Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/HxYUvq4j2kjQjb7fshoqtr7XjZM.roa
File: HxYUvq4j2kjQjb7fshoqtr7XjZM.roa (raw, json)
Hash identifier: cwIpRvWEll/venDzRwZfRL54RVOPqOWPtG5IFPsqVFA=
Subject key identifier: 1F:16:14:BE:AE:23:DA:48:D0:8D:BE:DF:B2:1A:2A:B6:BE:D7:8D:93
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019E821667AC98ACFCBA6AEA7BFE7C10EE5E
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/HxYUvq4j2kjQjb7fshoqtr7XjZM.roa
Signing time: Mon 01 Jun 2026 07:29:26 +0000
ROA not before: Mon 01 Jun 2026 07:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57618
IP address blocks: 37.1.112.0/20 maxlen: 20
45.139.140.0/22 maxlen: 22
2a10:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:16:67:ac:98:ac:fc:ba:6a:ea:7b:fe:7c:10:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jun 1 07:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f1614beae23da48d08dbedfb21a2ab6bed78d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:04:bc:27:ac:ac:1a:b1:5b:d5:e2:56:b3:
26:8d:7e:13:94:57:a8:3f:5c:45:14:8e:52:3b:c9:
6c:b6:05:71:ba:09:c0:89:5c:f9:f9:86:91:11:09:
fa:71:ff:09:99:54:e9:0a:43:02:0f:e4:81:74:20:
0b:5f:bd:48:6c:ae:95:90:97:a7:c3:5c:cd:d5:7e:
3a:38:64:e0:4e:92:7a:6a:95:0e:e5:4c:69:08:b4:
1d:6d:ca:f7:f3:bc:c2:ee:b1:c2:44:fd:dc:33:be:
4a:aa:0e:73:41:ef:7b:5b:03:83:05:a3:1d:9e:8a:
45:b3:db:6a:c7:90:9e:d0:04:c6:f2:a6:87:d9:84:
c1:a3:67:3d:a9:06:b1:fe:96:cd:a9:66:22:7a:45:
2c:53:6c:4f:1c:1d:b1:59:ee:b9:00:a6:ad:38:41:
4d:8a:ad:1d:ee:d7:be:23:97:59:4e:46:b6:c5:91:
1f:ab:38:e5:22:b0:33:4f:3e:d3:f3:c6:4f:12:f1:
30:27:dd:13:3f:3f:08:95:27:59:71:27:d0:f0:0a:
a4:cf:7d:f2:63:00:5e:11:4b:45:f0:12:54:c0:28:
9a:97:e8:26:52:16:ee:73:d1:16:2c:46:82:ae:5a:
bd:c8:b9:22:d6:14:66:56:23:dc:19:e9:07:99:29:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:14:BE:AE:23:DA:48:D0:8D:BE:DF:B2:1A:2A:B6:BE:D7:8D:93
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/HxYUvq4j2kjQjb7fshoqtr7XjZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.112.0/20
45.139.140.0/22
IPv6:
2a10:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
47:2b:da:51:3f:80:37:40:09:62:c2:d1:5c:22:1f:d4:62:01:
fc:34:d6:34:12:cf:83:81:a5:86:75:f7:ae:99:26:b1:32:72:
75:44:df:7e:4a:5a:6f:ce:53:5d:52:3f:7d:f6:95:5f:2d:ba:
db:39:4d:e5:c9:34:b7:a6:87:ab:34:5f:53:28:51:12:36:1c:
3a:13:ac:27:7a:d1:be:ee:52:12:72:8d:a5:f7:0a:bb:d8:45:
34:a4:7f:89:57:67:c3:43:33:ea:2b:9b:b0:67:76:47:0d:af:
9b:36:6f:60:55:49:ed:95:31:38:4c:4c:0b:d8:3d:1e:63:bb:
57:e7:e8:b5:8a:26:39:a3:b5:9b:48:ca:66:50:67:aa:55:08:
c4:53:3b:39:61:e5:99:61:5c:a2:7e:2c:a4:73:ab:b2:72:bc:
78:24:0b:64:5d:92:8e:93:f3:f8:69:59:98:f9:f2:3c:0f:07:
3a:71:d5:d3:dc:18:c1:f0:f6:82:f8:3a:fd:82:c8:2c:aa:40:
9e:6c:87:21:0a:6d:07:1c:5b:c9:d1:a6:ea:36:17:20:cf:24:
09:db:8f:34:12:0b:a8:72:f5:dd:fb:47:79:30:88:fa:83:6f:
d7:8d:e1:43:fd:c3:1a:a9:43:40:22:81:51:8a:8d:c5:b9:86:
bd:dc:96:9f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ6CFmesmKz8umrqe/58EO5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx
ODAzZmYwHhcNMjYwNjAxMDcyOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjE2MTRiZWFlMjNkYTQ4ZDA4ZGJlZGZiMjFhMmFiNmJlZDc4ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoEEvCesrBqxW9XiVrMmjX4TlFeo
P1xFFI5SO8lstgVxugnAiVz5+YaREQn6cf8JmVTpCkMCD+SBdCALX71IbK6VkJen
w1zN1X46OGTgTpJ6apUO5UxpCLQdbcr387zC7rHCRP3cM75Kqg5zQe97WwODBaMd
nopFs9tqx5Ce0ATG8qaH2YTBo2c9qQax/pbNqWYiekUsU2xPHB2xWe65AKatOEFN
iq0d7te+I5dZTka2xZEfqzjlIrAzTz7T88ZPEvEwJ90TPz8IlSdZcSfQ8Aqkz33y
YwBeEUtF8BJUwCial+gmUhbuc9EWLEaCrlq9yLki1hRmViPcGekHmSlQVQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFB8WFL6uI9pI0I2+37IaKra+142TMB8GA1UdIwQY
MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt
ODgwZjgyMzhmZTBiLzEvSHhZVXZxNGoya2pRamI3ZnNob3F0cjdYalpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi
LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEJQFwAwQC
LYuMMA0EAgACMAcDBQMqEPsAMA0GCSqGSIb3DQEBCwUAA4IBAQBHK9pRP4A3QAli
wtFcIh/UYgH8NNY0Es+DgaWGdfeumSaxMnJ1RN9+SlpvzlNdUj999pVfLbrbOU3l
yTS3poerNF9TKFESNhw6E6wnetG+7lISco2l9wq72EU0pH+JV2fDQzPqK5uwZ3ZH
Da+bNm9gVUntlTE4TEwL2D0eY7tX5+i1iiY5o7WbSMpmUGeqVQjEUzs5YeWZYVyi
fiykc6uycrx4JAtkXZKOk/P4aVmY+fI8Dwc6cdXT3BjB8PaC+Dr9gsgsqkCebIch
Cm0HHFvJ0abqNhcgzyQJ2480EguocvXd+0d5MIj6g2/XjeFD/cMaqUNAIoFRio3F
uYa93Jaf
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:25:06 2026 by rpki-client