Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/h4HTnmNQ40S0AlgZb0tILyqRtAs.roa
File: h4HTnmNQ40S0AlgZb0tILyqRtAs.roa (raw, json)
Hash identifier: x8PyCmmrpbL3asDF+bPUyXhIWSTsgb0lr6OUsDywpqw=
Subject key identifier: 87:81:D3:9E:63:50:E3:44:B4:02:58:19:6F:4B:48:2F:2A:91:B4:0B
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 019F236836570ABD28A2DAEA743FF12560E4
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/h4HTnmNQ40S0AlgZb0tILyqRtAs.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44152
IP address blocks: 185.19.172.0/22 maxlen: 32
185.59.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:57:0a:bd:28:a2:da:ea:74:3f:f1:25:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8781d39e6350e344b40258196f4b482f2a91b40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b8:40:b3:f4:87:ce:81:15:95:0b:9b:2a:d9:
42:3c:34:93:b3:b9:d8:ef:bb:c9:99:69:f0:54:cf:
c4:5a:19:ec:b4:e6:ed:aa:1e:17:cd:29:18:fa:d5:
34:25:82:49:42:27:d6:3a:b4:81:43:c9:6c:6a:00:
8d:de:bd:41:4c:48:8e:b7:69:01:63:6a:6a:1d:0f:
8f:47:9f:07:c8:66:ab:49:4b:f6:25:6c:72:b1:2c:
76:76:55:ab:b3:e3:5b:d6:17:0e:1c:1f:f6:c4:d8:
ae:88:6d:ff:ea:2b:39:e0:b5:8d:d0:82:a5:ed:d6:
c2:7a:34:b2:a6:b8:99:54:37:f4:2a:43:ca:42:61:
fd:6f:89:e0:a4:b6:a6:d3:b7:8b:e2:ba:10:4f:33:
7c:fc:68:52:f6:79:07:9a:ce:38:0e:7f:2d:32:a2:
48:82:64:7c:6d:db:0f:4a:9e:c7:8a:7f:d6:0a:73:
ff:91:15:e5:3a:53:ec:14:7f:dd:7d:f6:67:43:92:
ec:9c:4d:06:ba:4d:48:69:98:d4:f4:27:18:f5:4a:
51:43:82:b4:8b:38:b2:dd:16:f0:e4:c9:8b:4b:e8:
9a:50:78:dd:0c:00:7f:f8:60:9b:3a:ab:00:9a:7e:
dd:7b:7e:ee:c2:2e:df:e1:04:0e:c5:59:1b:e1:80:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:81:D3:9E:63:50:E3:44:B4:02:58:19:6F:4B:48:2F:2A:91:B4:0B
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/h4HTnmNQ40S0AlgZb0tILyqRtAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.172.0/22
185.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
43:06:2f:f6:e7:0a:a9:72:ad:3a:bf:cb:08:c5:e2:ae:71:93:
41:08:c9:3b:37:83:e3:5b:1b:ba:eb:5a:38:44:35:f1:0c:2f:
91:23:bc:59:30:ad:93:49:25:c4:0f:7c:ed:1a:33:56:9a:36:
41:f8:61:48:f5:0f:75:fd:9a:90:d4:34:57:b2:9c:98:12:1a:
8a:02:07:ad:7a:7d:49:a1:bb:7f:59:87:d6:bb:96:b8:48:48:
6b:31:37:0a:07:79:85:67:a8:3a:1f:14:b9:a5:bf:99:91:ec:
d6:76:e7:38:12:7d:a8:53:cc:1d:87:62:ad:ca:f8:cc:6f:bc:
b5:68:e6:16:26:13:3e:83:75:b4:24:c5:9e:eb:9d:7a:6e:15:
24:ba:e7:ad:0b:da:8d:96:48:c7:d6:43:8d:70:f1:77:66:67:
cf:d6:89:fa:29:38:85:3a:b0:21:65:31:d1:5a:a2:60:a3:a7:
5f:45:e0:93:64:06:8a:44:b8:55:98:2f:1d:9a:15:06:dd:bb:
2e:41:e0:e9:88:3c:82:7d:c2:1c:f5:16:ba:4e:01:1d:9a:1e:
9a:56:c8:b4:1d:99:8b:c2:e9:67:2b:37:d3:d9:ae:aa:6c:15:
1e:d6:0c:92:79:46:ca:62:75:4b:07:08:cd:65:cc:88:36:e9:
80:e7:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:45 2026 by rpki-client