Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/HdDV5YwMNyFB8k-B_X4MU9-30nM.roa
File: HdDV5YwMNyFB8k-B_X4MU9-30nM.roa (raw, json)
Hash identifier: luVRxl/FnQsj5OM+H4x3yTlX1ppJM10PIPO1RpHN79g=
Subject key identifier: 1D:D0:D5:E5:8C:0C:37:21:41:F2:4F:81:FD:7E:0C:53:DF:B7:D2:73
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019D2B2EC2CDC7B87F2B2F87689016BCEF3C
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/HdDV5YwMNyFB8k-B_X4MU9-30nM.roa
Signing time: Thu 26 Mar 2026 17:26:18 +0000
ROA not before: Thu 26 Mar 2026 17:26:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.13.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:2e:c2:cd:c7:b8:7f:2b:2f:87:68:90:16:bc:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 26 17:26:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dd0d5e58c0c372141f24f81fd7e0c53dfb7d273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:28:2e:f4:0d:2c:f6:b0:d7:10:bd:81:95:
e9:63:25:19:c3:ff:ce:e3:84:cf:6b:b5:ed:5f:7f:
ca:bc:22:5b:f5:b2:ca:2e:91:2b:92:1a:85:bd:24:
27:8c:7d:53:a0:02:13:b2:68:64:7d:a7:bc:b5:d0:
51:80:51:6f:87:2d:c1:d4:67:65:ad:d7:96:10:ef:
d6:16:28:82:33:d0:7b:94:ab:7b:8d:c0:39:1f:60:
eb:fb:8a:c4:95:1f:1a:d9:02:55:c7:fc:d9:e0:4c:
21:31:6f:29:1c:f4:a3:21:26:f4:be:95:c0:70:d1:
9a:a5:cd:e8:84:bc:7a:9a:38:48:ce:5f:2a:18:e4:
c9:7b:41:56:5b:be:2e:0e:d9:4d:a1:df:2e:6e:8b:
e2:f3:b6:c8:d7:7b:d7:c1:f3:14:ea:82:1d:dc:46:
94:5c:86:51:83:d9:bb:e9:dc:f2:6f:9d:9f:ea:b0:
60:b1:51:b2:53:db:d1:bc:61:69:c6:af:a2:d4:7e:
fb:63:72:56:cb:84:da:05:47:d8:fd:21:93:dc:ef:
0b:e5:f9:83:7d:fa:be:e0:f1:b8:62:56:26:72:ab:
69:7d:f3:a7:8f:2b:73:6f:6d:d2:ce:bd:68:95:c1:
a9:17:9f:37:d8:96:32:b6:aa:11:b5:3a:d3:25:b2:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D0:D5:E5:8C:0C:37:21:41:F2:4F:81:FD:7E:0C:53:DF:B7:D2:73
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/HdDV5YwMNyFB8k-B_X4MU9-30nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
94.154.32.0/23
94.154.35.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
18:57:e8:b4:a9:8d:4b:08:03:4a:84:99:62:b8:66:0b:2a:f5:
07:77:dc:4d:06:9e:6c:c9:62:76:a4:d4:b3:0a:6d:e2:95:96:
4b:3d:d1:27:89:9a:39:f1:07:3f:77:92:74:83:4b:eb:93:6c:
f0:5a:14:d7:49:45:9b:a1:20:67:84:d9:1e:d6:1b:25:64:c1:
97:84:5d:be:33:ee:45:8e:f4:c8:4e:3b:04:6a:a9:c9:a7:fb:
c8:cc:f2:df:b2:56:18:7d:95:c8:7d:e1:dd:ac:29:5d:6b:82:
4b:41:45:6f:94:35:62:fb:12:4c:a2:e2:0e:c4:01:d8:2a:b8:
7d:4f:49:dd:68:1a:23:c8:65:27:c1:4b:97:00:c3:a8:4f:7f:
fb:d3:ce:13:9a:81:75:4f:73:55:30:99:b7:a0:e3:f4:a4:2e:
69:6d:7c:5b:d5:34:21:69:ea:49:a2:02:dc:1c:f1:79:95:7f:
b5:ac:b9:e9:87:a0:43:fa:69:95:4e:41:cf:c5:91:5b:0b:f9:
61:de:56:88:d4:9e:c3:a7:83:86:65:3d:ea:f0:a5:91:55:0d:
59:06:ed:db:b3:c2:e4:7e:f6:24:a0:93:5f:9d:89:a6:67:fc:
30:7e:34:b0:22:1d:01:96:ad:ef:dd:57:be:53:24:29:00:70:
b1:fb:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:31 2026 by rpki-client