Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/HUhU0OCq7_e2C_Vco4sr2b7yqFw.roa
File: HUhU0OCq7_e2C_Vco4sr2b7yqFw.roa (raw, json)
Hash identifier: /e5bIfzXmCALtUK9MBj1Hn2RCE+UZbrtW7EB/qmFOt8=
Subject key identifier: 1D:48:54:D0:E0:AA:EF:F7:B6:0B:F5:5C:A3:8B:2B:D9:BE:F2:A8:5C
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019DDD7E84216BD0359BF67422458421F225
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/HUhU0OCq7_e2C_Vco4sr2b7yqFw.roa
Signing time: Thu 30 Apr 2026 08:25:49 +0000
ROA not before: Thu 30 Apr 2026 08:25:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
88.223.44.0/24 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.169.0/24 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
95.173.54.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:7e:84:21:6b:d0:35:9b:f6:74:22:45:84:21:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 30 08:25:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d4854d0e0aaeff7b60bf55ca38b2bd9bef2a85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:03:1b:da:2d:60:64:ed:16:16:de:85:18:
04:5a:6e:30:07:17:5f:ba:99:2a:cc:3f:5f:a8:9b:
03:59:34:5c:03:d3:a1:32:c2:6b:b7:5a:e7:80:b5:
86:0e:27:0f:3e:63:46:13:65:3c:c2:ae:0c:3a:c1:
92:2c:45:b9:90:ad:0e:2e:91:9e:b7:26:e3:2c:57:
83:e4:9a:30:94:2b:c7:35:de:ae:35:49:a5:02:c7:
e6:51:7e:87:46:48:f0:b1:15:c4:0e:46:7e:e9:a1:
ae:4c:32:f1:b7:c0:2c:a7:98:14:66:58:52:d4:3e:
fb:08:3a:56:be:e6:68:60:ac:81:72:b3:4e:a5:cb:
a3:b5:1c:35:36:d9:06:ac:36:68:bc:a8:98:19:fc:
82:be:d8:50:61:09:65:81:c1:13:f9:fe:6d:3a:b5:
d8:bc:61:89:9b:bc:c2:49:02:76:65:09:cb:4a:d1:
ef:fe:06:99:ba:2c:2d:91:ff:b5:84:28:30:9e:06:
c5:1c:ec:fc:78:10:bc:5d:1a:42:f1:39:9f:7d:d5:
c7:67:0c:33:8f:06:32:f8:22:a6:7a:40:6b:a3:0b:
98:d2:c0:4e:23:b8:73:2b:59:23:dc:3a:01:36:1f:
de:cd:0e:01:19:8f:b4:41:d9:ce:76:42:eb:59:ad:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:54:D0:E0:AA:EF:F7:B6:0B:F5:5C:A3:8B:2B:D9:BE:F2:A8:5C
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/HUhU0OCq7_e2C_Vco4sr2b7yqFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
88.223.44.0/24
88.223.46.0/24
88.223.169.0/24
95.173.48.0/23
95.173.51.0/24
95.173.54.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
34:80:52:c3:82:22:63:e8:f6:b8:b9:bf:44:ff:b5:01:90:2d:
50:4c:ff:8f:11:c4:2e:9e:68:7a:4e:ce:28:91:c6:d0:12:13:
51:d1:84:30:f2:2e:cd:31:bd:ec:ce:1d:95:01:49:1f:51:e2:
95:b1:2f:47:79:76:25:fd:1f:94:e9:0c:fc:d6:83:4d:09:f4:
0c:89:3a:33:5e:e3:1e:2d:96:2a:0e:7b:6f:bd:0a:5d:41:b1:
ad:22:c9:45:d3:33:81:49:67:98:0e:25:c6:01:d9:e6:12:da:
28:f7:5c:91:c4:24:7e:ea:6c:92:2f:31:2c:7f:fa:93:f5:1b:
da:80:c3:42:b7:dd:59:25:db:1d:7a:7e:99:bc:d8:c7:59:1b:
9e:9b:7d:5a:d7:65:f4:e5:1e:6d:cf:fe:00:59:e2:a7:54:f7:
ba:d6:99:4c:b4:d3:3e:eb:3a:4e:6a:45:d4:9f:d2:8f:b5:3f:
e1:6b:04:be:9c:de:e3:37:11:9e:96:e6:e8:e4:08:4a:80:61:
4e:d5:27:fc:04:73:1f:a8:83:2f:8d:55:c2:67:fd:03:c7:6a:
4b:92:89:ff:02:af:98:01:e2:96:1f:e1:fa:7a:04:59:70:80:
19:58:d8:79:02:81:77:60:5a:e0:3d:96:c4:5f:7a:e9:0e:11:
59:34:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:17 2026 by rpki-client