Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/HxAmguSxXpGyDH-xXiJflZk79M4.roa
File: HxAmguSxXpGyDH-xXiJflZk79M4.roa (raw, json)
Hash identifier: g9Fkj7kdnOVRjgWMYZ9SuygJGXHhDWfYa1t92jixGec=
Subject key identifier: 1F:10:26:82:E4:B1:5E:91:B2:0C:7F:B1:5E:22:5F:95:99:3B:F4:CE
Certificate issuer: /CN=ec9a21c3ad48e5f5a5ea4b791a32f83a35a628ab
Certificate serial: 019F8EAA8A9BFCD929384C492037C2F18543
Authority key identifier: EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/HxAmguSxXpGyDH-xXiJflZk79M4.roa
Signing time: Thu 23 Jul 2026 11:09:29 +0000
ROA not before: Thu 23 Jul 2026 11:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2108
IP address blocks: 91.142.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:aa:8a:9b:fc:d9:29:38:4c:49:20:37:c2:f1:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9a21c3ad48e5f5a5ea4b791a32f83a35a628ab
Validity
Not Before: Jul 23 11:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f102682e4b15e91b20c7fb15e225f95993bf4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:65:54:df:73:45:d1:bb:85:99:67:54:c5:
68:e0:2e:f8:87:ee:f4:3b:83:41:93:80:a7:a5:70:
2a:90:46:38:3d:12:45:e5:e2:67:b6:3f:74:e8:d0:
f0:0b:0d:4d:eb:11:b5:a3:63:45:4c:0c:0b:c0:9a:
75:1f:a0:c0:4a:c4:79:94:a1:02:68:f5:c8:a2:94:
88:c8:dd:1f:11:12:eb:31:63:65:22:0c:1f:08:6e:
46:16:1b:35:79:3e:64:0a:10:34:ee:da:37:cf:d7:
bc:0c:37:7c:91:19:ec:31:be:3f:9d:be:36:66:98:
4a:ba:45:73:e6:d1:11:24:53:78:1d:a4:ab:18:9d:
e5:0f:13:62:8a:9b:99:4b:da:97:bf:57:81:05:cb:
00:33:07:60:5f:fb:6e:fe:e8:0c:65:2f:31:75:93:
08:2d:4a:14:b6:ac:d1:c5:3f:a7:ed:d6:b1:f6:b7:
0c:2f:7d:2f:fa:4e:d3:b2:62:e6:90:d4:0e:c0:7a:
66:d4:6c:74:9a:e6:ad:b6:2d:e8:83:9a:84:51:9c:
05:f3:3c:92:03:b1:cc:f8:19:3e:7b:d2:3c:3c:ab:
30:61:97:68:12:e6:e2:31:50:d0:18:2d:2f:da:42:
73:93:c9:8c:b6:18:5a:52:d8:ce:d9:bb:f7:82:3a:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:26:82:E4:B1:5E:91:B2:0C:7F:B1:5E:22:5F:95:99:3B:F4:CE
X509v3 Authority Key Identifier:
keyid:EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/HxAmguSxXpGyDH-xXiJflZk79M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:27:8c:d2:e0:a3:21:6a:fa:fa:0f:02:9a:84:5c:76:d5:97:
20:2b:a4:72:8c:c3:e2:af:1d:43:7f:29:7e:f1:a4:b2:f6:b0:
9a:23:e2:bc:12:2e:57:61:2b:c6:e8:08:6e:ba:ad:44:e1:16:
79:50:0f:d8:a4:fe:52:e9:9e:79:35:09:a4:62:47:42:ea:30:
6c:2e:9a:5c:27:33:b3:18:c4:6d:88:34:d1:ff:db:96:ef:72:
2f:1f:be:98:52:65:35:e5:76:09:b4:9b:79:0c:35:00:6f:e6:
7b:69:e1:b8:ad:e7:4e:84:9c:66:8f:c7:eb:87:e1:21:f5:63:
62:db:cf:c0:09:e0:fb:7b:bb:9c:8a:0e:40:9e:fb:cd:b3:13:
75:0a:16:f0:60:98:eb:bc:71:ea:5d:9a:07:f8:dd:08:99:76:
c6:a6:97:40:33:88:d9:ba:58:de:8e:92:42:ae:ab:55:7b:a8:
e3:e1:ad:c0:a9:fb:35:6b:43:ea:9a:cf:45:f3:c1:8a:da:a5:
5a:4e:b3:f3:f1:97:57:ff:12:22:fb:d9:7b:6e:74:6f:92:3a:
a1:03:88:4f:1f:e2:33:7b:93:d5:8c:09:e1:c3:fe:9e:1c:7e:
61:01:56:98:82:d2:58:1a:01:6c:ad:6e:8d:8e:fb:a8:e0:f8:
0f:0e:f4:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+Oqoqb/NkpOExJIDfC8YVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOWEyMWMzYWQ0OGU1ZjVhNWVhNGI3OTFhMzJmODNhMzVh
NjI4YWIwHhcNMjYwNzIzMTEwOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjEwMjY4MmU0YjE1ZTkxYjIwYzdmYjE1ZTIyNWY5NTk5M2JmNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hlVN9zRdG7hZlnVMVo4C74h+70
O4NBk4CnpXAqkEY4PRJF5eJntj906NDwCw1N6xG1o2NFTAwLwJp1H6DASsR5lKEC
aPXIopSIyN0fERLrMWNlIgwfCG5GFhs1eT5kChA07to3z9e8DDd8kRnsMb4/nb42
ZphKukVz5tERJFN4HaSrGJ3lDxNiipuZS9qXv1eBBcsAMwdgX/tu/ugMZS8xdZMI
LUoUtqzRxT+n7dax9rcML30v+k7TsmLmkNQOwHpm1Gx0muatti3og5qEUZwF8zyS
A7HM+Bk+e9I8PKswYZdoEubiMVDQGC0v2kJzk8mMthhaUtjO2bv3gjpZIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB8QJoLksV6Rsgx/sV4iX5WZO/TOMB8GA1UdIwQY
MBaAFOyaIcOtSOX1pepLeRoy+Do1piirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pvaHc2MUk1ZldsNmt0NUdqTDRPaldtS0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zMzRiMTItYjE3Yy00YmY3LTgxOTkt
YTQ1NjNhMjFhMzc4LzEvSHhBbWd1U3hYcEd5REgteFhpSmZsWms3OU00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zMzRiMTItYjE3Yy00YmY3LTgxOTktYTQ1NjNhMjFhMzc4
LzEvN0pvaHc2MUk1ZldsNmt0NUdqTDRPaldtS0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW46LMA0G
CSqGSIb3DQEBCwUAA4IBAQDQJ4zS4KMhavr6DwKahFx21ZcgK6RyjMPirx1Dfyl+
8aSy9rCaI+K8Ei5XYSvG6Ahuuq1E4RZ5UA/YpP5S6Z55NQmkYkdC6jBsLppcJzOz
GMRtiDTR/9uW73IvH76YUmU15XYJtJt5DDUAb+Z7aeG4redOhJxmj8frh+Eh9WNi
28/ACeD7e7ucig5AnvvNsxN1ChbwYJjrvHHqXZoH+N0ImXbGppdAM4jZuljejpJC
rqtVe6jj4a3Aqfs1a0Pqms9F88GK2qVaTrPz8ZdX/xIi+9l7bnRvkjqhA4hPH+Iz
e5PVjAnhw/6eHH5hAVaYgtJYGgFsrW6Njvuo4PgPDvRa
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:13 2026 by rpki-client