Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HvgsdOOmxn9VMlqyv8I6hsxFfnQ.roa
File: HvgsdOOmxn9VMlqyv8I6hsxFfnQ.roa (raw, json)
Hash identifier: 7H3TvppIP2Zon3/lh7pr4yH6wvv/bxu/N0+89lLb9GA=
Subject key identifier: 1E:F8:2C:74:E3:A6:C6:7F:55:32:5A:B2:BF:C2:3A:86:CC:45:7E:74
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019EB6DAC76E10BB84C0BCBE1A97CAEB8AC0
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HvgsdOOmxn9VMlqyv8I6hsxFfnQ.roa
Signing time: Thu 11 Jun 2026 13:24:11 +0000
ROA not before: Thu 11 Jun 2026 13:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 189.74.124.0/24 maxlen: 24
191.44.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:da:c7:6e:10:bb:84:c0:bc:be:1a:97:ca:eb:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: Jun 11 13:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ef82c74e3a6c67f55325ab2bfc23a86cc457e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:1f:b3:e0:ae:9a:d3:4c:21:da:9b:de:25:
e5:57:0d:95:a7:e5:01:ea:16:aa:2c:b0:77:1a:ea:
36:a1:c9:19:9f:d3:38:16:58:1f:97:f8:e3:fe:58:
f3:43:4e:f0:54:31:51:a3:0d:ca:9c:d3:56:88:c3:
e6:39:47:b2:98:cc:fd:03:a2:50:b0:1b:22:3d:cb:
f6:5c:c9:85:a4:cf:69:4e:27:a6:d9:83:a2:da:16:
f6:7c:37:41:72:29:22:85:90:3d:24:d8:be:92:81:
32:cc:c7:4a:73:01:0f:cb:e6:ae:12:e6:12:57:3f:
95:95:e7:a7:b4:4a:39:83:01:30:06:02:71:a5:3c:
3d:bb:6b:84:38:26:49:66:83:73:28:59:69:ef:98:
47:4e:c3:7b:e8:67:1f:02:6c:61:04:5b:4a:f8:d1:
a1:43:91:49:38:25:ae:c3:fb:ad:f3:ab:ea:50:77:
1a:46:c5:25:f7:f6:89:c2:a7:f0:03:44:8d:fe:a3:
7b:fa:28:cd:e4:e3:ab:9a:7d:ca:c5:ec:cb:be:92:
a4:34:c3:e3:e7:7f:f7:9d:2b:f4:17:a1:45:a9:9f:
21:49:cd:a2:6d:74:63:4a:b0:f1:ff:d5:e6:69:04:
08:f5:88:bc:cb:d5:0c:4d:6d:72:21:5c:14:a2:5c:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:2C:74:E3:A6:C6:7F:55:32:5A:B2:BF:C2:3A:86:CC:45:7E:74
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/HvgsdOOmxn9VMlqyv8I6hsxFfnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.124.0/24
191.44.33.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5e:4c:b8:73:2a:09:c2:37:fd:77:15:53:b3:f7:0d:a7:c5:
e0:c1:df:e9:87:89:fc:d3:1b:e1:19:51:15:6d:9f:f5:0e:60:
85:20:ed:e2:b0:35:53:10:e5:4e:9f:9e:a9:b3:5f:1d:b8:c6:
16:39:a0:ee:b9:18:3e:f1:00:3d:ed:d9:b4:3b:30:2a:4d:5a:
05:1d:af:23:80:e5:39:d9:77:bd:4e:c4:45:7e:73:39:53:16:
eb:bd:42:63:e6:39:57:c3:bd:ab:af:1c:e3:f0:53:9f:63:62:
fb:69:a1:59:8d:d9:75:b0:91:b7:28:bd:30:ba:45:15:7b:2f:
a0:a3:de:fd:72:00:e8:84:3c:b5:87:77:74:d1:84:93:a7:6a:
e1:01:12:49:ec:44:49:1b:30:ad:ef:a2:09:42:cc:90:c2:50:
af:20:9a:9b:79:42:92:0c:0f:c6:f7:93:b2:29:03:00:84:67:
63:c6:7c:f8:c3:8e:1c:82:7e:44:5b:5a:97:b8:80:d8:e3:07:
d2:7c:1d:99:28:b0:74:4e:6b:30:b6:b7:c8:7f:3c:ae:52:58:
d7:3c:77:b7:2a:6b:13:45:d4:e0:a5:9b:52:fd:05:1d:e6:b7:
4b:dd:99:64:b8:4e:64:c9:b1:c6:1d:33:d7:ed:13:55:b6:3a:
ed:54:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:45 2026 by rpki-client