Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hVosCYN3YoqLYCxfgZS65MHimCU.roa
File: hVosCYN3YoqLYCxfgZS65MHimCU.roa (raw, json)
Hash identifier: bXC7wpOj94dDl1Of19T7maG4N2gLLkfLfdzjOWo5seA=
Subject key identifier: 85:5A:2C:09:83:77:62:8A:8B:60:2C:5F:81:94:BA:E4:C1:E2:98:25
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019CD90E7E2BA4DCF30D89701B58A7B0F630
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hVosCYN3YoqLYCxfgZS65MHimCU.roa
Signing time: Tue 10 Mar 2026 18:42:11 +0000
ROA not before: Tue 10 Mar 2026 18:42:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.155.62.0/24 maxlen: 24
45.155.63.0/24 maxlen: 24
194.32.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:0e:7e:2b:a4:dc:f3:0d:89:70:1b:58:a7:b0:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 10 18:42:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=855a2c098377628a8b602c5f8194bae4c1e29825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:e8:aa:43:97:67:98:ad:9b:08:73:2b:de:
d4:e3:0b:69:dd:d8:ec:2a:a4:e8:2f:08:bf:7d:31:
1e:c2:6b:af:34:fd:69:69:cd:f5:d0:26:07:f6:37:
e5:2e:18:6a:27:b3:90:cb:68:45:f4:d0:2f:1f:e0:
32:0a:c8:50:88:b1:b5:6c:25:42:da:38:ea:1f:83:
27:3a:d0:dd:5a:90:df:7a:26:04:23:ce:e1:8c:2e:
6f:8b:6e:7e:81:b4:89:81:06:5e:c3:46:8b:a4:18:
30:e9:21:b4:55:a9:df:50:51:f2:ca:5d:68:b5:47:
93:0a:3c:1e:f6:c7:57:07:bc:fd:b2:38:5f:31:da:
93:7f:f3:c3:3b:23:72:25:7a:9d:95:cd:90:67:d4:
d6:7f:90:59:4d:ad:ef:b1:b7:ee:3b:d5:64:00:76:
f2:7f:bf:d4:cf:48:8f:de:11:57:97:2f:fb:53:b8:
20:51:88:a5:aa:57:c8:1b:79:64:48:e4:79:70:46:
0e:45:83:f2:de:b7:c1:fc:4f:f1:ba:8d:d8:57:64:
d8:e9:14:17:0b:43:b1:a9:06:82:85:95:af:88:b9:
0d:d3:6a:e9:bc:d0:a6:ca:8a:01:8e:03:e6:cf:19:
ee:94:3a:ba:10:e2:29:08:2a:b7:bc:3a:a3:29:9f:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:2C:09:83:77:62:8A:8B:60:2C:5F:81:94:BA:E4:C1:E2:98:25
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hVosCYN3YoqLYCxfgZS65MHimCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.62.0/23
194.32.249.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bd:65:7a:c1:12:96:86:04:90:72:fd:63:68:37:8f:a4:5c:
9c:8e:3e:44:fe:64:73:ac:35:72:17:5e:be:f9:61:2f:e3:6f:
77:dc:a1:78:91:0c:30:aa:4d:a5:05:cd:5b:52:2a:2d:d1:ff:
89:7f:17:ed:cf:86:69:80:6d:8a:37:18:d4:b4:5d:32:6d:a1:
48:d6:54:c8:8b:85:f5:97:bb:a7:14:cb:84:60:31:c9:9d:b5:
fc:ff:31:76:16:5d:f8:fd:4e:9f:6b:8c:9d:85:33:0a:f1:2e:
fb:54:75:b0:89:e6:48:14:65:7a:ad:85:d3:8e:73:ac:23:22:
dd:1b:7e:0c:4d:97:ce:c8:01:b5:09:00:49:ba:3a:22:ed:37:
e2:1f:f7:7a:01:cd:00:0a:38:04:87:31:2d:4a:f8:10:ff:3e:
8b:e3:9a:55:d9:b1:dd:e8:db:f4:e5:dd:aa:4d:42:b0:42:48:
a1:ea:79:14:09:16:3d:5a:a0:1f:e0:57:80:68:e4:74:9c:48:
6b:1d:91:ea:c8:0d:f2:82:6b:e3:ef:e4:b1:be:7d:22:5f:4d:
0b:bb:f2:96:31:66:d9:11:e1:f8:4f:6d:06:a6:83:76:7d:64:
76:f5:ee:e8:06:49:25:a8:a0:3e:cf:60:82:66:dd:c8:91:5d:
08:18:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:28 2026 by rpki-client