Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/HPjdErKX1660Wu5s3Fbu_90wV10.roa
File: HPjdErKX1660Wu5s3Fbu_90wV10.roa (raw, json)
Hash identifier: XoWOK8TjiKV/F4rH7IzW3ugdSSR8xjGdlOumvhasewI=
Subject key identifier: 1C:F8:DD:12:B2:97:D7:AE:B4:5A:EE:6C:DC:56:EE:FF:DD:30:57:5D
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 019E0CBB860A9D712D22AC45E04DA152DACE
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/HPjdErKX1660Wu5s3Fbu_90wV10.roa
Signing time: Sat 09 May 2026 12:34:36 +0000
ROA not before: Sat 09 May 2026 12:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60453
IP address blocks: 89.33.107.0/24 maxlen: 24
89.42.108.0/23 maxlen: 23
89.43.79.0/24 maxlen: 24
185.128.96.0/22 maxlen: 22
185.197.149.0/24 maxlen: 24
195.62.51.0/24 maxlen: 24
213.170.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:bb:86:0a:9d:71:2d:22:ac:45:e0:4d:a1:52:da:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: May 9 12:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cf8dd12b297d7aeb45aee6cdc56eeffdd30575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:8f:da:9b:3f:6b:91:54:12:c2:31:32:80:
48:52:34:6a:dc:d0:43:36:d5:75:db:25:1a:31:ee:
ab:b0:56:f0:2d:3b:4b:b4:b9:49:5c:63:32:9c:9f:
15:05:26:22:4f:c6:a5:60:e2:d8:d1:14:4c:bb:2a:
71:46:ff:ab:bb:26:fe:4b:23:2b:ba:77:6f:a5:1b:
e0:c6:1d:25:1f:5d:12:dd:9b:4e:08:59:cc:9d:c6:
85:be:ed:63:37:64:96:d7:77:8f:38:5e:01:be:0a:
1f:ba:9b:4e:cc:56:27:17:c3:b3:96:a4:73:87:58:
5a:fb:c0:c6:21:90:01:11:93:c9:ea:94:d0:e2:86:
73:50:2d:bb:d1:42:9f:1c:5a:05:a6:b0:7e:3a:95:
c3:03:01:06:ef:40:76:3e:e1:13:6a:d2:83:6a:58:
f5:bf:2b:f6:0d:46:fc:32:32:a2:fc:57:dd:15:2a:
cc:8d:bb:f4:94:18:0e:6d:9f:d9:91:6a:89:76:f3:
05:16:26:b6:50:63:73:b5:69:2e:2d:79:a4:83:f1:
b3:dc:d0:f7:db:7a:cc:61:1d:21:66:05:c8:b2:9e:
32:e4:3f:31:f2:d0:3f:93:d4:51:29:ff:b1:59:18:
48:b6:57:8e:b9:39:f4:3a:85:58:c2:b5:b2:a9:ba:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:DD:12:B2:97:D7:AE:B4:5A:EE:6C:DC:56:EE:FF:DD:30:57:5D
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/HPjdErKX1660Wu5s3Fbu_90wV10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.107.0/24
89.42.108.0/23
89.43.79.0/24
185.128.96.0/22
185.197.149.0/24
195.62.51.0/24
213.170.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:ef:e9:8a:74:05:77:d6:a0:c3:8a:9f:ea:37:f0:4e:c8:ed:
53:38:30:10:7c:88:60:0a:00:72:78:cc:35:40:c0:76:18:37:
35:0c:f3:c4:76:ee:b9:b5:53:c2:d1:cb:e3:8f:ba:7a:56:37:
06:d1:ba:c7:b4:d4:c8:5e:07:2b:d8:83:5a:a2:f4:69:4a:37:
74:c1:6a:03:89:97:d2:24:5a:6b:33:ce:b9:22:e5:2c:d2:96:
72:4b:79:39:ef:2d:aa:bc:ab:03:17:dd:73:22:11:1f:20:df:
11:2b:1a:45:bf:bc:33:a6:f0:3f:46:b9:e0:7d:76:88:7b:03:
cc:48:91:1c:34:2b:74:79:d4:c3:da:34:a2:5f:7b:91:34:0d:
2e:38:06:4d:83:7f:21:90:70:4b:a6:15:e1:d3:e6:34:f9:d7:
a0:21:73:ae:db:84:02:b2:8c:de:0a:60:af:57:73:51:18:d5:
fb:29:f7:16:f5:68:68:97:ec:d9:6f:95:01:d0:8a:78:9a:2c:
32:14:50:8c:a8:70:44:dd:e9:93:c5:d1:a1:06:bc:83:80:ec:
60:50:20:ff:24:90:c7:58:04:bd:71:1b:71:02:c4:0f:aa:fb:
14:cc:6b:6c:39:52:aa:d2:7a:bb:91:37:5f:03:70:42:ae:cc:
ca:3e:9b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:40 2026 by rpki-client