Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/HXHjwpKZ0hUuhA-ecTFWovLriWw.roa
File: HXHjwpKZ0hUuhA-ecTFWovLriWw.roa (raw, json)
Hash identifier: /sTU1en73B/4P9sdmgCdOcbF8vhNLR8j5kj2wC8xqfE=
Subject key identifier: 1D:71:E3:C2:92:99:D2:15:2E:84:0F:9E:71:31:56:A2:F2:EB:89:6C
Certificate issuer: /CN=579d549a3316e42571cca5f8380e2df59c2b34a0
Certificate serial: 019F3C53A914AF6AB65EF1ED5C7AAE1DA7FC
Authority key identifier: 57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/HXHjwpKZ0hUuhA-ecTFWovLriWw.roa
Signing time: Tue 07 Jul 2026 11:25:43 +0000
ROA not before: Tue 07 Jul 2026 11:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31736
IP address blocks: 193.135.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:53:a9:14:af:6a:b6:5e:f1:ed:5c:7a:ae:1d:a7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579d549a3316e42571cca5f8380e2df59c2b34a0
Validity
Not Before: Jul 7 11:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d71e3c29299d2152e840f9e713156a2f2eb896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:ea:a7:43:0b:fa:06:c9:ba:29:d5:ec:52:
73:9f:18:d8:84:c4:ec:b4:ce:26:0c:59:d4:88:94:
68:30:07:29:ab:3b:d7:0e:49:22:25:1b:09:a1:88:
8c:55:86:0b:4d:64:bf:62:8b:42:62:11:e6:45:18:
bc:35:6b:71:d4:5c:9c:a7:9e:50:1f:d1:1c:74:49:
42:e4:70:c3:5d:97:be:46:f2:fe:6d:8a:44:0a:55:
f2:31:ee:ce:6f:82:9f:f9:3e:92:67:b4:da:40:9c:
e1:7e:2f:9f:00:75:3c:52:53:9e:b5:97:c5:89:d0:
1a:c5:ae:28:65:99:36:34:d8:84:9f:2a:a3:21:66:
07:d9:cc:9f:72:14:c7:06:70:e1:bd:0a:32:be:23:
71:03:64:f5:d1:f3:f9:99:89:49:49:3d:68:66:86:
22:cd:59:dc:54:49:92:57:ce:df:06:9f:06:f7:5c:
3a:cd:3c:d9:56:4b:24:91:30:d9:6c:5d:e2:da:8d:
c6:a3:b4:0d:b8:f8:d0:5e:c7:d1:71:6d:f7:f6:78:
50:4c:6d:b2:48:20:49:b5:d0:17:df:4a:0a:8d:8f:
6b:a6:11:25:46:e1:da:6d:38:7c:2e:33:ae:09:ff:
6d:64:ee:e8:20:32:95:f2:69:f2:68:05:30:25:ab:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:E3:C2:92:99:D2:15:2E:84:0F:9E:71:31:56:A2:F2:EB:89:6C
X509v3 Authority Key Identifier:
keyid:57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/HXHjwpKZ0hUuhA-ecTFWovLriWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bf:42:29:c1:6c:4a:f4:cb:c6:3b:20:19:dc:04:d3:0c:50:
66:b0:a4:02:40:82:f5:dc:22:2a:51:d1:f1:06:04:37:61:58:
73:85:38:c7:af:30:a2:c5:fb:f4:dc:a8:e2:2d:7d:61:87:f1:
08:a5:5c:4d:36:93:f2:e3:42:55:3c:62:34:75:b7:21:a0:3b:
1b:d3:cd:85:35:75:32:47:40:a0:1d:45:c5:cf:86:79:39:98:
71:ec:29:a2:52:a9:b1:7c:f8:f7:ab:74:2a:b6:c5:68:6e:91:
4f:bb:7c:b8:d8:9e:b4:10:97:a7:10:3e:af:d2:fe:fa:58:4a:
8e:d9:fa:38:66:dc:8c:9a:aa:b3:75:9b:b9:74:96:03:ba:0d:
e9:f5:d8:68:49:26:21:9c:97:07:fa:f6:99:1d:2c:d7:df:1a:
1c:ff:f0:29:8e:ef:3e:ed:a2:c1:9a:e8:c7:27:52:3c:88:4e:
0f:39:c5:37:37:1e:aa:ab:1a:aa:e5:bf:c4:1c:fc:6c:a4:3a:
6f:3e:fa:e1:bd:db:65:fd:77:5c:6a:17:1e:df:38:4b:f6:d0:
db:22:72:23:dd:60:94:a4:4e:0d:d3:b4:89:b4:f4:90:ff:3a:
22:fe:5f:11:26:45:51:ee:24:05:c0:b6:86:08:8e:67:b7:47:
03:2e:fe:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ88U6kUr2q2XvHtXHquHaf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWQ1NDlhMzMxNmU0MjU3MWNjYTVmODM4MGUyZGY1OWMy
YjM0YTAwHhcNMjYwNzA3MTEyNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDcxZTNjMjkyOTlkMjE1MmU4NDBmOWU3MTMxNTZhMmYyZWI4OTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/qp0ML+gbJuinV7FJznxjYhMTs
tM4mDFnUiJRoMAcpqzvXDkkiJRsJoYiMVYYLTWS/YotCYhHmRRi8NWtx1Fycp55Q
H9EcdElC5HDDXZe+RvL+bYpEClXyMe7Ob4Kf+T6SZ7TaQJzhfi+fAHU8UlOetZfF
idAaxa4oZZk2NNiEnyqjIWYH2cyfchTHBnDhvQoyviNxA2T10fP5mYlJST1oZoYi
zVncVEmSV87fBp8G91w6zTzZVkskkTDZbF3i2o3Go7QNuPjQXsfRcW339nhQTG2y
SCBJtdAX30oKjY9rphElRuHabTh8LjOuCf9tZO7oIDKV8mnyaAUwJatrVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1x48KSmdIVLoQPnnExVqLy64lsMB8GA1UdIwQY
MBaAFFedVJozFuQlccyl+DgOLfWcKzSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yNDE0NWItMjMyNC00MzBkLWIwMmIt
NGE0NGViMGVhZjg2LzEvSFhIandwS1owaFV1aEEtZWNURldvdkxyaVd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yNDE0NWItMjMyNC00MzBkLWIwMmItNGE0NGViMGVhZjg2
LzEvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYceMA0G
CSqGSIb3DQEBCwUAA4IBAQA9v0IpwWxK9MvGOyAZ3ATTDFBmsKQCQIL13CIqUdHx
BgQ3YVhzhTjHrzCixfv03KjiLX1hh/EIpVxNNpPy40JVPGI0dbchoDsb082FNXUy
R0CgHUXFz4Z5OZhx7CmiUqmxfPj3q3QqtsVobpFPu3y42J60EJenED6v0v76WEqO
2fo4ZtyMmqqzdZu5dJYDug3p9dhoSSYhnJcH+vaZHSzX3xoc//Apju8+7aLBmujH
J1I8iE4POcU3Nx6qqxqq5b/EHPxspDpvPvrhvdtl/Xdcahce3zhL9tDbInIj3WCU
pE4N07SJtPSQ/zoi/l8RJkVR7iQFwLaGCI5nt0cDLv52
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:28 2026 by rpki-client