Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/H7lQoACnsFlHoo9HQV1IBRHtwoo.roa
File: H7lQoACnsFlHoo9HQV1IBRHtwoo.roa (raw, json)
Hash identifier: NNgGcddEdzA3iYBWngh1e1ZZud+h+6ZZttNj6RYZ3PU=
Subject key identifier: 1F:B9:50:A0:00:A7:B0:59:47:A2:8F:47:41:5D:48:05:11:ED:C2:8A
Certificate issuer: /CN=95be849d9e7037cb502218a85b2c997eb21ad498
Certificate serial: 019F23691BBF2A8B61E83BDAFD5EC0154A3C
Authority key identifier: 95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/H7lQoACnsFlHoo9HQV1IBRHtwoo.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197882
IP address blocks: 130.255.88.0/24 maxlen: 24
130.255.89.0/24 maxlen: 24
130.255.90.0/24 maxlen: 24
130.255.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1b:bf:2a:8b:61:e8:3b:da:fd:5e:c0:15:4a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95be849d9e7037cb502218a85b2c997eb21ad498
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fb950a000a7b05947a28f47415d480511edc28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:1b:c7:56:46:a2:20:ae:5c:72:75:47:bb:
3b:97:ce:61:b9:7e:03:b1:56:56:52:d3:df:3e:8f:
a1:10:52:bf:4a:48:e1:ac:dc:57:11:93:7a:ae:99:
5c:97:89:21:91:51:43:ad:fb:3b:1d:4e:75:15:52:
22:7b:d1:4d:ec:5d:ef:01:24:e0:13:e1:4b:44:f1:
8f:91:91:9c:84:56:8c:46:d8:21:b0:fb:20:7d:fb:
80:d9:94:61:2d:12:9a:32:6f:0f:27:3b:ea:05:8c:
23:15:1e:84:bf:fd:e8:16:a0:c8:9e:0f:18:a3:48:
86:f4:a5:3b:e9:22:ae:ef:ab:d2:be:11:75:0d:4c:
0e:17:53:0c:86:a3:bc:7b:7e:37:7c:6b:fd:86:63:
a0:3f:6c:f2:a1:b4:4d:4d:ba:b7:7e:8e:c5:34:18:
7d:4d:42:da:c9:af:d2:b5:b2:fd:02:63:c8:eb:81:
a2:d9:f5:64:c5:c9:c8:82:67:c1:4b:73:47:22:94:
1d:6b:d8:c6:79:88:3f:22:b1:18:3e:c5:30:73:da:
2f:61:45:0d:c6:95:bd:58:e0:c7:1c:ae:47:12:79:
e4:79:43:6e:16:83:50:d8:91:32:1b:29:12:1a:0a:
89:87:79:32:94:0d:99:49:47:54:02:2f:e8:62:e5:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B9:50:A0:00:A7:B0:59:47:A2:8F:47:41:5D:48:05:11:ED:C2:8A
X509v3 Authority Key Identifier:
keyid:95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/H7lQoACnsFlHoo9HQV1IBRHtwoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:32:80:99:71:c4:b3:ad:ee:1a:c3:5d:9b:5c:d6:92:14:89:
bf:5d:93:a8:36:0d:1f:e9:f2:b1:fa:86:d8:3d:e5:7a:24:f2:
7f:0e:e6:d4:48:64:65:72:5f:39:f7:6d:e5:16:12:09:b2:c2:
3d:1d:0d:5b:f2:a0:79:7d:a1:3b:fc:14:02:1a:32:dd:81:59:
35:83:e5:42:24:b1:a9:76:91:45:6f:f9:a9:4f:05:6a:fd:ca:
4f:83:51:23:4d:04:a2:6e:36:a5:ab:56:bb:26:3d:0b:ea:2e:
7c:02:60:a5:da:8b:7f:a5:d9:c0:5e:18:fc:04:c4:88:01:28:
87:98:13:32:a8:7f:4e:25:9d:c5:27:27:b9:6a:6d:26:d2:65:
35:5e:d4:74:ee:9e:b0:98:82:3e:2a:0c:96:9b:51:4b:3d:a9:
e3:9d:3f:91:be:fd:78:2f:22:22:b9:2f:07:9c:43:eb:d1:a2:
ec:2a:6d:4c:95:dc:6a:46:3e:c4:58:4c:0e:40:e3:39:f8:56:
90:75:60:0e:ce:12:b5:4e:52:2d:d7:5b:b2:c4:49:dd:0a:b4:
e2:74:e0:12:47:0b:24:ad:1f:7c:08:3f:c6:79:d5:d3:a0:ab:
44:1d:4f:81:2b:f1:6f:04:50:e1:41:60:2f:59:bf:bc:6b:cd:
25:92:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:30 2026 by rpki-client