Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa
File: HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa (raw, json)
Hash identifier: qXXJjyn66lMh76djAuMwFFUTchPWx0RZgcoqaccSxA4=
Subject key identifier: 1E:65:F7:5A:B3:8A:E0:BA:2D:87:0D:58:35:9F:F9:85:0C:11:3C:BC
Certificate issuer: /CN=daf3570c75849768d6e0cdd2b77527142d715554
Certificate serial: 019F2368C929845A26C679B2B6E1A9C4D7B2
Authority key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43885
IP address blocks: 185.112.79.0/24 maxlen: 24
185.247.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c9:29:84:5a:26:c6:79:b2:b6:e1:a9:c4:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf3570c75849768d6e0cdd2b77527142d715554
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e65f75ab38ae0ba2d870d58359ff9850c113cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:f0:52:11:97:a7:58:6f:83:56:91:6f:11:
52:10:df:dc:bd:04:93:14:dd:f8:8f:a1:10:45:69:
a9:1e:74:9d:4c:60:e8:5f:59:0d:3a:d3:fd:01:50:
51:8c:63:59:95:6b:c8:f7:c0:67:fd:fb:ad:9e:25:
2f:27:51:22:af:92:69:c3:77:e0:05:04:b6:55:ad:
71:e4:e7:db:8f:53:05:1c:e3:67:87:a9:b9:b6:d2:
b2:ae:6a:7e:d4:69:e8:87:c7:23:3d:02:ec:0f:99:
eb:fa:b5:fa:e3:d1:a5:a5:f7:76:e6:99:09:f3:10:
6a:06:6b:e5:e8:b3:d8:d4:4e:7b:1c:cb:07:66:96:
6b:71:1c:e6:f6:d3:d3:9e:d8:8b:77:cf:17:b6:64:
42:23:66:b9:59:22:c0:a6:05:91:d1:6a:00:55:0d:
9a:2d:10:47:8b:b8:49:70:e3:c7:41:70:0a:8e:7d:
6e:11:90:79:05:de:99:b6:74:da:f4:4c:ff:39:e4:
3a:0d:f7:06:6c:5b:d4:3d:88:07:49:bd:7d:0e:d0:
a2:80:f4:e8:84:f3:0f:ec:95:19:96:9e:fe:76:4f:
1e:ac:d6:cf:fd:94:d9:6b:03:13:06:d4:d9:cd:98:
a3:d6:fd:50:6d:bb:8e:67:ed:32:ff:dc:38:3a:c9:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:F7:5A:B3:8A:E0:BA:2D:87:0D:58:35:9F:F9:85:0C:11:3C:BC
X509v3 Authority Key Identifier:
keyid:DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.79.0/24
185.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:85:ae:16:74:a4:2c:b5:55:29:5c:1a:23:d8:cd:d4:40:87:
49:9c:6f:2f:7b:8a:9a:52:00:0b:47:a8:2c:53:ac:18:8f:1e:
d7:43:0b:11:6c:12:15:1f:01:94:e0:e9:d7:12:67:ba:a5:57:
ce:73:89:2e:8c:fc:dd:4c:35:7e:63:ca:8b:8a:b6:fa:49:74:
33:53:a9:22:99:a2:e1:c4:b6:ee:e5:7a:91:b4:ba:42:05:01:
b1:77:58:86:2d:55:d9:91:6d:46:05:15:58:22:40:2b:3d:17:
b5:e7:ed:11:99:19:0f:07:d3:ad:84:e7:f8:cd:0e:af:af:50:
52:8a:59:68:96:ad:60:43:b8:f1:e9:ff:fb:3b:8a:11:d9:c9:
d3:52:12:ac:48:cb:7d:36:8e:ad:ea:ee:a7:86:c3:35:d4:a7:
c9:2e:26:b4:44:5f:2b:08:fc:f4:7b:6b:75:bb:10:2a:0b:a4:
3c:af:00:09:85:d7:e3:68:19:70:3c:09:41:30:5e:38:90:27:
80:bc:2b:03:2f:d6:ea:c1:35:f6:0e:e0:a4:b3:d6:16:24:0c:
91:60:0e:d7:63:3c:08:d9:3f:12:9d:e2:32:d0:2a:2e:44:f3:
99:4a:8d:7b:f5:4f:f6:ca:14:a0:a4:a3:0f:39:3c:76:21:47:
6f:a6:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:40 2026 by rpki-client