Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/FH-HegbkfJBlYkgQDtIOilA52FA.roa
File: FH-HegbkfJBlYkgQDtIOilA52FA.roa (raw, json)
Hash identifier: vevNPAkCNe2NwwbA5K2E0UcTudDJF5vZ0Hu7+zSCHDA=
Subject key identifier: 14:7F:87:7A:06:E4:7C:90:65:62:48:10:0E:D2:0E:8A:50:39:D8:50
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A07176B60063EB4C200E77BE9E3B646A5D
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/FH-HegbkfJBlYkgQDtIOilA52FA.roa
Signing time: Sat 05 Sep 2026 12:06:40 +0000
ROA not before: Sat 05 Sep 2026 12:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 195.238.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:76:b6:00:63:eb:4c:20:0e:77:be:9e:3b:64:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Sep 5 12:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=147f877a06e47c90656248100ed20e8a5039d850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:ce:05:e9:bf:a5:17:19:2a:68:91:57:e0:
d5:3f:0e:d6:cd:dd:89:b7:71:4c:49:5f:6d:f7:48:
f7:ef:bc:62:03:4b:c9:2c:b7:b2:82:06:fa:49:1a:
a9:0a:00:87:d7:47:5c:12:f8:2e:67:d9:f8:6d:05:
9e:a0:84:56:11:33:6d:42:2f:79:c0:1c:47:59:f9:
8f:45:72:6d:80:f4:70:2a:60:ca:6c:d5:8e:22:da:
ac:5d:42:24:02:cb:18:1a:2e:48:9d:7e:cb:d8:e4:
02:ce:02:56:17:11:ed:bf:c3:b9:fa:70:37:9b:cb:
3e:6f:d8:4b:b1:62:81:a4:4a:c2:3a:6d:de:6e:17:
e4:81:88:21:1a:fe:66:04:66:61:1a:3f:9a:28:ce:
e4:2c:05:cf:f0:ec:fa:ef:d7:0d:c2:f3:61:48:ad:
60:07:5e:9c:8e:93:1c:d8:e6:70:4f:2d:8b:75:ca:
bb:be:bb:bd:5d:0c:cf:32:a4:14:9d:fc:5e:37:80:
49:74:99:2c:e3:c5:c2:ad:48:67:bc:e9:43:a1:8e:
80:33:c1:75:91:61:7c:b3:2c:ee:03:6a:44:d2:35:
eb:d9:db:45:05:dd:69:8a:df:f6:d8:49:c1:0f:1d:
db:cb:a7:b9:da:0f:05:5d:a5:ef:b5:39:5d:21:6b:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7F:87:7A:06:E4:7C:90:65:62:48:10:0E:D2:0E:8A:50:39:D8:50
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/FH-HegbkfJBlYkgQDtIOilA52FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:26:85:d5:64:09:65:24:86:ba:44:7a:a0:52:e6:c9:5a:a0:
d0:11:e8:94:ca:de:dd:d9:62:c9:2f:e6:d4:79:19:21:19:b1:
9a:d6:15:32:bc:14:10:ca:9b:e1:e7:de:38:e9:74:11:7b:60:
04:7d:a8:f2:66:bf:4f:fb:e6:44:4b:3d:d4:ee:99:a1:cf:0c:
84:01:6e:1d:d7:c6:84:34:4e:8c:e9:f6:d3:55:b9:d5:47:12:
cc:01:e7:94:2f:d3:40:ce:aa:07:74:dd:ec:f7:48:e4:71:59:
e8:52:15:7e:fd:10:2e:55:6d:11:3a:63:73:9a:56:c9:f4:4c:
c1:bf:b2:fc:cf:58:62:e9:da:88:9f:83:6e:3d:4c:d3:6f:1b:
28:31:7b:f6:a6:64:f6:5f:e7:f5:08:55:e0:6c:62:1e:be:a2:
89:dc:7d:63:32:e0:41:13:d5:dd:5d:e8:a0:35:ea:28:f6:7a:
37:fa:19:a7:7f:39:43:8e:97:9e:2e:8d:df:87:41:bf:2f:f8:
6e:82:5d:45:6e:e3:7f:f7:de:77:9a:0e:ec:48:b5:69:bc:6e:
18:f5:7f:52:03:a7:0e:7b:bc:10:65:b2:1e:f5:f1:c3:de:fd:
34:75:06:ed:92:7e:26:25:b0:2f:6c:89:95:3f:84:12:a1:c9:
9b:0f:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:30 2026 by rpki-client