Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HSh8U2UDYalnC7UAkLcTcDttOXI.roa
File: HSh8U2UDYalnC7UAkLcTcDttOXI.roa (raw, json)
Hash identifier: Pfw/+quAiWjxsGHRzq0Y3tg/29WmHN/x6zFCCvN1CYc=
Subject key identifier: 1D:28:7C:53:65:03:61:A9:67:0B:B5:00:90:B7:13:70:3B:6D:39:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FAC794126FB1836446BF76FF61A9544A1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HSh8U2UDYalnC7UAkLcTcDttOXI.roa
Signing time: Wed 29 Jul 2026 06:04:15 +0000
ROA not before: Wed 29 Jul 2026 06:04:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60849
IP address blocks: 31.13.224.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
185.218.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:79:41:26:fb:18:36:44:6b:f7:6f:f6:1a:95:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 29 06:04:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d287c53650361a9670bb50090b713703b6d3972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:96:d1:eb:54:2f:be:0c:f4:5d:b2:48:5e:
87:1e:99:39:d3:0d:e9:8a:bf:5b:44:ce:fb:93:41:
25:7d:e5:1b:9d:0e:d0:9d:c8:8e:aa:99:d1:dd:17:
c0:60:6e:80:61:61:10:97:9a:3c:88:66:ef:25:c4:
52:e6:c7:52:20:3f:b2:3f:d6:11:54:e3:ba:b2:71:
05:98:f1:9e:0c:1c:0c:d4:09:8e:00:6c:e5:be:0b:
02:a6:f9:8f:68:d5:00:14:57:81:ba:06:47:34:e6:
f5:d7:eb:70:4d:58:6e:99:bc:50:6f:62:6f:2f:a4:
c8:1c:0e:f7:39:f0:d7:33:22:37:26:39:3c:cb:86:
7d:06:95:18:35:ef:dd:3e:71:4c:3d:25:cf:6a:37:
fc:e6:a1:c8:06:63:7d:8c:9a:bc:3d:ae:03:eb:ac:
b2:5b:4d:dc:60:74:bd:78:a1:ea:be:aa:9c:0a:5e:
e6:a5:d8:18:a6:65:58:4e:6e:be:a3:f9:19:1c:89:
d8:4d:3d:ce:e4:44:9a:0a:1b:72:97:79:81:68:94:
96:45:fe:46:c9:df:78:e7:d0:1f:df:37:db:a6:1c:
12:12:46:d2:22:17:09:2f:19:62:b2:68:56:39:bc:
91:79:4e:f2:89:07:da:e4:48:85:b6:b9:32:e0:66:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:28:7C:53:65:03:61:A9:67:0B:B5:00:90:B7:13:70:3B:6D:39:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HSh8U2UDYalnC7UAkLcTcDttOXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
87.121.62.0/24
185.218.84.0/22
Signature Algorithm: sha256WithRSAEncryption
63:aa:7c:5d:02:31:47:cd:84:e5:86:38:19:43:15:32:e3:84:
34:9e:3d:f3:eb:e6:18:87:e6:2b:64:2f:24:3c:76:60:dd:ef:
3f:68:62:7c:41:f7:67:72:dc:19:b2:d2:be:0a:14:53:6c:9f:
23:e6:68:4e:44:20:91:5a:c1:39:76:f2:ce:74:bc:76:76:e7:
96:d5:1e:e1:bc:b6:87:64:89:37:0a:e6:8c:ff:da:46:dc:77:
27:9b:f2:01:4b:93:54:12:6a:ea:77:c3:df:08:9c:a2:cd:92:
9a:b4:de:fa:21:20:e4:da:b8:88:06:e5:da:dc:1d:47:d7:34:
eb:50:92:eb:30:fc:be:55:bd:a8:72:6c:07:d3:2c:16:bb:89:
0c:97:01:13:0f:d1:cb:f9:af:19:15:c3:ae:e1:c1:cf:30:87:
e1:fa:d0:72:04:87:33:2e:14:3c:74:84:21:75:99:53:1f:c9:
51:5d:3e:b4:30:04:48:d4:d1:a6:9a:d6:cb:21:47:ad:f6:f3:
36:a4:f1:f5:0f:53:e8:b7:6f:60:a7:9e:11:17:af:c1:22:12:
3b:46:f5:e1:91:9c:2e:4b:78:c9:5a:88:eb:cb:16:52:37:f2:
c6:56:5b:44:fc:53:82:ab:d2:d1:ae:99:8a:73:5e:bf:6a:40:
0e:ea:d9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:49 2026 by rpki-client