Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HqTk_DLe-dPRQFq785jhVw-n6z4.roa
File: HqTk_DLe-dPRQFq785jhVw-n6z4.roa (raw, json)
Hash identifier: WJi2TREFjbvhMA0rXmPaHHRrWCzqsXuhNF/g3uSaKGg=
Subject key identifier: 1E:A4:E4:FC:32:DE:F9:D3:D1:40:5A:BB:F3:98:E1:57:0F:A7:EB:3E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019D87F73DF59CFBDF414B14F6BAF2EFD415
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HqTk_DLe-dPRQFq785jhVw-n6z4.roa
Signing time: Mon 13 Apr 2026 17:50:20 +0000
ROA not before: Mon 13 Apr 2026 17:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216024
IP address blocks: 193.124.203.0/24 maxlen: 24
194.58.36.0/24 maxlen: 24
194.87.148.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:f7:3d:f5:9c:fb:df:41:4b:14:f6:ba:f2:ef:d4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 13 17:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ea4e4fc32def9d3d1405abbf398e1570fa7eb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:7d:8d:f9:92:f4:b3:eb:51:a3:77:fc:bc:
53:f5:95:9c:14:1d:11:9d:d6:ec:be:f4:e9:06:3b:
28:a8:47:09:5a:0d:73:f6:df:41:d1:72:7d:d0:a7:
13:3f:ad:1d:cf:f6:5b:0f:94:6e:cf:35:9c:bb:1c:
09:9a:23:ad:26:c0:ad:b1:08:7f:5e:48:28:70:08:
10:f5:97:46:c0:86:e2:80:e5:76:e3:5a:9b:db:ef:
f1:f4:16:9b:83:42:b0:aa:68:c4:8c:12:f5:b7:ac:
a5:1a:d5:77:0b:04:b1:39:46:9c:db:b7:e9:86:ee:
e5:8b:02:ef:4a:bc:6c:8b:7c:34:f7:0a:2e:5a:a2:
f3:1e:b8:82:8e:46:4e:d0:81:99:ee:d9:d4:83:47:
52:ee:e1:18:d9:30:d5:6c:53:79:10:00:8d:13:b7:
0d:59:92:6a:3c:c3:84:6e:6e:18:37:dd:5c:4a:d8:
11:1b:9d:57:6d:bc:75:13:f5:2b:31:0b:ae:6f:d4:
0f:f5:e4:af:0e:29:fc:db:31:66:eb:63:5c:9f:d2:
db:44:f9:43:98:28:b3:78:11:ff:85:e2:ce:69:c7:
54:b9:e9:2b:3b:97:cb:78:17:27:9f:83:4e:a2:23:
81:f0:45:41:e3:c1:ad:c4:5e:cd:51:aa:61:14:06:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:E4:FC:32:DE:F9:D3:D1:40:5A:BB:F3:98:E1:57:0F:A7:EB:3E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HqTk_DLe-dPRQFq785jhVw-n6z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.36.0/24
194.87.148.0/24
194.87.189.0/24
195.133.2.0/24
195.133.26.0/24
195.133.28.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e7:c7:81:70:81:e2:e5:c3:37:a8:ef:3f:06:f5:4e:ba:61:
68:c7:14:e1:24:a5:e7:7e:20:f3:1c:7d:e4:b5:6b:6d:62:53:
c4:b0:d7:10:8e:5e:2a:b4:47:82:1d:8b:43:a5:b3:17:bf:27:
7a:4e:de:1d:7c:7f:02:66:c3:82:b8:80:1e:d7:74:55:3d:0d:
1e:2a:91:2a:be:cb:b5:f1:0d:41:59:66:06:d9:8a:dd:88:32:
77:03:94:48:67:ed:23:71:50:5d:4e:33:81:ef:c3:a1:13:eb:
08:0d:36:5b:e1:cb:aa:f1:42:3c:cc:c5:e6:98:1c:cd:5e:fb:
9e:0e:b8:b5:0f:51:c8:aa:a1:48:fb:8c:f1:20:e9:1b:c0:c2:
21:03:7d:b8:46:a7:52:c3:b1:4c:c0:8a:c8:5f:1b:38:10:a6:
1b:3c:c4:cd:11:2d:55:9a:e9:77:35:c0:b5:ea:7c:c2:e6:d5:
9a:55:00:73:ef:6b:e2:2e:c1:ea:18:0d:6f:6a:15:38:c9:a6:
4d:8d:9a:d1:db:75:30:eb:ca:82:66:1d:1a:8f:b7:4c:d3:7b:
53:94:6a:4f:4b:79:90:08:55:c5:4c:39:4c:b4:cd:d1:55:f7:
4d:38:72:7b:88:25:73:d4:a4:9e:c5:66:a3:cd:cf:11:04:46:
ff:22:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:45 2026 by rpki-client