Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/JHT6ESoo6q0bOi3_neOwXu64U4c.roa
File: JHT6ESoo6q0bOi3_neOwXu64U4c.roa (raw, json)
Hash identifier: 1z9FjYu9NjkAWLtxnb2DnFiLMcGnPYdwdwCvpCkxJqM=
Subject key identifier: 24:74:FA:11:2A:28:EA:AD:1B:3A:2D:FF:9D:E3:B0:5E:EE:B8:53:87
Certificate issuer: /CN=85c129df500c8df98a428b2899c6cd6124f168a1
Certificate serial: 019F2368AEA0B3187111DA237ECEAF6915DC
Authority key identifier: 85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/JHT6ESoo6q0bOi3_neOwXu64U4c.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3226
IP address blocks: 87.250.0.0/19 maxlen: 19
91.146.0.0/18 maxlen: 18
92.55.0.0/18 maxlen: 18
92.241.224.0/19 maxlen: 19
217.14.192.0/20 maxlen: 20
217.29.176.0/20 maxlen: 20
217.114.144.0/20 maxlen: 20
2a00:4580::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ae:a0:b3:18:71:11:da:23:7e:ce:af:69:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c129df500c8df98a428b2899c6cd6124f168a1
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2474fa112a28eaad1b3a2dff9de3b05eeeb85387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:24:ca:0e:57:d7:f5:fb:0a:46:46:0a:65:
97:5d:d2:b2:52:39:e6:9e:10:b5:63:d3:6c:2a:a4:
84:b8:41:fa:3d:2c:bb:a3:c5:0b:23:88:b4:9f:06:
10:08:1c:16:37:0a:44:52:81:f0:39:0f:7c:e6:57:
99:e1:de:f6:2e:0f:10:a0:10:80:09:94:be:4d:3d:
00:42:1d:76:ef:b6:4d:95:c0:64:ab:b0:bc:8b:2e:
48:bc:64:52:7b:b2:e5:b7:6d:d9:29:14:4a:1d:fc:
40:aa:86:ed:4b:a5:96:4e:6f:a0:6c:de:ae:d0:08:
a7:5e:84:5c:4b:87:2e:6d:6e:f0:3a:a2:be:a1:38:
1b:77:c0:b1:53:6f:33:89:c3:e0:9c:7f:c9:02:44:
27:8a:b6:3d:f2:87:c2:f6:78:66:82:d8:6f:8d:b2:
30:04:3f:32:6b:43:8b:2e:c2:b1:a6:13:f3:d4:3b:
78:6a:23:73:1c:0e:dc:3d:92:1f:15:6b:2f:9c:f8:
4e:48:af:87:35:66:bd:6c:9a:95:33:4a:97:27:2b:
2f:d6:4a:4f:b1:41:15:60:06:96:34:67:ff:80:80:
9c:f2:30:06:0d:ce:97:16:42:b4:8c:ee:ec:64:dd:
96:6c:a9:da:d6:8b:84:c4:ca:43:63:e1:cc:89:bd:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:FA:11:2A:28:EA:AD:1B:3A:2D:FF:9D:E3:B0:5E:EE:B8:53:87
X509v3 Authority Key Identifier:
keyid:85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/JHT6ESoo6q0bOi3_neOwXu64U4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.250.0.0/19
91.146.0.0/18
92.55.0.0/18
92.241.224.0/19
217.14.192.0/20
217.29.176.0/20
217.114.144.0/20
IPv6:
2a00:4580::/30
Signature Algorithm: sha256WithRSAEncryption
a8:44:84:71:fb:dc:28:08:5e:97:95:d1:39:ba:6d:d3:04:61:
7b:4e:27:b3:30:24:9b:32:01:a7:1d:88:31:24:aa:8f:43:67:
0c:8b:7a:0b:77:67:bd:05:da:78:c2:50:00:79:d7:c3:df:7c:
75:a4:cd:0d:58:08:53:19:ae:2b:fb:b3:04:59:70:49:a6:2b:
80:5d:1d:60:b9:02:51:fe:b7:54:a5:1a:4c:15:9b:71:e9:4a:
dd:c3:d3:80:bd:2a:b9:93:39:8e:77:5c:25:3c:d6:3f:f6:0b:
56:93:84:98:fb:58:e6:ab:55:7f:c6:30:cf:bb:0b:b4:c0:ce:
30:1c:b7:b1:af:d4:a4:b8:eb:2e:e3:ad:61:68:7f:55:38:fa:
c5:bc:ec:95:1c:0d:c3:8e:cf:d9:9e:f5:33:2d:47:70:8e:e5:
10:62:c2:7a:d1:ac:35:03:64:2b:2f:be:3a:3a:0b:d1:74:a3:
d8:4d:f5:16:98:8e:ed:68:9a:9d:81:94:9b:f9:d7:a1:61:08:
01:b1:db:02:c2:16:ba:fd:f3:4f:20:b7:45:87:c3:78:b2:8e:
d2:35:41:cf:36:7e:37:b5:12:37:62:25:c4:98:22:22:c3:6c:
bd:9c:ef:6f:50:04:c8:81:8c:f2:fe:b4:29:78:71:05:68:e8:
46:7a:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:28 2026 by rpki-client