before: Thu 23 Apr 2026 14:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62390
IP address blocks: 45.155.88.0/24 maxlen: 24
124.155.251.0/24 maxlen: 24
185.142.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:ca:cf:f8:55:1b:7e:97:54:5d:ef:02:fa:30:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 23 14:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1071f49c5c3004e036336d99d25fe208ad530e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:74:3e:18:0f:0a:c0:50:69:91:91:a4:79:
07:bf:36:f3:20:1f:54:84:3f:c6:0e:7d:4b:60:52:
07:0d:4e:47:df:b0:df:d8:01:b0:f7:47:4e:df:82:
96:34:09:bf:b1:2f:f8:9a:ab:e4:22:ba:9e:76:56:
a4:e3:6d:7a:8e:28:01:6c:66:ea:f7:56:ec:4d:e2:
86:cc:53:9c:ed:2c:c9:04:a2:80:2c:cc:12:dd:c5:
40:b3:2b:58:11:75:23:91:14:1d:cf:70:3b:be:0a:
f0:15:09:a4:b7:3e:6c:b6:42:c3:a0:dc:81:49:b6:
eb:0c:57:e4:b9:17:3f:63:88:db:e7:ac:8e:f9:4b:
cf:84:45:b6:14:2c:8e:05:6d:1b:2f:a0:15:fd:7f:
bb:90:90:19:25:e0:18:da:77:28:b4:36:53:b2:3e:
1a:b2:a5:5a:7c:8f:23:16:7b:23:58:bb:16:38:d8:
a8:4f:f1:92:60:92:1b:c4:73:fd:de:9c:e9:90:6d:
77:81:72:1a:0c:1b:55:e4:40:33:08:48:3e:01:5d:
7a:cc:a4:09:0d:92:c0:bf:ee:7f:60:81:60:59:0d:
8b:46:dd:b0:70:78:29:3c:26:83:6f:8d:df:d0:d1:
f4:c3:46:d9:b4:fc:41:70:79:ee:e4:2f:25:5d:67:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:71:F4:9C:5C:30:04:E0:36:33:6D:99:D2:5F:E2:08:AD:53:0E:61
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EHH0nFwwBOA2M22Z0l_iCK1TDmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.88.0/24
124.155.251.0/24
185.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5d:03:ab:62:e9:ee:09:72:c0:f3:6a:33:44:b7:e9:5d:02:
f1:3b:29:db:9c:b4:d3:fa:a6:f9:a3:99:f3:65:b0:d8:72:6f:
95:60:0f:dc:07:6e:ba:15:3b:67:1c:e6:37:90:77:7f:af:ac:
4e:f9:47:12:15:2c:1e:b5:07:18:b5:44:ad:06:1c:e0:a0:21:
d4:2a:99:c1:40:de:1c:d5:11:91:c8:0e:e1:76:71:b4:e8:60:
b6:34:16:bd:62:5a:94:7b:8e:94:4c:fc:2a:6a:6c:6e:fc:52:
2f:5b:de:bb:30:d9:95:fe:f9:eb:de:e3:80:7a:1d:c7:67:2a:
6b:b8:38:51:bb:b7:c3:71:f9:3e:05:8f:f6:f0:6c:07:05:92:
85:c9:8b:3f:8a:d9:79:a4:74:db:26:7f:05:55:3f:9e:9b:df:
ac:00:87:11:dd:5f:d2:bd:3b:b6:58:01:a9:77:3f:3a:d5:26:
bf:ee:05:ca:9c:de:03:fe:06:24:68:ee:5b:f6:16:b3:4f:3c:
53:07:5b:65:4c:b8:57:62:c3:83:8f:4c:8f:0f:26:a5:57:23:
bd:91:99:77:f1:79:d1:6a:f8:46:6b:8a:9a:57:c9:6d:81:0b:
4d:9a:bb:ee:5f:be:3f:b0:69:57:f1:d4:ea:4a:b3:52:ea:2e:
9c:4f:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:26 2026 by rpki-client