Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/mh_TdtzBIEJPW0ulUNVzoJPlQfo.roa
File: mh_TdtzBIEJPW0ulUNVzoJPlQfo.roa (raw, json)
Hash identifier: VHQC5JXNXPL7dViMaRJsghQyLf8Q641q1jtdoqA0N7c=
Subject key identifier: 9A:1F:D3:76:DC:C1:20:42:4F:5B:4B:A5:50:D5:73:A0:93:E5:41:FA
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 019DDAA12D64A0EEE01A7328D086D520C205
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/mh_TdtzBIEJPW0ulUNVzoJPlQfo.roa
Signing time: Wed 29 Apr 2026 19:04:49 +0000
ROA not before: Wed 29 Apr 2026 19:04:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32338
IP address blocks: 45.84.28.0/23 maxlen: 23
45.84.30.0/24 maxlen: 24
45.84.31.0/24 maxlen: 24
185.73.220.0/22 maxlen: 24
185.149.132.0/23 maxlen: 23
185.149.134.0/24 maxlen: 24
185.213.88.0/22 maxlen: 24
2a05:44c0::/29 maxlen: 32
2a07:68c0::/29 maxlen: 48
2a0b:85c0::/32 maxlen: 32
2a0e:9480::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:a1:2d:64:a0:ee:e0:1a:73:28:d0:86:d5:20:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Apr 29 19:04:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a1fd376dcc120424f5b4ba550d573a093e541fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:e3:37:1b:58:a9:34:e8:ac:9c:79:11:8c:
b4:8f:01:a0:26:a2:5b:78:b8:cc:4f:20:b4:5b:45:
b2:e5:9c:11:09:3e:01:4a:81:ba:f7:eb:e7:0c:41:
1b:d1:1f:35:0b:eb:28:44:8d:1c:29:24:32:5b:5e:
03:9c:2d:a7:ef:e7:3d:75:8c:f5:79:e2:2b:0c:94:
e5:25:a6:72:50:e9:9d:f0:b1:d9:02:ef:45:14:ff:
43:68:ec:fb:c7:e2:48:a6:89:a5:30:32:0b:94:be:
50:9d:ab:e3:25:cf:71:33:55:c7:8c:f5:01:68:29:
0d:9e:02:e3:24:65:03:50:9e:2e:90:9f:f2:b7:e5:
99:60:1f:18:3f:76:46:18:1d:56:54:0a:b3:a6:30:
2a:17:94:34:f4:0c:ec:fc:ad:59:65:60:e9:55:13:
68:4d:08:7c:a2:66:0f:80:a3:89:cd:ca:d4:dd:34:
fe:11:87:63:62:ed:7a:61:e8:a5:7e:4a:75:a5:da:
77:80:9d:cb:cf:12:b4:64:6e:ca:60:9b:af:1f:aa:
00:08:82:4c:12:f9:7b:67:83:b7:07:95:77:74:5c:
68:e9:87:9b:21:d5:ba:ee:2c:60:02:30:59:1f:53:
80:81:1d:10:cc:5a:a9:02:5a:12:85:58:15:9a:d4:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:D3:76:DC:C1:20:42:4F:5B:4B:A5:50:D5:73:A0:93:E5:41:FA
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/mh_TdtzBIEJPW0ulUNVzoJPlQfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.28.0/22
185.73.220.0/22
185.149.132.0-185.149.134.255
185.213.88.0/22
IPv6:
2a05:44c0::/29
2a07:68c0::/29
2a0b:85c0::/32
2a0e:9480::/29
Signature Algorithm: sha256WithRSAEncryption
d4:3d:b9:0f:1b:03:dd:82:5c:b3:a9:71:b7:fa:4d:e5:2c:77:
4d:8c:d2:b1:a4:76:4f:c8:a2:ac:6d:96:7e:58:fc:5f:da:84:
ab:79:15:c1:27:72:e5:44:93:92:08:ce:df:63:7d:5a:b8:38:
24:ce:78:0a:00:b1:e4:a6:9e:f8:27:bc:7b:3c:25:cd:cd:d8:
e0:8e:32:33:fd:b8:8f:9a:f3:36:fc:bf:1b:d9:f1:7c:21:f9:
dd:3c:7b:af:86:05:c5:39:21:c2:5e:10:4d:27:b6:76:a5:26:
6f:26:85:04:87:3f:ce:e7:26:a6:b2:1d:16:bc:ac:f6:eb:ce:
b1:89:88:6c:5a:1c:34:4d:be:4f:a5:c7:be:dc:2d:c3:30:33:
39:ce:c5:e3:1d:6f:71:6b:5a:12:13:36:0f:05:de:8a:fb:76:
26:26:c6:ba:82:8d:3f:11:0e:0b:30:1a:cc:0a:cc:a5:4a:fd:
9e:bc:fa:f1:fb:b4:e6:f9:76:b8:9c:5b:e1:0f:12:47:c2:7f:
95:82:6d:fa:ce:1e:34:c9:47:2c:bd:48:04:3a:ff:a1:a1:5c:
e7:ea:2a:ac:e5:52:9f:ee:2f:20:50:25:44:0d:49:18:c0:18:
07:25:71:b9:0e:7d:04:b0:e2:7b:e7:8d:77:ae:5e:e8:99:15:
b7:6d:ea:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:48:27 2026 by rpki-client