Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/gHd7SHBnMWKDjZeHnEPNqJW_wj4.roa
File: gHd7SHBnMWKDjZeHnEPNqJW_wj4.roa (raw, json)
Hash identifier: DTkls0YqvKi9jh4xHfj0exgpQkiz0PhDPblkKtEknNk=
Subject key identifier: 80:77:7B:48:70:67:31:62:83:8D:97:87:9C:43:CD:A8:95:BF:C2:3E
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 019B7EA69A37FD64242989542870420B8C52
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/gHd7SHBnMWKDjZeHnEPNqJW_wj4.roa
Signing time: Fri 02 Jan 2026 12:20:06 +0000
ROA not before: Fri 02 Jan 2026 12:20:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47569
IP address blocks: 79.110.240.0/24 maxlen: 24
79.110.241.0/24 maxlen: 24
79.110.242.0/24 maxlen: 24
79.110.243.0/24 maxlen: 24
79.110.244.0/24 maxlen: 24
79.110.245.0/24 maxlen: 24
79.110.246.0/24 maxlen: 24
79.110.247.0/24 maxlen: 24
79.110.248.0/24 maxlen: 24
79.110.249.0/24 maxlen: 24
79.110.250.0/24 maxlen: 24
79.110.251.0/24 maxlen: 24
79.110.252.0/24 maxlen: 24
79.110.253.0/24 maxlen: 24
79.110.254.0/24 maxlen: 24
79.110.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:9a:37:fd:64:24:29:89:54:28:70:42:0b:8c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Jan 2 12:20:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80777b4870673162838d97879c43cda895bfc23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:ef:a0:fa:a7:ce:d7:33:48:3a:10:4d:53:
b3:bf:30:49:d2:48:7a:c5:45:5c:d7:f0:ca:53:9a:
a8:4b:f7:5f:8a:91:d9:4c:81:2b:19:55:16:bc:eb:
bb:fb:36:73:0a:53:19:08:ff:56:c6:c4:f5:76:64:
8f:b5:f1:98:85:8b:56:8b:06:5d:3d:27:09:43:4c:
0b:e1:4d:c9:a3:95:a8:f2:63:d7:8e:e3:73:ad:a1:
87:26:6d:f1:6d:d0:49:66:ed:f1:31:fd:c7:6b:27:
ad:bb:62:ba:ed:10:5b:a2:41:19:08:bf:6e:00:0d:
64:a9:b4:7c:1c:a8:02:d7:86:df:11:28:b2:1e:74:
91:06:53:63:c5:08:1a:7d:f9:a2:46:83:c7:d1:0e:
86:a1:ad:f2:14:e3:80:14:94:6a:0b:f9:f6:6b:21:
af:e3:b3:0f:25:6d:ef:d7:ba:52:ea:73:c9:c5:ad:
4a:5e:ac:cc:fb:4c:8c:1e:cf:23:f2:63:8a:1b:99:
18:92:b8:bb:2f:29:e9:a5:2e:f4:e4:39:51:1c:df:
b5:1d:b3:20:22:db:2a:11:c9:63:37:f6:f6:1b:7c:
b3:53:00:b9:48:46:0c:76:79:fc:93:01:74:9c:51:
75:65:15:db:94:b9:a6:fb:e0:18:d0:1a:0a:9f:1e:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:7B:48:70:67:31:62:83:8D:97:87:9C:43:CD:A8:95:BF:C2:3E
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/gHd7SHBnMWKDjZeHnEPNqJW_wj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.240.0/20
Signature Algorithm: sha256WithRSAEncryption
65:e2:af:16:b3:41:e8:53:6e:06:9b:7f:84:f5:68:8e:55:af:
17:86:b0:98:15:a3:4d:23:99:ed:b5:ea:74:19:f7:46:a2:6a:
d0:eb:fd:48:4b:48:b7:ef:e3:95:d9:b5:93:ec:d9:e1:06:37:
50:91:94:fb:08:bf:3a:90:46:ca:59:a0:82:38:94:e9:29:cf:
b9:27:65:e8:55:7e:30:71:c6:56:5c:5b:3d:92:8e:01:ac:65:
13:aa:71:cf:8b:1d:54:18:52:a5:30:be:b3:fb:db:5a:73:27:
06:aa:ae:49:f9:2c:72:74:2d:e7:e8:1a:ed:8d:e4:42:d6:9c:
43:78:56:82:e9:15:bc:df:40:cf:78:d1:ad:da:ac:ef:05:a2:
76:8a:e1:56:a7:82:5f:c1:87:a9:b2:fe:1f:8b:81:67:5a:c7:
15:52:d0:86:d7:fa:f0:a3:8e:17:00:43:42:1a:79:68:d3:82:
a8:86:67:ee:fa:1e:d6:7e:43:df:5c:01:a1:38:d6:1a:39:49:
e4:b7:04:af:b3:92:19:ae:ab:69:59:a1:f2:c5:67:6b:ab:d1:
6c:83:c1:56:b9:2f:fb:42:e6:25:fe:fc:4b:9a:1e:39:72:c8:
f1:b8:70:c4:cd:36:53:81:50:34:e0:73:4b:34:14:b6:8c:8c:
f7:1d:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:51:57 2026 by rpki-client