Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/H0vr_3N1t6xC5dyPe7gYxDEiyCU.roa
File: H0vr_3N1t6xC5dyPe7gYxDEiyCU.roa (raw, json)
Hash identifier: Xpb3Wvxuwn+LgJBZGrRUURe+bHS15YUPVUIKv2HVwN4=
Subject key identifier: 1F:4B:EB:FF:73:75:B7:AC:42:E5:DC:8F:7B:B8:18:C4:31:22:C8:25
Certificate issuer: /CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Certificate serial: 019F5F7139804D7057E0EEF808BA6BBBAF0B
Authority key identifier: 0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/H0vr_3N1t6xC5dyPe7gYxDEiyCU.roa
Signing time: Tue 14 Jul 2026 07:04:43 +0000
ROA not before: Tue 14 Jul 2026 07:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8534
IP address blocks: 195.250.96.0/22 maxlen: 22
195.250.100.0/22 maxlen: 22
195.250.104.0/21 maxlen: 21
195.250.112.0/22 maxlen: 22
195.250.116.0/22 maxlen: 22
195.250.120.0/22 maxlen: 22
195.250.124.0/23 maxlen: 23
195.250.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:71:39:80:4d:70:57:e0:ee:f8:08:ba:6b:bb:af:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Validity
Not Before: Jul 14 07:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f4bebff7375b7ac42e5dc8f7bb818c43122c825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d1:db:2e:a5:b9:37:14:9a:cc:8b:b9:7f:fd:
f4:d6:78:3a:2e:ca:9a:bf:1b:fc:fd:e4:88:78:98:
5a:d3:e9:46:31:34:f8:08:66:c2:1c:4e:6c:3c:54:
b7:3b:d0:fa:88:b4:83:86:93:84:07:59:64:10:7a:
82:9a:e1:5a:62:65:9a:a5:1e:e9:69:5a:23:d8:6d:
46:67:29:14:68:01:b4:0b:36:75:6b:02:4c:3c:6e:
cb:76:f8:d7:a4:82:bc:35:97:35:f9:b2:fc:a6:fd:
e4:16:f3:5a:9c:10:78:9c:05:33:46:37:a7:1c:05:
e8:a7:1d:1b:49:00:e1:1d:27:b0:2c:8d:54:2f:4f:
b0:8b:38:45:23:0d:6d:20:a4:26:d0:38:b3:07:f0:
b1:ef:27:c6:cc:0a:e5:67:e9:66:0a:05:11:bb:39:
00:f6:d8:e8:a1:f6:4c:01:c9:b0:28:02:90:a6:10:
2a:98:7d:f3:61:e7:26:0d:01:4d:9e:e1:5a:5d:66:
64:8f:72:7d:7e:21:77:c1:7b:cb:26:a4:20:07:5a:
32:74:db:3b:3f:46:46:1b:57:19:05:b0:15:13:e2:
c1:8f:93:e7:e0:4f:5c:59:72:d1:40:87:d7:18:91:
4c:11:39:88:84:33:19:9f:79:b2:7a:19:6b:43:58:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:EB:FF:73:75:B7:AC:42:E5:DC:8F:7B:B8:18:C4:31:22:C8:25
X509v3 Authority Key Identifier:
keyid:0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/H0vr_3N1t6xC5dyPe7gYxDEiyCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:80:cb:c1:67:1c:1c:65:17:8c:92:62:f5:35:2a:38:f5:d5:
69:0e:8e:a4:93:2e:b5:44:ec:dd:55:aa:84:8b:9e:9a:64:fd:
dd:7f:c1:fd:5d:23:ad:e3:66:08:4b:11:47:95:ef:77:b1:6f:
3c:7d:c7:9b:4e:82:2a:dc:b7:4a:31:d2:17:e4:9f:93:cd:d6:
f5:fe:b9:d7:b7:d0:cb:48:11:e6:a3:06:bc:43:ef:31:2c:3b:
67:4f:0a:33:eb:0c:4b:da:ba:5b:24:11:d7:9a:b4:be:27:1d:
96:f4:f8:68:06:3f:18:ef:97:f8:e0:25:c9:ca:d1:b6:a0:6c:
5e:93:77:f1:78:d4:3a:a9:ef:21:98:3c:ec:89:df:13:f1:ff:
5b:82:05:14:2a:db:6a:58:d0:d5:ad:1e:60:1c:8f:d2:8e:4e:
a6:9a:19:d8:2d:15:a4:16:ac:c5:69:ca:f9:b1:33:e5:c5:eb:
c1:ef:6f:b9:47:e7:8e:37:4a:96:12:f7:6c:d3:56:19:4b:02:
2d:74:3c:33:78:d0:cf:74:cf:c5:98:bd:45:68:08:dd:78:64:
3b:22:8a:87:07:57:c7:a8:b2:87:85:2e:8a:55:f3:1a:71:b3:
94:2f:ab:25:b5:38:d4:6f:80:53:01:ca:a7:ae:d3:07:01:f6:
a9:28:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:14:59 2026 by rpki-client