Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/H0kxSANgIFzJYh1HgidAJVrmV3A.roa
File: H0kxSANgIFzJYh1HgidAJVrmV3A.roa (raw, json)
Hash identifier: NpCuBjNeagVZ61rXVGoQ4e37yykrFLHbhKwLm24ClZU=
Subject key identifier: 1F:49:31:48:03:60:20:5C:C9:62:1D:47:82:27:40:25:5A:E6:57:70
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019FA4EE64C08B4DB454D3068C0C0569A1D1
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/H0kxSANgIFzJYh1HgidAJVrmV3A.roa
Signing time: Mon 27 Jul 2026 18:55:14 +0000
ROA not before: Mon 27 Jul 2026 18:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204767
IP address blocks: 131.222.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:ee:64:c0:8b:4d:b4:54:d3:06:8c:0c:05:69:a1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 27 18:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f4931480360205cc9621d47822740255ae65770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:02:42:69:bd:73:1f:68:97:e4:27:b2:1b:
de:2c:07:df:61:98:60:f7:a8:dc:80:5b:8b:2c:9c:
c8:ee:06:63:bb:a7:01:7c:98:05:78:e2:68:77:48:
17:68:68:6b:83:49:55:28:a4:eb:f7:3f:83:93:a5:
be:0c:df:2b:be:a3:04:b5:cc:88:ab:bc:b9:ad:13:
45:64:46:ad:29:ee:ae:c3:9e:78:84:96:e7:27:a0:
0e:75:40:d4:55:f6:97:c3:63:63:37:f1:43:2a:03:
ed:b1:06:b6:2c:51:83:ff:21:ad:43:78:b0:2e:1d:
87:ea:05:6a:fa:6f:e6:d9:53:e3:88:6c:4f:54:b0:
6c:34:9f:e2:ec:ad:ca:5d:ff:fd:92:8a:97:e0:77:
ed:ab:df:1d:18:e2:1a:77:34:17:68:1c:32:f6:75:
ea:73:a3:7a:45:7d:08:4e:33:aa:a2:8f:a9:5d:a5:
f4:62:82:ac:62:6d:70:fb:29:0a:c3:b7:ce:96:3a:
16:e8:ba:55:3b:f4:b7:8e:48:f3:aa:34:50:53:6e:
8a:6a:e8:c4:b7:c1:58:1b:3b:3d:68:15:de:93:f7:
98:65:38:29:60:b8:4d:29:4c:99:3a:f7:70:2e:db:
3f:41:64:a1:fb:8f:6a:f3:ed:ae:40:e8:53:2b:45:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:31:48:03:60:20:5C:C9:62:1D:47:82:27:40:25:5A:E6:57:70
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/H0kxSANgIFzJYh1HgidAJVrmV3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.213.0/24
Signature Algorithm: sha256WithRSAEncryption
48:34:ca:03:8f:d6:53:10:77:4c:0a:6e:cc:d7:f3:57:33:a6:
15:93:a2:24:7f:e8:f3:d0:13:3c:5d:93:f4:06:f1:a9:62:69:
b5:03:13:cd:e9:93:ec:c5:c8:85:1c:6e:e4:9c:e9:ba:78:e9:
18:b6:68:e5:7f:6e:af:2e:22:e9:66:dc:c9:34:32:7c:6d:09:
dd:20:0a:44:02:40:9e:63:ad:be:e7:f5:49:24:af:50:81:46:
38:96:8a:15:35:fe:81:0a:a9:38:ae:11:fc:f4:e7:f9:3d:48:
41:28:9f:1a:68:cf:b0:e8:ce:64:89:c1:9e:e0:b1:78:7c:b9:
3a:46:dd:6f:f5:5d:0f:e6:92:d8:33:70:28:dd:d4:cd:8c:48:
0c:e0:ee:1b:68:65:d3:98:ec:55:09:4a:f0:0e:38:90:d6:67:
e3:0b:40:da:01:56:e4:f9:13:bc:18:72:cd:61:2c:0f:18:eb:
4f:56:b6:36:16:23:01:a5:4d:31:b8:59:c1:1e:67:50:1d:d7:
3c:6d:d9:2a:27:5f:31:8f:0f:87:47:c2:86:dc:31:9e:70:3e:
93:86:e9:22:2b:f1:29:8e:9d:25:64:f5:01:ac:cb:cd:8e:3a:
cd:0f:27:d3:5b:b3:aa:a8:19:79:c3:94:34:e0:3d:11:7d:d1:
23:76:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:57:00 2026 by rpki-client