Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hxC2jpRlaIaM98LvLVjeqhOV9cw.roa
File: hxC2jpRlaIaM98LvLVjeqhOV9cw.roa (raw, json)
Hash identifier: TgtubXCf93hQu/hiX0qxTtjIPY7Fb9Uk/YixVE2mPWw=
Subject key identifier: 87:10:B6:8E:94:65:68:86:8C:F7:C2:EF:2D:58:DE:AA:13:95:F5:CC
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019C751F0699E8037048DDFBA76253E410AF
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hxC2jpRlaIaM98LvLVjeqhOV9cw.roa
Signing time: Thu 19 Feb 2026 08:58:13 +0000
ROA not before: Thu 19 Feb 2026 08:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
91.217.72.0/23 maxlen: 32
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.156.0/24 maxlen: 32
109.104.158.0/24 maxlen: 32
109.104.159.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
194.113.94.0/23 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:1f:06:99:e8:03:70:48:dd:fb:a7:62:53:e4:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Feb 19 08:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8710b68e946568868cf7c2ef2d58deaa1395f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:99:9d:c3:19:bb:d1:e1:1d:f5:50:73:2e:
be:df:4d:6e:c0:b2:a9:f0:88:c0:b9:06:8f:37:75:
b7:51:27:fa:aa:38:e4:a5:c9:77:29:f4:ab:4e:fe:
41:7a:71:7f:37:fe:bb:74:7d:a4:a7:e0:26:2d:f3:
e8:e6:ae:33:9d:04:8c:17:4d:b0:43:1e:f2:02:ec:
cc:f6:80:e2:07:f1:57:de:50:62:f8:bd:2f:58:1a:
95:df:f0:56:4c:e8:73:13:84:64:72:79:c7:af:9e:
ef:c2:71:ef:22:87:2d:57:31:d1:86:35:9f:cc:73:
ab:76:b6:42:27:0b:9b:15:af:f1:d8:9c:b3:32:6e:
8f:6a:a4:ad:09:ad:09:7a:bb:e8:7a:54:13:96:f1:
4e:31:17:d9:f9:b4:dd:e8:05:de:64:60:5d:ac:b9:
94:54:86:7a:86:fb:26:14:09:a0:fe:d2:bc:ed:e2:
e0:e9:c5:72:cf:ce:f4:b2:cc:d2:d2:78:7c:b8:2e:
73:54:9a:2b:6e:8f:74:6b:81:e6:40:03:c0:8b:ee:
79:57:53:5f:9e:6e:e5:b3:0a:12:a2:aa:f7:bd:4c:
c9:25:b4:c9:47:bc:32:58:1b:fb:16:e6:05:23:0a:
21:cd:d3:b2:53:a5:e9:3b:ee:29:63:a2:04:94:37:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:B6:8E:94:65:68:86:8C:F7:C2:EF:2D:58:DE:AA:13:95:F5:CC
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/hxC2jpRlaIaM98LvLVjeqhOV9cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.24.0/23
45.142.27.0/24
91.217.72.0/23
103.93.40.0/22
103.111.0.0/22
103.124.164.0/24
103.124.166.0/24
103.204.120.0/24
103.204.122.0/23
109.104.132.0/23
109.104.156.0/24
109.104.158.0/23
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
194.113.94.0/23
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ba:29:cf:42:4e:ca:c4:6a:20:7c:5c:fc:61:da:b7:1f:1e:
b0:02:41:17:53:6b:3a:67:e3:3b:1c:61:b3:1e:77:f4:27:ee:
68:72:02:a8:3f:ce:c0:2c:19:54:73:39:db:2a:79:ea:52:e0:
df:c4:b3:af:7c:77:cc:67:c5:34:38:e8:d2:49:38:23:60:c8:
34:25:5a:a8:c9:16:6e:77:50:6e:f6:a0:36:a8:af:a3:15:ad:
29:b1:39:f3:55:4c:d4:9a:ed:42:4d:ae:41:9d:0a:02:62:8f:
28:1a:5a:31:36:ec:74:b5:63:28:b8:ff:b2:e1:b9:d8:01:c0:
95:41:32:92:fc:e5:d1:ab:e2:0c:8f:6e:c9:60:72:58:a9:38:
a6:aa:ab:17:f7:63:23:ad:92:55:dc:c2:a7:71:8e:11:4b:6d:
18:56:4f:80:57:a1:2f:33:a5:e5:8a:32:61:27:70:6e:04:1f:
bf:a8:48:97:7f:34:ab:56:18:b6:cb:78:f1:4e:8d:04:b0:bf:
24:60:ff:89:6a:27:22:7c:e9:86:37:d4:2f:f5:61:0c:8b:bd:
a0:eb:ea:1a:eb:a0:29:4b:35:e9:fa:e4:a6:77:57:8c:fd:00:
49:0b:80:64:08:7d:25:52:08:63:9e:d5:b9:0e:cd:3d:68:35:
37:37:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:46:18 2026 by rpki-client