Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/H-6m9OAus7SJdJgHPXm_EOjYjKw.roa
File: H-6m9OAus7SJdJgHPXm_EOjYjKw.roa (raw, json)
Hash identifier: gi8ow+847xYV+vC4uNruDQ8q4FPVqzKl6+lW3Re5puA=
Subject key identifier: 1F:EE:A6:F4:E0:2E:B3:B4:89:74:98:07:3D:79:BF:10:E8:D8:8C:AC
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 019CA5574A6EE0E90E8622109881EAA2490E
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/H-6m9OAus7SJdJgHPXm_EOjYjKw.roa
Signing time: Sat 28 Feb 2026 17:41:27 +0000
ROA not before: Sat 28 Feb 2026 17:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215886
IP address blocks: 194.58.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a5:57:4a:6e:e0:e9:0e:86:22:10:98:81:ea:a2:49:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Feb 28 17:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1feea6f4e02eb3b4897498073d79bf10e8d88cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:ae:36:84:1f:1e:2d:8f:04:86:3e:f8:fe:
4f:60:fa:07:58:54:9a:76:93:62:1f:b6:8d:c1:7c:
3c:6c:05:1f:e1:7e:c7:97:50:5d:9f:51:f0:33:86:
9f:f0:e0:ba:fc:17:8d:9f:b6:21:19:29:48:9f:9b:
4c:61:06:e6:7e:f9:f9:96:6e:48:82:5a:ce:75:ef:
74:4a:73:34:00:a3:3b:02:56:0d:6d:e2:3c:61:e5:
6b:92:5c:8b:b8:f4:85:3b:01:7b:42:75:14:99:48:
77:fe:60:1e:4a:9a:80:58:1d:ed:cc:39:e7:8e:61:
d4:c8:19:b6:ad:46:73:21:c8:37:75:b2:6a:1e:74:
a1:52:c4:3b:40:42:ac:95:2a:70:d6:ce:7a:28:28:
56:4d:d1:57:51:60:e3:e5:b1:11:52:9b:54:36:65:
ae:bf:51:16:be:26:19:68:1b:9b:7d:98:91:3c:05:
9a:51:a5:00:16:b3:d7:7f:3c:b0:0f:69:a5:35:32:
ea:19:af:97:1f:f4:56:24:6c:76:9d:30:0f:2d:20:
b3:43:5e:c4:fc:d2:2e:9a:0d:b7:6f:ac:3a:ab:9f:
ff:93:dc:cb:23:3c:74:d2:a8:0c:58:c6:f0:18:21:
6f:a8:73:e2:1e:90:9e:bb:77:0c:07:90:ea:04:94:
11:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EE:A6:F4:E0:2E:B3:B4:89:74:98:07:3D:79:BF:10:E8:D8:8C:AC
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/H-6m9OAus7SJdJgHPXm_EOjYjKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e6:b2:68:41:9b:d4:8d:4c:11:89:f4:70:44:e0:12:c8:8f:
ea:7b:d0:97:66:63:e7:a6:8b:d8:ac:b9:89:30:25:3c:83:68:
32:00:9a:a9:c7:3d:87:bf:cc:ce:9f:a2:8e:d3:8e:59:1a:af:
bd:6b:af:ff:bc:46:35:8f:1c:be:1b:66:37:5b:d0:b1:a1:79:
45:0d:fa:1c:56:47:f2:2a:be:3c:b3:bb:80:27:42:30:79:dd:
76:83:8b:2f:df:32:19:ed:92:76:09:bc:7f:05:4f:70:05:ba:
c5:60:6b:53:88:71:cc:f5:da:b5:74:02:94:68:bb:c3:e3:e1:
b0:30:db:5c:71:04:8f:cc:16:b4:88:68:8f:3f:ec:0d:79:61:
3d:9c:8b:c8:1c:e6:30:1c:fd:08:fd:ee:0e:cb:7d:55:68:2b:
50:1a:4d:d8:6c:bc:46:85:7f:eb:ab:04:a8:b1:b8:7c:72:3c:
14:d3:69:b7:40:08:22:6c:8f:6a:9e:07:10:fc:73:1f:ab:89:
4d:c9:d6:b4:25:e5:9b:ba:2e:15:12:87:8d:22:9a:b9:9b:98:
83:41:0f:8e:bd:7b:ad:d6:4c:4b:41:a9:1f:0b:77:9e:7b:3e:
62:16:ad:e5:a7:83:eb:f9:72:34:c8:6d:09:57:2f:da:89:ac:
57:b8:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:25 2026 by rpki-client