Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/hNgjrmACAQrIMeNtPk4Zt3Xzh2o.roa
File: hNgjrmACAQrIMeNtPk4Zt3Xzh2o.roa (raw, json)
Hash identifier: 8XG0GIk2FqM1aSYgfPpdFeva3g6wC55t8WVDAjpd1KU=
Subject key identifier: 84:D8:23:AE:60:02:01:0A:C8:31:E3:6D:3E:4E:19:B7:75:F3:87:6A
Certificate issuer: /CN=f17af44b81726f6f8e5d61f4fc54b5232dbdae9e
Certificate serial: 019F23692C3928E3FCCEE5EA833818FF7174
Authority key identifier: F1:7A:F4:4B:81:72:6F:6F:8E:5D:61:F4:FC:54:B5:23:2D:BD:AE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/hNgjrmACAQrIMeNtPk4Zt3Xzh2o.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43464
IP address blocks: 91.195.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:39:28:e3:fc:ce:e5:ea:83:38:18:ff:71:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17af44b81726f6f8e5d61f4fc54b5232dbdae9e
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84d823ae6002010ac831e36d3e4e19b775f3876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:d6:87:06:e3:af:3d:3c:8a:fc:46:2b:3d:
d9:28:07:cc:d6:65:23:06:d7:e4:1d:de:e3:a2:6d:
1b:e6:23:e2:94:6e:9e:f3:61:9a:02:ad:a7:dc:4e:
b5:f7:0c:17:da:f9:24:1b:32:48:93:c1:69:43:a1:
ec:4c:5f:b6:64:64:92:06:60:d6:52:7c:41:74:f6:
84:1c:1d:b1:c8:5d:fd:45:29:71:63:a0:e9:27:5a:
cc:2f:c2:b9:3f:1a:c1:78:6e:11:6c:df:ef:e7:59:
1e:1e:14:e6:5b:c8:d6:6b:0f:ae:30:71:25:12:5d:
f0:a9:ca:9b:7a:92:f4:4d:d2:9e:44:77:3f:af:90:
7e:bd:f4:f3:3b:b2:27:05:c1:af:de:7d:49:c9:d7:
e2:a5:73:a0:7a:27:4c:4f:ea:07:0d:df:43:4a:4e:
82:c1:d0:28:c3:89:36:93:53:5f:fa:3f:02:7c:52:
a9:f3:83:37:c7:fb:ab:77:f2:fe:18:26:08:60:36:
35:4e:5d:05:ca:bd:f1:25:84:86:e9:20:6f:1d:d6:
d2:50:49:00:59:0c:74:53:44:35:69:51:02:b6:81:
c4:f8:65:7f:5a:3b:8e:4a:94:4e:e9:54:c0:15:c1:
0f:6f:19:04:90:31:86:ab:0d:c9:84:aa:a8:47:26:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D8:23:AE:60:02:01:0A:C8:31:E3:6D:3E:4E:19:B7:75:F3:87:6A
X509v3 Authority Key Identifier:
keyid:F1:7A:F4:4B:81:72:6F:6F:8E:5D:61:F4:FC:54:B5:23:2D:BD:AE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/hNgjrmACAQrIMeNtPk4Zt3Xzh2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.4.0/23
Signature Algorithm: sha256WithRSAEncryption
59:a7:c4:98:c7:d1:1f:c9:99:08:af:45:6c:5f:a1:7a:c0:d3:
db:78:7d:10:18:83:6b:39:ed:83:8d:e7:a0:e6:85:59:d9:0c:
15:17:40:82:af:28:4e:2d:32:f0:26:93:d1:c4:b5:7f:5a:85:
c3:50:08:29:71:89:d3:40:7a:1f:de:d8:00:31:32:0b:b4:c1:
8b:dc:4a:08:ed:b9:7c:55:b2:52:2a:51:bc:f2:c6:b7:d8:6c:
23:bd:91:45:98:15:01:a9:20:ea:e4:0a:6d:de:7b:66:0b:9c:
d3:01:d5:b9:8c:8a:5c:05:c5:70:7c:90:ae:9f:46:7d:6a:2f:
b4:2b:27:b7:fb:95:6f:49:ba:3d:e8:63:02:69:14:ca:1c:a9:
ca:60:ee:08:90:3f:0b:51:6f:62:be:3a:7d:40:34:79:f3:e7:
a8:48:c4:b9:2f:32:0f:4b:ac:f5:a0:8a:3c:9c:36:db:39:b0:
a7:36:25:f2:d4:38:6c:e6:ae:fc:c9:3b:4e:5f:56:75:05:c8:
20:e5:d6:46:da:43:c9:71:c6:51:81:fc:8f:22:16:d6:98:fe:
45:de:5c:a5:18:30:87:50:25:21:8b:3c:8d:47:a9:53:ed:10:
2b:12:fe:c6:da:dd:56:ee:ec:0d:5b:02:12:e9:f7:df:6a:05:
60:6d:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:03 2026 by rpki-client