Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/HuS9HEQnmgwkuk6nNfxYJWoTZfg.roa
File: HuS9HEQnmgwkuk6nNfxYJWoTZfg.roa (raw, json)
Hash identifier: Gax45SA31eyvFfTp8hHtUBasQUGl4kGyHCARRtiz6pQ=
Subject key identifier: 1E:E4:BD:1C:44:27:9A:0C:24:BA:4E:A7:35:FC:58:25:6A:13:65:F8
Certificate issuer: /CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Certificate serial: 019F23689F5788FB7DAB1E223AEEEDFB2410
Authority key identifier: 43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/HuS9HEQnmgwkuk6nNfxYJWoTZfg.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215284
IP address blocks: 185.40.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:57:88:fb:7d:ab:1e:22:3a:ee:ed:fb:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ee4bd1c44279a0c24ba4ea735fc58256a1365f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:55:38:03:4b:07:92:3f:20:2e:ec:ce:75:
56:9d:2c:23:08:b9:84:f8:79:24:b1:cd:31:d1:3b:
23:7c:2a:a4:d2:31:31:76:18:ad:c7:2a:a4:e6:3a:
5f:99:0e:83:e9:07:d1:04:c9:7d:54:77:e0:48:4a:
0f:ad:49:fb:3b:3b:17:42:61:f3:8a:f8:96:83:f0:
0e:ba:2f:68:db:d7:03:4f:10:6a:c2:7a:78:59:5d:
0a:df:f1:5c:70:16:70:f7:73:1c:6f:06:9f:85:cd:
86:43:dc:63:b7:16:9e:66:cc:0b:a2:1a:9f:1e:61:
f5:8b:62:78:38:fc:cd:3c:23:fd:a4:6e:b1:6e:bb:
72:ba:69:f9:67:f0:a9:5d:a8:24:b6:36:2d:38:e9:
85:3a:bc:78:a4:2f:96:86:bb:1e:10:17:52:3a:cf:
da:f3:b7:df:53:fc:65:30:f8:f1:da:e7:95:da:0c:
11:51:bf:fd:30:91:84:d7:0a:5c:93:83:d5:95:66:
d4:70:0c:c2:c4:7a:71:72:ba:2a:c3:ac:73:af:23:
b5:8e:ef:50:87:58:fe:f5:f0:63:9e:f2:81:3b:9c:
ef:08:ff:94:35:9b:dc:5b:bd:e9:7d:72:19:c6:42:
d6:23:1b:b7:73:32:0f:a1:e3:e7:9d:55:a0:d1:ab:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:BD:1C:44:27:9A:0C:24:BA:4E:A7:35:FC:58:25:6A:13:65:F8
X509v3 Authority Key Identifier:
keyid:43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/HuS9HEQnmgwkuk6nNfxYJWoTZfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e5:39:2e:3f:f3:fd:81:88:fa:0d:19:ed:70:58:11:72:ac:
d4:c0:8d:99:d2:da:5d:76:d7:f6:2b:07:ca:9f:87:5e:0a:cf:
85:f8:e5:0b:33:b0:50:5c:af:2d:6e:41:83:34:1f:bd:dd:49:
e2:10:5c:8f:8e:4c:3b:5a:47:e4:3c:09:c8:58:b5:eb:80:62:
02:ed:15:09:5a:c3:f0:5f:19:16:77:2d:14:c9:0c:af:23:c3:
5b:1a:5d:b5:29:18:7c:a7:c1:7c:84:f1:09:bb:d8:4d:95:8a:
2a:67:e9:54:ab:74:2f:99:c9:2c:9c:95:b3:84:16:cf:3f:56:
9c:b6:13:83:1e:61:c8:5b:cd:df:ae:35:24:2a:a8:94:04:a2:
07:d3:4d:74:b2:77:dc:5d:c7:c7:f0:79:35:f8:c8:93:1a:30:
95:7e:07:52:bd:3b:31:2a:7a:92:83:c7:5a:b5:6c:b4:5f:db:
64:5d:9f:25:f5:90:84:b4:5e:88:c3:b1:f9:db:3f:e9:35:71:
0b:f0:7e:c5:a1:ce:15:17:33:90:dc:12:e1:74:3f:2f:8d:e2:
98:33:d9:26:b9:76:e4:e3:c8:db:e2:6c:80:25:80:e6:c3:85:
31:04:91:37:99:b1:82:9b:8e:bd:cf:45:93:f4:33:85:1a:eb:
f2:d6:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:22:08 2026 by rpki-client