Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/0ihzHauFogznBZ4D95qRfmh5DWY.roa
File: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (raw, json)
Hash identifier: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=
Subject key identifier: D2:28:73:1D:AB:85:A2:0C:E7:05:9E:03:F7:9A:91:7E:68:79:0D:66
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019B78355A9F9E0877461766C6F5E9165836
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/0ihzHauFogznBZ4D95qRfmh5DWY.roa
Signing time: Thu 01 Jan 2026 06:18:41 +0000
ROA not before: Thu 01 Jan 2026 06:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35077
IP address blocks: 45.13.32.0/22 maxlen: 22
166.108.128.0/18 maxlen: 18
166.108.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:5a:9f:9e:08:77:46:17:66:c6:f5:e9:16:58:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 1 06:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d228731dab85a20ce7059e03f79a917e68790d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:20:4f:52:f8:90:05:30:35:6f:bb:7a:e3:
35:5d:36:be:f7:af:af:83:2d:f6:a3:6b:f5:e8:d1:
a9:9f:39:8f:7d:c1:77:77:ca:67:26:eb:ba:25:ec:
ff:c4:9c:a5:db:91:30:58:9e:d7:5f:4b:f2:b6:0a:
e8:46:d1:4b:2d:8e:d7:6f:2f:94:5d:10:bb:76:7b:
88:14:61:92:67:26:51:80:b5:5a:a5:d6:5c:dc:6f:
dd:36:2c:f0:82:6b:69:61:53:49:59:a0:be:33:aa:
e6:3e:51:28:d7:54:da:4c:db:e3:79:cd:96:2e:f8:
23:65:a2:7e:ff:a5:25:15:1a:ac:27:36:ad:69:37:
15:f5:a2:35:64:3f:b3:b3:e9:db:ac:65:79:b6:ce:
2f:d2:b4:18:ec:a6:ab:93:c1:0b:3e:a7:17:71:3e:
0b:81:79:e8:35:c3:8b:81:98:4d:36:7c:56:94:fb:
49:67:8c:05:95:fb:4d:bd:e7:b9:8f:e9:df:55:8b:
40:3f:43:d5:01:3d:62:90:97:e8:f9:1d:58:c5:e3:
44:13:79:27:da:e3:b7:13:69:a7:b5:5a:ed:e8:09:
dc:3c:c9:22:ed:91:27:50:5a:8c:fd:2c:4b:2b:26:
82:be:5e:8f:bb:c8:2e:8c:9a:e9:f4:a4:59:89:6f:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:73:1D:AB:85:A2:0C:E7:05:9E:03:F7:9A:91:7E:68:79:0D:66
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/0ihzHauFogznBZ4D95qRfmh5DWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.32.0/22
166.108.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:d6:e2:41:38:9b:70:7d:9b:ec:9e:30:ed:14:53:90:2e:73:
02:94:43:5b:fd:57:a6:02:fb:8f:94:9b:00:a2:72:dd:8c:e3:
1c:0f:04:a5:07:1e:da:4f:21:b7:6b:25:21:99:14:91:55:21:
2d:62:05:d1:92:4a:a0:31:94:d7:3a:54:33:3b:84:bb:ad:16:
be:74:25:21:e3:50:01:e0:72:98:29:13:53:a1:58:f1:50:47:
90:2a:49:a5:7e:50:f9:0e:06:69:86:a9:69:d4:d8:5f:34:b3:
39:7e:b5:53:76:de:13:ce:b1:91:b1:31:92:c6:c8:e6:ff:99:
b4:f0:e8:79:6e:e8:3e:80:93:b2:92:ee:33:3c:9a:cd:1b:32:
97:66:c7:ad:0b:31:0b:13:ba:6a:26:15:99:02:5e:26:76:9b:
1b:72:79:c6:a2:8d:9c:6b:e9:10:f4:31:b3:77:ae:6b:d4:3a:
8f:df:71:87:da:d6:4e:fd:ba:ba:36:da:b3:64:0d:23:3f:a4:
1a:9d:cf:fa:42:f1:c1:9b:55:56:90:5e:2c:77:48:8c:98:34:
ee:02:27:0d:9e:bb:4c:1c:90:83:fa:2e:a3:df:c9:04:1a:0d:
9f:9c:82:f6:6c:d6:76:9f:bb:18:b0:46:8e:ee:39:ce:1c:b6:
7e:16:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:42 2026 by rpki-client