Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/Hp24GG6uSG8sQb8jkFqa197vWxk.roa
File: Hp24GG6uSG8sQb8jkFqa197vWxk.roa (raw, json)
Hash identifier: dVGmnh+jbiESkwvHH2VOIhilfiq/4OOnJSaQFQ2DP7Y=
Subject key identifier: 1E:9D:B8:18:6E:AE:48:6F:2C:41:BF:23:90:5A:9A:D7:DE:EF:5B:19
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019F187B09C743D852DA57E83712DFD53AA8
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/Hp24GG6uSG8sQb8jkFqa197vWxk.roa
Signing time: Tue 30 Jun 2026 12:22:24 +0000
ROA not before: Tue 30 Jun 2026 12:22:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43606
IP address blocks: 80.173.167.0/24 maxlen: 24
80.173.168.0/24 maxlen: 24
80.173.169.0/24 maxlen: 24
80.173.170.0/24 maxlen: 24
80.173.171.0/24 maxlen: 24
94.131.238.0/24 maxlen: 24
157.22.235.0/24 maxlen: 24
157.22.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:7b:09:c7:43:d8:52:da:57:e8:37:12:df:d5:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Jun 30 12:22:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e9db8186eae486f2c41bf23905a9ad7deef5b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:55:a6:52:bd:d2:28:17:e6:e3:d1:56:63:
e3:98:a1:c2:bc:20:9f:15:88:e4:8f:1c:f2:92:80:
a4:ed:e8:64:80:99:57:8a:fb:3a:77:e2:c1:81:35:
6c:fa:0d:ea:5d:73:41:37:85:38:23:3b:58:d3:82:
10:65:05:e3:92:41:88:bd:7f:4e:88:fb:f4:3f:41:
9f:44:59:bb:e8:3a:2a:84:49:7e:b0:5b:9f:d1:67:
09:45:69:03:73:ec:88:69:a2:4a:5e:de:87:e3:f5:
5f:9d:06:36:6e:84:14:14:30:e4:27:40:bd:cc:ca:
41:49:b0:4a:05:dc:da:6e:07:5e:9a:e4:bd:66:1a:
2f:a1:15:cd:18:a2:f9:07:e7:b7:32:fe:cf:ff:d8:
73:ae:68:c0:76:04:57:77:f6:7d:69:1c:fa:11:09:
07:b7:80:56:10:ad:9d:0e:af:7e:ca:d5:2c:46:9a:
c0:89:7d:05:25:28:f1:a5:20:d1:16:e0:42:85:3f:
18:d0:7c:05:08:a6:ef:e4:f5:a8:4b:a9:34:bc:47:
c3:b3:7d:18:99:c0:59:a7:f9:c1:d3:ec:ad:86:9a:
58:54:f7:42:aa:7f:39:ed:9e:8a:e5:e4:18:9b:62:
5a:8d:2d:02:93:81:05:86:85:78:e5:eb:35:2f:b2:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:B8:18:6E:AE:48:6F:2C:41:BF:23:90:5A:9A:D7:DE:EF:5B:19
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/Hp24GG6uSG8sQb8jkFqa197vWxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.167.0-80.173.171.255
94.131.238.0/24
157.22.235.0-157.22.236.255
Signature Algorithm: sha256WithRSAEncryption
5b:3b:96:b2:8c:1c:d3:98:2e:cf:72:85:42:55:db:29:b7:ee:
f3:01:ac:65:9b:d2:14:f3:7a:45:2f:98:53:2d:9c:9e:b8:b8:
40:15:90:dd:05:93:95:ba:27:51:e3:67:06:39:97:31:24:6d:
b2:bd:27:4d:d1:2f:fb:57:0b:fc:87:ce:e9:a9:e5:c5:27:b3:
75:2d:44:a9:f0:6f:1f:46:46:85:1e:c3:84:4f:49:da:ef:fa:
0b:6a:c2:64:e4:88:32:11:40:44:2e:17:40:1b:38:bb:be:19:
80:20:6a:84:1d:4e:0e:54:65:50:8f:91:8b:94:68:66:6d:16:
e5:93:2d:1d:79:dd:30:9d:6a:26:22:3c:bb:7b:83:de:b7:90:
1f:de:1a:97:e7:95:d1:02:b8:58:26:6e:88:39:c4:3e:96:54:
82:ed:9e:c3:d8:b5:f4:1d:98:88:7d:ef:20:0a:04:05:54:1f:
1d:bc:2a:5b:1d:41:01:4f:36:df:50:2e:e4:f2:ca:0f:5a:ba:
5b:72:cd:e1:55:f1:24:4f:d9:ed:7c:ad:8b:36:ae:62:bb:0b:
cb:43:72:13:78:6e:bc:32:b1:7c:75:b2:40:2e:ca:e2:52:9e:
f1:41:67:46:07:80:dd:1e:4d:a7:37:8b:5d:9f:4c:45:11:42:
06:b8:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:54:57 2026 by rpki-client