Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/hzNe4dFhgHd6MzhrSRCVdSqxQW8.roa
File: hzNe4dFhgHd6MzhrSRCVdSqxQW8.roa (raw, json)
Hash identifier: lgWuoQ75Y33cgaR+Mh71ZLZPfJA3Voe5i1wrhcO2ir8=
Subject key identifier: 87:33:5E:E1:D1:61:80:77:7A:33:38:6B:49:10:95:75:2A:B1:41:6F
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A1C93FB063575D54359A664D3F916F2DD6
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/hzNe4dFhgHd6MzhrSRCVdSqxQW8.roa
Signing time: Wed 11 Nov 2026 06:15:56 +0000
ROA not before: Wed 11 Nov 2026 06:15:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 79.110.236.0/24 maxlen: 32
146.19.160.0/24 maxlen: 32
212.52.12.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:3f:b0:63:57:5d:54:35:9a:66:4d:3f:91:6f:2d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Nov 11 06:15:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87335ee1d16180777a33386b491095752ab1416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:83:e2:9f:8f:96:39:13:aa:6a:56:82:f0:
56:e2:e3:54:0e:05:52:55:61:b2:b2:9b:db:3b:19:
07:ab:f0:db:4f:3c:09:49:67:9d:2d:c6:75:fa:85:
fb:e3:00:15:ed:c6:d9:2f:17:a9:24:1e:19:09:b7:
43:9f:81:f5:e7:bd:5e:f1:b1:32:60:88:41:f2:80:
83:09:88:2c:fe:f8:22:ce:56:93:68:de:ad:81:12:
06:68:36:b2:d2:3c:e3:89:7f:33:81:98:ff:bb:a7:
9b:c1:39:34:47:c6:ef:19:bf:4f:fa:90:06:5a:f2:
ad:0f:4f:c3:d5:13:80:69:03:41:ed:82:93:ed:42:
83:e1:90:b3:96:24:3d:0a:3b:b7:08:e4:49:7c:29:
03:e3:10:42:62:d4:95:a3:2e:1b:2b:f5:c2:30:aa:
87:fa:59:93:74:b1:7d:43:b3:ae:73:ff:6e:b9:eb:
77:f2:2c:b9:15:b3:ba:a3:0b:15:ea:09:0d:d9:8a:
93:08:e7:09:80:f7:b7:5a:26:47:88:61:c8:ca:de:
ba:99:5c:4b:92:bf:ec:63:e5:68:36:2e:2f:aa:42:
04:b2:7e:c5:f4:f5:94:de:70:a9:4e:0e:c6:60:c2:
0d:54:8c:66:8b:1a:85:13:14:df:b5:f3:af:2f:7a:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:5E:E1:D1:61:80:77:7A:33:38:6B:49:10:95:75:2A:B1:41:6F
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/hzNe4dFhgHd6MzhrSRCVdSqxQW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.236.0/24
146.19.160.0/24
212.52.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9a:6c:9b:c8:2c:00:95:75:64:cb:32:86:f7:19:b9:79:0f:
70:d0:34:70:8e:4c:21:e0:3a:0c:41:66:65:3c:61:bb:f1:ad:
23:59:35:a2:de:29:45:fa:ae:d2:00:ea:78:ee:df:42:16:b7:
4c:7c:41:9a:e8:4a:a2:60:f9:0d:5d:8b:e0:01:81:47:68:9d:
a2:c5:98:f3:32:68:bd:78:da:16:44:d6:ee:9b:0a:49:c0:8e:
dd:17:80:1c:39:f1:f7:fd:ba:2c:f6:86:e6:b7:c6:b9:ed:89:
ad:1e:fb:59:b8:42:e4:46:77:30:84:8e:69:a9:fa:7d:0b:6c:
a2:ec:73:31:74:79:d4:76:d8:f8:b5:dd:1d:33:57:5b:a2:0e:
73:ea:56:9f:1e:04:cb:d0:6c:44:93:67:90:21:be:4f:68:1a:
f5:23:4d:85:88:45:b6:2c:61:36:6f:e4:1d:e4:d1:6b:55:65:
ef:c5:6d:06:63:1a:89:9b:c3:2e:d9:65:37:5e:f2:84:ae:c4:
51:ce:47:f3:76:cc:1f:55:f3:79:06:d3:b6:48:82:31:bb:67:
8f:e1:14:f8:e0:66:8b:ef:e8:70:6f:a8:95:05:3d:45:76:27:
00:90:95:5d:8e:fd:f0:60:5b:11:c1:a9:1c:4a:82:0f:e5:6a:
33:ed:4e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:30 2026 by rpki-client