Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hOn2Iuu_q5kzFqZk9rlUCld7RC0.roa
File: hOn2Iuu_q5kzFqZk9rlUCld7RC0.roa (raw, json)
Hash identifier: qjr9DZIb9Uu+9OZGm4GuFK4YKlxyvg4uzxTEeSXKKhI=
Subject key identifier: 84:E9:F6:22:EB:BF:AB:99:33:16:A6:64:F6:B9:54:0A:57:7B:44:2D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D8A3D83F5FC58AF5E24829D841350F0B3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hOn2Iuu_q5kzFqZk9rlUCld7RC0.roa
Signing time: Tue 14 Apr 2026 04:26:20 +0000
ROA not before: Tue 14 Apr 2026 04:26:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214309
IP address blocks: 89.35.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:3d:83:f5:fc:58:af:5e:24:82:9d:84:13:50:f0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 14 04:26:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84e9f622ebbfab993316a664f6b9540a577b442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:71:5d:b4:f8:6a:94:b8:89:dd:7e:a3:8b:
dd:65:b8:19:fc:59:b0:7b:1b:14:bf:b2:f3:8a:45:
9c:1a:a1:bf:78:4c:cd:c1:73:73:37:0f:a4:79:37:
1b:66:2f:48:83:72:b9:54:4d:75:17:60:c0:7d:69:
0f:6d:f3:e5:fc:09:f8:29:1d:d1:ab:1d:ca:bd:a6:
4a:ff:51:3d:2b:c8:53:0c:bb:5e:62:b1:86:1a:e8:
b4:1c:88:f0:b5:09:20:8e:6e:cc:10:79:60:3b:e5:
13:1e:4b:dc:a0:d9:20:04:17:e0:0d:39:bc:02:80:
9a:78:59:73:84:4f:fd:af:83:f0:35:30:37:76:0e:
14:ca:b4:c4:08:6f:10:4a:cf:7e:3d:e4:d4:d2:bb:
00:eb:c9:e4:f3:9c:df:a7:2c:ee:7a:3c:6c:c9:69:
87:25:8e:a1:48:bc:2a:cd:31:8d:ff:70:0e:fb:1d:
ca:72:7f:41:20:7f:f9:0b:eb:99:79:b2:ed:ff:72:
16:3b:40:4e:86:8e:a3:b9:93:fb:4a:cb:1b:be:aa:
9d:a7:3b:60:80:b2:e2:f1:2e:9f:53:17:6f:28:46:
f3:63:ef:22:1b:f2:5a:99:e8:ff:56:e5:2d:dc:9d:
f0:df:59:00:f2:89:07:ec:94:e8:cc:4c:dc:c2:e7:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:F6:22:EB:BF:AB:99:33:16:A6:64:F6:B9:54:0A:57:7B:44:2D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hOn2Iuu_q5kzFqZk9rlUCld7RC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
Signature Algorithm: sha256WithRSAEncryption
44:60:4f:65:db:53:a2:1f:4b:33:f3:38:95:3e:46:ab:1d:c9:
45:3b:cf:29:6b:da:0c:f9:1f:3a:40:c3:cd:dd:65:61:29:be:
19:0b:d2:81:d2:20:6b:6d:b6:27:c6:31:3b:21:5e:39:5e:b4:
da:fc:5b:f5:4d:7e:cb:c0:8d:57:b8:2f:57:ad:41:05:92:22:
21:0b:97:1c:0a:67:10:d8:21:7a:34:72:8a:d6:bc:19:44:2d:
03:42:30:47:da:de:ea:d9:63:e8:0d:89:81:5b:73:31:ef:96:
d4:d5:c7:66:17:40:d3:55:4d:c5:32:a1:3b:51:cb:37:49:f5:
33:59:62:c6:ce:ee:29:e5:2e:cf:99:a2:38:24:8c:43:c3:54:
17:9b:ac:9d:e4:0c:5e:17:fb:fc:14:c9:e5:b9:52:cf:98:95:
60:ab:4d:4f:f6:b8:bc:3a:8d:62:3a:23:04:06:72:ad:33:bb:
0f:11:fa:b3:44:cb:71:ab:55:20:2b:ae:2a:8d:86:48:67:87:
a9:a8:72:c7:e4:4c:2c:32:2b:f5:59:f1:87:c8:8f:dc:87:b3:
68:41:28:59:5d:f5:f9:89:79:55:a7:09:1c:b5:c9:6c:52:99:
9b:ad:7d:ea:0f:e3:99:34:32:63:c2:af:12:15:a5:ff:e3:6a:
f9:08:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:21 2026 by rpki-client