Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hTLxuhhBuGZXZISXsWuwqNspcxA.roa
File: hTLxuhhBuGZXZISXsWuwqNspcxA.roa (raw, json)
Hash identifier: VKIBbwVHtmB2UyYLH6mUy/6owEa4ru0TQN1loqeEFtU=
Subject key identifier: 85:32:F1:BA:18:41:B8:66:57:64:84:97:B1:6B:B0:A8:DB:29:73:10
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019CD90E7E7630995E211BD7A3EE29EE4636
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hTLxuhhBuGZXZISXsWuwqNspcxA.roa
Signing time: Tue 10 Mar 2026 18:42:11 +0000
ROA not before: Tue 10 Mar 2026 18:42:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.58.97.0/24 maxlen: 24
80.242.60.0/24 maxlen: 24
90.156.144.0/24 maxlen: 24
90.156.145.0/24 maxlen: 24
92.63.191.0/24 maxlen: 24
185.39.16.0/24 maxlen: 24
185.42.12.0/24 maxlen: 24
213.109.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:0e:7e:76:30:99:5e:21:1b:d7:a3:ee:29:ee:46:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 18:42:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8532f1ba1841b86657648497b16bb0a8db297310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d4:2d:6b:48:31:de:bf:f2:77:b8:10:78:21:
b1:e0:6d:6e:32:b6:a4:5e:74:4f:34:27:b0:eb:17:
3b:cc:1e:27:54:07:12:eb:d9:c6:6c:dc:49:8a:62:
b9:41:32:dc:44:64:05:7a:fe:c8:86:bf:1f:51:ed:
d3:7d:e0:af:01:c6:b4:0e:50:22:d2:d5:aa:9a:3b:
10:9b:c4:ed:28:c9:9a:00:a5:32:ce:06:e4:9c:a7:
91:8b:37:77:c6:77:ca:a7:74:c7:a3:55:ca:28:1a:
90:26:34:eb:b6:6c:20:98:7d:d5:10:05:b9:54:60:
09:1e:67:4d:08:c5:14:05:82:f2:5d:85:37:78:a2:
34:be:f3:2d:f7:99:d6:fc:9a:9d:b8:52:da:14:81:
e8:93:b9:bf:a1:ad:a4:aa:45:20:ec:14:8c:15:e1:
36:24:cc:50:cd:19:47:59:f9:58:90:87:8c:19:c5:
ea:5d:b1:36:21:51:d4:14:a5:48:ab:93:1f:32:ae:
18:59:cb:85:69:af:f8:77:ef:66:12:5a:c8:2e:e7:
57:cb:2d:35:68:e6:61:0f:74:8e:ca:7c:ff:ee:8f:
2a:d2:d2:9c:e3:ff:19:4d:7e:b6:d7:ed:01:bb:cf:
00:65:5a:f9:d7:10:55:67:19:7d:f0:98:6f:e4:20:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:F1:BA:18:41:B8:66:57:64:84:97:B1:6B:B0:A8:DB:29:73:10
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hTLxuhhBuGZXZISXsWuwqNspcxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.97.0/24
80.242.60.0/24
90.156.144.0/23
92.63.191.0/24
185.39.16.0/24
185.42.12.0/24
213.109.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7f:a0:bc:27:8b:fb:1a:25:59:84:7e:f6:f3:7b:39:da:85:
91:f9:dd:cf:8d:c6:8c:b9:72:85:0a:d0:4a:f0:4d:35:74:ed:
18:35:c6:1a:ac:67:b9:73:72:22:af:1e:fe:d2:06:49:67:b1:
ec:f2:ce:0d:d4:fe:6b:17:ff:3e:21:56:d7:00:15:f4:03:48:
57:90:0c:15:52:32:95:31:6c:85:7b:0e:c3:5b:5f:93:1d:6b:
c1:0d:9e:02:d1:a0:f4:fd:cb:e3:56:82:64:4a:3b:2f:03:9b:
0a:f5:ed:7a:68:9f:0f:63:77:04:58:2c:0f:93:8f:60:3f:6c:
e4:e3:72:f8:04:a2:12:1d:71:98:03:e6:ae:b6:6b:8f:ab:b9:
30:d4:11:8f:bd:3a:39:2c:4e:fb:7b:ba:c6:e7:71:7c:98:bc:
c5:1d:d7:b2:e4:53:b8:98:80:0f:99:d9:42:56:5d:63:a4:97:
76:54:39:d6:2b:92:38:c4:87:ad:8b:04:df:5d:59:d5:f4:d7:
f4:d7:c4:a7:ca:fc:36:a2:07:d7:fe:fd:14:f3:d2:a1:fc:ae:
8b:19:63:3a:8c:5c:c9:f8:b7:2c:2f:be:20:6b:9e:93:c9:91:
1b:27:bc:01:82:37:5d:7e:f6:ca:05:25:42:9d:3e:bc:8a:1b:
85:62:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:13 2026 by rpki-client