Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/H4MggHQPgM-7nfOAebCpYaE3rC0.roa
File: H4MggHQPgM-7nfOAebCpYaE3rC0.roa (raw, json)
Hash identifier: NA1LaT60MYaspgCHv3IvKt92eO5OcAGbm1nezXsj0CM=
Subject key identifier: 1F:83:20:80:74:0F:80:CF:BB:9D:F3:80:79:B0:A9:61:A1:37:AC:2D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019F13A0DA3EDC0761EED9E7A8138BF23481
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/H4MggHQPgM-7nfOAebCpYaE3rC0.roa
Signing time: Mon 29 Jun 2026 13:45:36 +0000
ROA not before: Mon 29 Jun 2026 13:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215670
IP address blocks: 109.248.18.0/24 maxlen: 24
109.248.247.0/24 maxlen: 24
188.130.238.0/24 maxlen: 24
2001:146a::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:a0:da:3e:dc:07:61:ee:d9:e7:a8:13:8b:f2:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 29 13:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f832080740f80cfbb9df38079b0a961a137ac2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:d9:57:21:4f:06:6b:22:92:66:b7:96:e2:
f5:69:2c:58:ee:2a:9c:ec:9f:75:4b:e5:9a:1b:c2:
4f:ad:e1:65:22:e8:0d:c6:a2:0a:98:8f:f2:09:18:
8c:7c:07:59:1f:03:aa:26:af:6b:59:50:71:2c:95:
dc:53:06:50:ad:22:33:80:b9:74:51:43:e5:fc:1a:
01:a9:32:2b:05:47:e3:7f:8d:28:31:40:6e:0c:76:
69:94:89:a5:41:91:cb:fa:ea:15:a5:d8:72:f4:96:
74:1d:40:7a:b0:0c:20:22:f7:63:a8:4d:db:92:b4:
9e:c3:82:15:bc:14:8b:c2:c9:42:84:98:c8:5d:f2:
ca:b8:02:88:16:f8:da:89:2e:f6:52:1c:a0:7c:2f:
f9:a7:4d:42:d1:90:7e:26:25:c8:20:67:83:fb:19:
c0:63:a1:e8:ba:72:3e:8b:79:c1:8e:ee:75:90:ac:
ef:be:ff:b3:00:57:46:e8:70:82:01:00:8d:22:f2:
98:f0:af:88:d3:f4:4e:77:3d:d1:1d:85:39:54:99:
1c:ae:9d:56:a8:72:0c:67:6d:e4:ed:4b:59:41:9e:
c4:9c:79:69:9d:e0:df:0b:1f:05:93:e9:8c:c3:64:
95:3f:cf:fd:9c:7a:a5:39:a7:90:67:c1:5a:0d:b7:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:20:80:74:0F:80:CF:BB:9D:F3:80:79:B0:A9:61:A1:37:AC:2D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/H4MggHQPgM-7nfOAebCpYaE3rC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.18.0/24
109.248.247.0/24
188.130.238.0/24
IPv6:
2001:146a::/32
Signature Algorithm: sha256WithRSAEncryption
33:14:c3:3c:60:4c:76:e4:1b:4b:b6:10:c7:f8:e9:74:95:e2:
8c:2f:77:5d:82:0c:7f:a3:6e:0b:e3:79:5a:9e:c2:41:f0:c5:
20:8d:b4:c1:84:64:9e:5b:9c:6f:82:4a:f2:08:4f:5a:91:a6:
6e:85:89:1e:70:b0:14:9d:16:e6:8f:0f:ac:5b:96:80:31:61:
41:ad:19:43:c7:86:6c:93:ab:43:47:f7:5f:e7:1e:81:50:96:
ef:7c:29:fc:98:8d:a2:bb:fc:9a:30:91:43:58:d4:6c:a6:b9:
df:4f:c7:34:01:c2:cd:b7:20:1b:38:1e:d8:4d:f7:d4:27:3f:
50:7c:57:0e:17:21:ef:f2:61:a9:64:ec:73:7d:69:c6:2c:cf:
75:dc:a6:17:d6:d5:30:b3:37:52:ff:31:3a:cb:01:08:06:30:
ce:81:eb:e5:1c:83:f7:5d:24:4e:c5:1c:20:30:d5:9e:99:76:
14:8f:2c:5f:b7:54:7c:6f:b2:00:2e:dc:44:7d:3d:db:dd:83:
13:74:e1:54:8a:b2:0a:ce:d5:6b:ee:ff:95:c7:06:f5:35:37:
a6:e7:5d:bf:3d:15:33:5b:25:aa:2c:9c:0e:3e:2c:d0:8b:38:
24:9b:61:cc:3f:41:38:d7:06:6e:63:c0:de:c2:04:d5:1f:0f:
6c:88:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:09 2026 by rpki-client