Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/hHEanNlH66UpBzrufa8V3zgLsVg.roa
File: hHEanNlH66UpBzrufa8V3zgLsVg.roa (raw, json)
Hash identifier: LPGpgArxw+afLEMaZReJOAyJZXeQjoB8ECACHaA87SU=
Subject key identifier: 84:71:1A:9C:D9:47:EB:A5:29:07:3A:EE:7D:AF:15:DF:38:0B:B1:58
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 019E4786CB65E97AF6EED1504D0095786D9F
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/hHEanNlH66UpBzrufa8V3zgLsVg.roa
Signing time: Wed 20 May 2026 22:34:36 +0000
ROA not before: Wed 20 May 2026 22:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199912
IP address blocks: 88.214.24.0/24 maxlen: 24
91.238.180.0/24 maxlen: 24
91.239.208.0/24 maxlen: 24
109.202.246.0/24 maxlen: 24
185.55.240.0/24 maxlen: 24
194.24.161.0/24 maxlen: 24
2a12:5e40::/32 maxlen: 32
2a12:5e41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:47:86:cb:65:e9:7a:f6:ee:d1:50:4d:00:95:78:6d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: May 20 22:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84711a9cd947eba529073aee7daf15df380bb158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:95:0e:38:9c:eb:2f:34:8d:3d:9b:ec:28:
d4:b9:28:eb:2f:c8:fb:fc:22:9c:9c:68:a2:46:5f:
f6:34:22:89:43:14:3c:32:64:01:61:9e:00:42:52:
1c:23:48:9a:47:93:59:12:a2:48:d0:33:29:54:f9:
2d:5d:a8:34:62:f0:c4:11:4b:67:91:fc:dc:64:79:
a3:17:50:d1:27:84:b1:50:60:10:6b:86:f2:29:89:
b9:65:08:54:1e:d8:45:bc:08:d6:2f:43:6c:ed:c7:
4d:6c:91:05:83:ab:29:dc:9a:7f:57:76:bb:6e:ce:
c9:6f:8b:8c:87:55:c4:be:f6:c1:b5:8d:19:bb:49:
bb:84:d7:bb:e5:31:0b:ea:64:75:e7:c2:97:ef:3d:
f2:83:f2:e4:25:9c:af:bd:6b:a8:dd:a9:2a:1e:a0:
50:63:0d:30:34:2a:f2:f7:bb:9c:17:fb:8c:6d:2c:
21:e7:3b:2a:fb:7d:2d:8b:b9:db:49:53:e2:9b:b8:
47:26:c5:ec:fe:7d:cd:4c:6b:01:c6:85:d4:7b:b3:
68:67:22:00:29:41:96:ca:9c:50:2c:0d:70:db:93:
af:8a:c2:49:8c:45:96:6b:cc:bd:2b:da:5c:ce:5c:
4c:03:4d:64:82:f4:63:b7:fe:a0:0d:4b:c9:5a:8c:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:1A:9C:D9:47:EB:A5:29:07:3A:EE:7D:AF:15:DF:38:0B:B1:58
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/hHEanNlH66UpBzrufa8V3zgLsVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.24.0/24
91.238.180.0/24
91.239.208.0/24
109.202.246.0/24
185.55.240.0/24
194.24.161.0/24
IPv6:
2a12:5e40::/31
Signature Algorithm: sha256WithRSAEncryption
56:58:73:44:dc:af:2c:19:e2:0b:63:c3:76:89:4e:5d:85:7d:
5a:22:a3:c5:96:ad:1a:e2:af:0e:4e:ce:06:5a:12:fe:50:f5:
bd:6a:e3:b6:e3:e0:83:a0:8f:85:22:45:dd:23:11:ee:6d:49:
82:eb:be:07:77:2b:21:be:65:e6:77:4b:85:4c:35:2a:4b:c8:
36:a7:7b:4a:6b:ef:dd:75:78:61:9b:b0:21:8a:93:69:ed:63:
2b:a7:8e:25:17:3b:e9:19:82:47:56:58:fe:6f:8b:1f:98:e5:
7e:43:e4:25:7a:fd:a0:e9:34:69:b5:1f:1a:2b:bd:39:25:1c:
0a:bf:01:80:9e:d2:ea:5c:fd:99:8c:19:3a:6d:44:68:c6:ef:
62:6c:e4:d8:8d:74:77:35:b2:91:eb:9b:8e:b1:3c:1b:14:cc:
d1:a5:16:ee:b8:2e:81:c8:e5:65:ff:64:d4:f0:5a:10:d8:a5:
10:02:a0:d7:42:c9:af:14:78:3f:26:cd:a2:57:e4:dd:67:b5:
ca:ab:61:24:b5:06:6b:3a:95:7c:da:f7:83:10:1a:64:a2:e3:
ae:55:ec:70:89:13:ed:c4:3e:73:3c:c4:ae:a3:92:7b:88:b3:
fc:08:50:b5:88:1e:9b:65:08:73:a2:0f:71:60:4e:a8:e7:a3:
5c:7b:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:42 2026 by rpki-client