Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hxrlkQurmLyBhkWbdwa67ZbnUzU.roa
File: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (raw, json)
Hash identifier: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=
Subject key identifier: 87:1A:E5:91:0B:AB:98:BC:81:86:45:9B:77:06:BA:ED:96:E7:53:35
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FF21C4DA177CEB7DCB78A1EC792F
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hxrlkQurmLyBhkWbdwa67ZbnUzU.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208325
IP address blocks: 89.223.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:21:c4:da:17:7c:eb:7d:cb:78:a1:ec:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=871ae5910bab98bc8186459b7706baed96e75335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:bd:57:96:dc:01:f6:47:47:98:ea:29:f3:
98:80:8d:d1:d9:71:da:39:55:93:94:79:8c:ff:61:
5b:19:0b:80:3a:fd:ed:ae:57:69:46:35:16:60:d9:
5c:4b:a8:e0:86:27:f9:d5:33:b6:7c:92:2c:5a:83:
bd:65:b1:16:03:6c:b4:af:5b:14:24:6f:65:e8:34:
91:da:22:fc:a3:f2:d4:bb:65:a9:89:3f:87:5a:b0:
3b:53:6d:09:ad:6f:0d:a5:79:ca:42:60:ad:26:63:
c7:95:e0:fd:17:84:db:2a:7e:a5:9f:9c:d0:8d:97:
c9:38:da:4d:dc:ba:40:1f:b4:89:12:9d:dc:03:7d:
02:94:8e:34:c0:c9:59:30:3a:9a:fd:b5:d0:9a:38:
c2:7b:97:3c:49:e3:14:27:ce:02:b0:04:22:f9:25:
ad:52:f4:fd:32:50:fc:5d:a3:12:b9:71:21:7f:ed:
0b:2d:81:b0:78:eb:33:1c:3b:e0:76:fc:f8:6e:12:
e8:7c:13:ac:9b:74:00:c0:8e:1d:d8:df:24:a8:00:
58:01:cd:fc:40:5f:a9:07:ed:bc:17:04:2f:aa:36:
ec:43:52:bb:72:5c:5c:1f:d2:ef:83:b2:80:67:0c:
e1:47:53:a3:d4:bf:d2:68:cb:6f:ce:d8:29:e2:77:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1A:E5:91:0B:AB:98:BC:81:86:45:9B:77:06:BA:ED:96:E7:53:35
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hxrlkQurmLyBhkWbdwa67ZbnUzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a4:f1:32:9d:4e:5b:ed:1b:0c:f5:b7:40:84:b3:80:2a:ee:
7d:01:78:dc:59:a7:94:11:9c:23:4d:e9:aa:81:53:88:fd:e0:
ae:e4:f8:2a:ec:04:4d:17:30:8f:f9:f0:1a:b7:da:69:09:6a:
1e:c3:9c:78:c6:dc:75:b1:38:2f:69:8a:9a:cb:c7:3e:9d:03:
0b:d4:27:b3:a6:7a:27:61:99:11:1b:5c:bb:55:da:a9:01:16:
fb:75:79:65:03:93:f0:05:60:d7:70:25:b9:3c:b6:be:e0:78:
bb:10:9b:79:85:ba:75:ca:7f:f5:5a:02:be:39:83:83:4d:55:
4c:aa:c0:51:78:6a:3e:07:a8:7d:40:b9:b8:65:16:82:bf:53:
c4:bd:7f:c0:86:93:ad:15:2f:67:32:d4:3e:64:a6:3d:48:14:
76:74:1d:43:a5:22:5e:7f:9d:ec:c6:f2:84:ad:71:36:51:97:
f5:ac:ee:84:17:55:06:77:2e:2c:3f:96:71:65:fb:c3:29:db:
a6:fe:6a:6a:9a:ff:a5:3c:73:9b:fd:e6:1a:26:ff:8f:ce:ad:
74:3e:64:c6:58:3f:bd:08:62:33:b1:66:6b:6a:ed:70:5b:07:
fc:94:42:a4:55:7c:b5:b1:fb:78:d4:b6:76:70:f8:dc:da:26:
57:a7:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:06 2026 by rpki-client