Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/HxyJ0VIuo-5QCdby3h9utQPfqr0.roa
File: HxyJ0VIuo-5QCdby3h9utQPfqr0.roa (raw, json)
Hash identifier: y5QqmXh4WKxc3YfWMLRJZuc5ufgudUqOp7HmDc/F9MU=
Subject key identifier: 1F:1C:89:D1:52:2E:A3:EE:50:09:D6:F2:DE:1F:6E:B5:03:DF:AA:BD
Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Certificate serial: 019F6FB07766823EBF1BA1E663F52C70F7FC
Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/HxyJ0VIuo-5QCdby3h9utQPfqr0.roa
Signing time: Fri 17 Jul 2026 10:47:43 +0000
ROA not before: Fri 17 Jul 2026 10:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47962
IP address blocks: 37.122.152.0/23 maxlen: 23
37.122.153.0/24 maxlen: 24
37.122.154.0/23 maxlen: 23
37.122.154.0/24 maxlen: 24
37.122.156.0/23 maxlen: 23
176.106.224.0/22 maxlen: 22
176.106.224.0/23 maxlen: 23
176.106.224.0/24 maxlen: 24
176.106.225.0/24 maxlen: 24
176.106.226.0/23 maxlen: 23
176.106.226.0/24 maxlen: 24
176.106.230.0/23 maxlen: 23
176.106.230.0/24 maxlen: 24
176.106.231.0/24 maxlen: 24
2a04:7800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:b0:77:66:82:3e:bf:1b:a1:e6:63:f5:2c:70:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c
Validity
Not Before: Jul 17 10:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f1c89d1522ea3ee5009d6f2de1f6eb503dfaabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:52:8f:7f:16:19:ce:26:ca:f8:7e:38:f3:
2e:b3:97:ed:43:bf:28:6d:6b:a5:ba:cf:66:16:a7:
43:4f:04:56:d4:bb:a1:94:5e:bf:7d:ad:a3:ba:d2:
86:ad:1b:f1:f0:e9:c3:d5:3c:35:ee:8a:52:53:84:
9b:9a:09:7e:19:fc:af:2f:8c:1e:9b:ba:75:ac:98:
0f:11:7b:c1:2d:d6:f6:16:d7:36:4a:67:ae:62:e8:
b5:71:2a:a6:96:98:c6:1e:53:db:61:44:c3:10:48:
6c:60:2d:3e:f6:6e:4a:1d:66:62:08:25:48:61:a3:
16:25:7f:36:30:d0:9b:37:c4:b1:fe:78:7b:af:80:
ac:a6:97:b5:ea:5a:44:9a:36:16:15:7b:61:3b:7a:
2a:6b:01:8d:e6:b4:8e:18:9e:eb:8c:c7:f9:25:d0:
71:12:c2:b4:ec:58:d9:34:12:59:79:ef:11:cf:84:
ea:cc:72:ba:5f:58:13:16:85:84:d4:96:fa:19:b9:
08:38:7e:09:f3:ef:e1:24:60:d6:85:1f:30:9c:14:
18:ba:ac:47:ac:61:08:2e:e5:46:af:f6:79:9c:f7:
e5:43:6c:25:bd:da:6e:73:fa:09:0b:39:be:2d:41:
28:af:e0:cb:27:e8:6b:8f:5b:9b:64:01:1f:25:ae:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:89:D1:52:2E:A3:EE:50:09:D6:F2:DE:1F:6E:B5:03:DF:AA:BD
X509v3 Authority Key Identifier:
keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/HxyJ0VIuo-5QCdby3h9utQPfqr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.152.0-37.122.157.255
176.106.224.0/22
176.106.230.0/23
IPv6:
2a04:7800::/29
Signature Algorithm: sha256WithRSAEncryption
5a:ac:72:a3:b7:e3:1a:c8:66:09:9b:5f:a2:d1:80:29:d0:2c:
28:c3:5e:b8:83:24:1a:5b:2c:d3:28:31:54:77:83:77:17:26:
42:a2:98:cb:45:08:14:84:aa:8e:91:0e:06:c0:c9:7f:b0:bb:
46:de:03:11:14:04:05:13:ad:f2:4e:24:b5:ab:e8:49:02:fb:
a3:e4:96:6c:17:2f:2e:7f:76:78:68:01:89:03:97:92:e9:a2:
53:4d:3c:1d:c8:5c:2e:63:ba:bd:a1:52:72:94:81:55:ff:5b:
97:80:c6:c4:7b:86:66:dc:13:04:7b:f6:9b:e0:98:9b:f8:ae:
1a:ec:7f:f8:3c:8c:a1:1c:3a:f0:9b:71:9b:5e:e0:6f:bc:4d:
1f:45:05:b7:73:90:25:f7:f2:18:1f:4c:66:f0:3f:14:92:29:
bf:28:e8:3d:4c:10:44:af:54:45:ae:7e:a6:e9:d0:32:96:2e:
d6:c1:3e:1b:10:5f:2d:35:bc:d2:7c:73:45:0e:7b:9e:8b:fc:
54:8f:0b:b9:82:06:ea:75:54:27:eb:34:6c:cc:1c:e6:a8:ba:
e5:7e:bb:b9:55:ec:2c:a3:27:c7:44:b1:c1:db:37:5d:55:64:
51:6d:48:d0:58:34:48:b9:1b:40:01:57:87:6c:de:80:b1:6c:
46:33:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:41 2026 by rpki-client