Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/hEUB1PbOrVfmo9_RFalf9bbrZJ4.roa
File: hEUB1PbOrVfmo9_RFalf9bbrZJ4.roa (raw, json)
Hash identifier: Zq87pU560HvW3pg9s5e2zPdqIHEAKdbijZRX7oRdvOY=
Subject key identifier: 84:45:01:D4:F6:CE:AD:57:E6:A3:DF:D1:15:A9:5F:F5:B6:EB:64:9E
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 019D9790C52D778189BE415B094EC6598A83
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/hEUB1PbOrVfmo9_RFalf9bbrZJ4.roa
Signing time: Thu 16 Apr 2026 18:32:20 +0000
ROA not before: Thu 16 Apr 2026 18:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202027
IP address blocks: 217.179.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:90:c5:2d:77:81:89:be:41:5b:09:4e:c6:59:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: Apr 16 18:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=844501d4f6cead57e6a3dfd115a95ff5b6eb649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:ac:47:e2:45:d8:47:af:51:50:6f:c0:43:
fa:26:bb:5b:b5:69:61:fc:e1:bf:f6:38:43:83:3e:
38:24:49:d6:8f:64:df:53:fc:c7:5d:26:22:35:c4:
c9:e6:00:65:00:d4:f8:ee:06:5e:13:b6:7c:c1:84:
da:f2:fb:28:55:21:34:07:fd:bf:7a:01:e8:43:88:
c8:94:02:2b:61:9d:6f:38:ae:08:9e:bd:67:a5:19:
90:f4:76:60:aa:39:fc:81:69:32:2d:6b:66:28:f1:
3a:32:26:3a:9e:4b:1e:d4:b9:2f:c9:4b:07:2e:41:
04:ee:fd:62:1d:37:29:2c:7d:34:e5:03:65:96:0f:
78:65:f2:2c:13:b7:2e:a2:8f:c6:dd:39:d0:24:d6:
de:4a:5b:db:02:9a:3b:65:e9:71:f4:19:97:fb:73:
7b:b0:52:23:59:63:8c:c2:c1:d0:68:84:e8:9f:92:
e6:83:95:ad:0f:a3:cb:65:76:28:04:7c:15:ad:2a:
3a:e1:f2:07:b0:ef:af:5b:f0:18:83:e1:20:71:4b:
b9:f6:d8:9b:65:9d:35:2f:03:14:36:d2:0e:8b:2e:
a9:af:14:c7:9f:37:12:22:9c:2a:16:ba:36:f5:e8:
ea:af:68:88:71:e1:47:07:df:35:8b:6e:ad:ce:53:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:01:D4:F6:CE:AD:57:E6:A3:DF:D1:15:A9:5F:F5:B6:EB:64:9E
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/hEUB1PbOrVfmo9_RFalf9bbrZJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2f:33:07:30:54:dc:24:05:ec:af:72:ed:1d:22:14:14:b1:
93:44:74:ca:b1:db:4c:97:ff:2f:be:a9:d5:1b:87:ee:85:ec:
d7:c4:02:ef:f6:fb:69:00:22:b6:ac:d2:07:06:e6:fe:f1:c3:
9e:a8:de:5e:94:09:da:1c:4c:9f:11:fc:83:61:cc:d8:dc:cf:
24:fe:77:67:1f:de:d1:ce:63:65:db:7e:fc:34:91:c0:c1:8c:
95:91:3d:2c:e5:a7:a2:39:06:04:03:5f:92:83:01:9b:ac:42:
a2:1d:83:df:55:f0:f1:d8:6d:4e:55:35:d7:46:8b:49:fd:4f:
d3:c4:dc:f7:63:92:a0:db:7e:be:c6:c2:e7:05:c6:4f:53:8c:
d8:1a:c6:1d:1b:79:a7:5f:c6:82:1c:1a:f3:52:6c:f1:4b:8c:
ca:40:6c:41:3b:de:dd:21:11:e1:20:ba:be:ed:94:07:1f:d4:
fe:6d:00:cd:8e:66:e6:e8:5e:1c:df:b5:d4:95:bf:13:c0:92:
fb:28:3d:d7:bc:0e:65:cd:ba:55:da:68:62:d2:f6:c8:38:08:
f0:f0:23:d0:c5:0f:b0:ea:08:17:b4:92:20:f2:b6:cd:3a:a2:
13:e8:f5:a4:bd:50:7c:9b:17:0c:3e:53:44:da:f0:ce:dc:6a:
34:23:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:34 2026 by rpki-client