Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/HXGYYyukSCOkoFgi97uEmg4jIJI.roa
File: HXGYYyukSCOkoFgi97uEmg4jIJI.roa (raw, json)
Hash identifier: vYxrycFT27U6osUJfeQYD1FPaC6x/KzqklJ2s4gOf0c=
Subject key identifier: 1D:71:98:63:2B:A4:48:23:A4:A0:58:22:F7:BB:84:9A:0E:23:20:92
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019D3DF94701A55B433090DD2DF8B2875CC0
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/HXGYYyukSCOkoFgi97uEmg4jIJI.roa
Signing time: Mon 30 Mar 2026 09:00:39 +0000
ROA not before: Mon 30 Mar 2026 09:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 178.254.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:f9:47:01:a5:5b:43:30:90:dd:2d:f8:b2:87:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Mar 30 09:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d7198632ba44823a4a05822f7bb849a0e232092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:83:79:3c:18:3b:d9:f4:1d:4a:11:79:31:
91:ee:38:81:3d:a8:2a:98:09:45:81:a5:ab:fd:e2:
30:dd:49:fc:4a:45:89:74:06:01:f9:85:be:99:ff:
b3:c5:e6:9b:52:5f:20:86:1b:b6:f5:8e:01:83:29:
78:ce:9b:c2:9d:da:96:49:f8:e5:b0:c7:36:d4:f5:
50:9b:06:d4:eb:89:84:78:86:8f:30:47:e1:64:51:
eb:05:50:70:a8:e3:9d:2f:b3:a4:c3:d4:1b:2d:dd:
3a:e4:cd:d0:59:b9:34:ac:ae:38:3e:12:25:38:cc:
42:30:75:93:e0:57:f9:0d:22:24:27:80:3e:b6:6a:
89:30:c4:68:cd:9c:df:76:03:1e:d0:67:37:e3:f6:
98:a1:de:87:05:92:b0:a7:e3:98:db:c0:10:98:bf:
43:54:51:30:11:07:48:ee:d0:43:48:0f:35:b4:21:
80:26:49:ed:5f:db:e2:5e:c2:ba:c0:24:72:7b:ce:
1f:20:61:b7:5b:61:c2:e3:a7:01:7c:20:1d:c4:2c:
fb:c6:d5:f5:84:72:57:ca:77:a9:0f:fc:ca:d6:49:
26:70:03:84:dc:4f:a3:4d:1b:b1:29:29:a2:db:82:
35:4c:20:4b:ef:76:a2:f5:de:1c:b7:40:84:c1:7d:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:98:63:2B:A4:48:23:A4:A0:58:22:F7:BB:84:9A:0E:23:20:92
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/HXGYYyukSCOkoFgi97uEmg4jIJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.177.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8a:4f:d1:5a:92:9a:06:dc:5f:1e:f8:e4:3a:e3:45:c9:96:
7a:a8:82:3a:d9:22:35:ef:56:f1:2e:2e:d9:ec:d5:c1:36:bb:
93:92:f6:c3:fa:d8:b3:57:92:4d:d1:3f:35:41:a5:19:e9:c2:
fd:e8:61:6c:12:f6:3d:9a:9c:f8:21:49:b7:b3:69:44:3d:c6:
ad:4b:79:ad:be:83:b1:2a:c8:6e:06:ac:48:02:2b:7c:04:1b:
bf:e3:60:54:75:1a:f6:29:02:93:85:98:dd:23:fc:89:39:e9:
5f:11:ed:41:fa:13:2d:c9:ea:46:52:d7:7c:82:6c:bd:63:f4:
df:8a:81:39:1e:30:a7:18:9d:55:ed:70:2f:42:e7:5e:11:b2:
b2:45:54:12:9b:e7:9a:d6:26:c5:00:ff:4a:aa:f4:7b:c1:68:
dc:cf:cc:86:6f:39:fe:81:81:dd:20:f5:5b:20:9c:28:d3:1f:
c9:59:7d:02:17:1d:7a:40:ee:56:fa:95:77:ce:4b:37:c0:e2:
47:3e:64:d4:47:b5:44:0a:2f:2f:28:7f:c9:00:78:45:0d:f4:
ca:78:51:eb:7b:a7:64:fc:35:18:bd:93:77:f8:43:61:77:1d:
6b:25:13:bc:99:8d:4b:45:5d:21:aa:e9:b0:35:be:8e:f0:35:
ac:a3:91:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ09+UcBpVtDMJDdLfiyh1zAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjYwMzMwMDkwMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDcxOTg2MzJiYTQ0ODIzYTRhMDU4MjJmN2JiODQ5YTBlMjMyMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpCDeTwYO9n0HUoReTGR7jiBPagq
mAlFgaWr/eIw3Un8SkWJdAYB+YW+mf+zxeabUl8ghhu29Y4Bgyl4zpvCndqWSfjl
sMc21PVQmwbU64mEeIaPMEfhZFHrBVBwqOOdL7Okw9QbLd065M3QWbk0rK44PhIl
OMxCMHWT4Ff5DSIkJ4A+tmqJMMRozZzfdgMe0Gc34/aYod6HBZKwp+OY28AQmL9D
VFEwEQdI7tBDSA81tCGAJkntX9viXsK6wCRye84fIGG3W2HC46cBfCAdxCz7xtX1
hHJXynepD/zK1kkmcAOE3E+jTRuxKSmi24I1TCBL73ai9d4ct0CEwX15NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1xmGMrpEgjpKBYIve7hJoOIyCSMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvSFhHWVl5dWtTQ09rb0ZnaTk3dUVtZzRqSUpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv6xMA0G
CSqGSIb3DQEBCwUAA4IBAQAAik/RWpKaBtxfHvjkOuNFyZZ6qII62SI171bxLi7Z
7NXBNruTkvbD+tizV5JN0T81QaUZ6cL96GFsEvY9mpz4IUm3s2lEPcatS3mtvoOx
KshuBqxIAit8BBu/42BUdRr2KQKThZjdI/yJOelfEe1B+hMtyepGUtd8gmy9Y/Tf
ioE5HjCnGJ1V7XAvQudeEbKyRVQSm+ea1ibFAP9KqvR7wWjcz8yGbzn+gYHdIPVb
IJwo0x/JWX0CFx16QO5W+pV3zks3wOJHPmTUR7VECi8vKH/JAHhFDfTKeFHre6dk
/DUYvZN3+ENhdx1rJRO8mY1LRV0hqumwNb6O8DWso5FZ
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:44 2026 by rpki-client