Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa
File: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (raw, json)
Hash identifier: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=
Subject key identifier: 1E:E2:41:37:A0:1F:86:A8:57:21:16:7C:20:B3:65:4D:68:A2:AD:A0
Certificate issuer: /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial: 019E164D7B2A38CF8EA7EE2AD5EAA2A64A20
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa
Signing time: Mon 11 May 2026 09:10:36 +0000
ROA not before: Mon 11 May 2026 09:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41960
IP address blocks: 185.80.12.0/22 maxlen: 24
195.10.224.0/23 maxlen: 24
2a0f:bf40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:4d:7b:2a:38:cf:8e:a7:ee:2a:d5:ea:a2:a6:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Validity
Not Before: May 11 09:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ee24137a01f86a85721167c20b3654d68a2ada0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:f0:92:ad:1b:ef:5e:89:8f:8a:b1:47:12:
03:64:28:5b:ad:03:04:a0:6d:a3:b4:9a:1f:28:7d:
07:81:d5:7d:e3:ea:86:8d:b5:76:33:0f:e6:f7:df:
e1:11:23:b9:fc:eb:5e:66:5d:d9:92:89:3b:f3:c8:
a3:19:79:b7:e5:ad:fe:78:08:88:a8:ef:c2:57:1a:
03:cf:91:26:cd:0d:cf:7e:02:ee:98:41:36:b3:2a:
b9:ca:5d:2e:92:8e:55:21:cd:1b:72:26:78:44:19:
14:5e:e1:7b:92:5e:a3:1c:17:a2:6c:4d:b1:72:d2:
1a:ae:57:3b:49:ee:bf:b2:f9:fd:d9:31:23:2f:41:
41:90:61:28:69:3e:ea:c9:18:ef:68:78:3d:9f:0c:
39:bd:13:f6:d7:42:a1:0d:01:83:2c:55:23:c7:6f:
f3:f4:a2:84:e5:2c:b6:f6:96:83:79:fb:82:6a:24:
52:41:12:b2:37:e1:a1:b0:36:d6:e3:5f:8d:88:0b:
95:8d:b8:a1:2a:15:1c:b7:d0:de:78:aa:a1:9b:47:
83:72:a4:01:c8:9f:ce:8f:5a:35:a5:c6:02:54:0f:
c8:a7:3f:a1:85:13:c3:cd:30:aa:a8:31:24:ac:83:
2f:61:e2:b9:15:28:d7:c7:0f:73:a7:71:ac:a2:1b:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:41:37:A0:1F:86:A8:57:21:16:7C:20:B3:65:4D:68:A2:AD:A0
X509v3 Authority Key Identifier:
keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.12.0/22
195.10.224.0/23
IPv6:
2a0f:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
37:2f:6e:bf:06:1b:c0:c1:cd:63:84:d1:ac:53:d6:9e:ac:35:
0f:e6:24:46:43:2c:62:ad:c2:ca:e9:2b:3d:06:46:8d:8f:e3:
b5:ca:bc:7c:62:03:43:89:96:38:d4:04:78:ef:ac:8b:c6:d9:
c2:cf:20:49:f5:11:8f:75:c3:a0:df:68:f0:6d:49:f1:e2:0c:
0e:39:43:d6:f2:71:52:3e:da:d0:dd:86:f0:52:31:42:c8:88:
28:8b:17:30:b7:70:54:bb:ec:2d:df:ea:d7:c3:09:b5:07:90:
b9:d7:bc:df:5f:b0:81:79:de:1f:50:fa:1e:3a:03:93:e2:bf:
a2:e2:07:92:2f:c4:e7:23:1b:6d:b3:63:5e:4e:34:e7:42:ab:
17:00:ab:50:94:2c:fa:8f:42:e2:94:6c:ed:57:88:df:9a:3c:
ef:b4:0b:dc:2f:95:0b:ab:a1:ad:6f:ac:28:82:9e:43:7c:a5:
6f:be:85:b0:8f:3b:52:b3:d0:f8:e9:eb:7b:cf:f0:bc:ca:ac:
57:4f:bf:ed:86:b9:4b:d6:5f:ae:c1:0c:fa:e1:71:3b:a8:65:
ac:86:fb:44:d8:6f:10:75:95:20:e2:6c:d0:bb:67:e3:a1:8a:
78:a7:84:28:2f:0b:31:9c:ed:de:61:dc:df:2b:31:ca:86:2e:
4c:97:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:04 2026 by rpki-client