Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/HJjCnPxcLr49IvKoDrFP1CC0m8A.roa
File: HJjCnPxcLr49IvKoDrFP1CC0m8A.roa (raw, json)
Hash identifier: 4L10cV6hR7TN06HGFmZ5GpAX6xvIaNK+v4kUHgzsjnY=
Subject key identifier: 1C:98:C2:9C:FC:5C:2E:BE:3D:22:F2:A8:0E:B1:4F:D4:20:B4:9B:C0
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 019E2BA9EC0147504137956F4E04224800D3
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/HJjCnPxcLr49IvKoDrFP1CC0m8A.roa
Signing time: Fri 15 May 2026 12:43:36 +0000
ROA not before: Fri 15 May 2026 12:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204533
IP address blocks: 185.248.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:a9:ec:01:47:50:41:37:95:6f:4e:04:22:48:00:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: May 15 12:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c98c29cfc5c2ebe3d22f2a80eb14fd420b49bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:1d:3a:08:c2:3c:56:08:3f:b3:e1:69:39:
de:c9:b0:db:03:a0:bf:7e:17:73:c1:95:9f:74:e4:
84:57:42:ea:3c:48:b3:9b:b0:63:70:12:33:92:99:
a4:39:ec:0e:4f:35:87:2b:19:fa:19:71:d3:3c:2f:
49:05:21:e0:76:5e:30:67:8d:cd:b4:ec:b7:74:7b:
d0:e4:2e:6c:cd:14:af:2b:80:1d:d6:a2:3f:c6:86:
41:be:e9:4f:ec:ed:f2:ba:aa:f0:de:18:ff:a6:ae:
94:15:d4:ab:4e:d1:40:48:82:7a:7c:ef:23:3e:ce:
2d:8f:86:cd:e7:55:64:87:62:b4:23:a7:09:da:27:
5a:e0:37:cb:5d:bf:31:64:1e:df:2b:48:f1:e4:69:
39:cf:39:9e:19:14:b4:cf:ff:a5:a2:14:8d:69:52:
45:d8:f6:e0:36:29:28:71:9d:e7:5b:1b:78:ad:6a:
80:20:6a:69:64:fe:0a:11:a9:f7:61:89:d1:11:98:
b8:59:3f:25:e4:18:56:ef:b8:12:a2:79:1c:95:2a:
09:2c:f0:eb:f3:95:28:de:bd:55:fb:05:d8:06:5b:
89:bc:f0:18:bc:88:2b:76:ba:9a:85:12:81:18:bc:
29:ea:89:9c:15:7a:f1:44:b0:32:2c:f8:48:d8:87:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:C2:9C:FC:5C:2E:BE:3D:22:F2:A8:0E:B1:4F:D4:20:B4:9B:C0
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/HJjCnPxcLr49IvKoDrFP1CC0m8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.32.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5b:ec:03:71:12:e5:48:ea:72:6c:9b:0a:50:70:7d:c7:f0:
d5:7f:17:72:36:ef:a4:db:65:6b:6f:b8:42:78:fe:d8:64:fc:
0d:24:50:5f:77:de:ea:c8:e2:65:bf:01:7c:b9:23:5d:03:b3:
9e:3a:e2:5d:8c:84:5e:73:63:61:5e:a2:56:4a:58:91:35:1d:
24:b8:87:eb:21:59:00:36:da:55:61:17:f1:6a:0b:3b:71:8c:
29:cd:06:ef:30:0a:2e:35:3f:70:0a:e0:93:80:d9:56:35:41:
e1:30:b8:d7:7a:79:23:1a:95:bd:4a:3e:97:7d:22:82:e0:c7:
1f:49:25:31:8e:44:27:67:e6:07:0d:54:ea:84:81:df:84:65:
25:a8:c0:30:cc:78:40:f1:eb:50:aa:d0:3d:3f:a2:d0:cc:76:
44:7a:2a:fc:e0:c5:af:cc:0d:f7:49:e8:ce:5b:ca:24:a4:b6:
df:08:eb:d2:fc:b7:cb:3c:df:9e:93:af:f6:92:c4:4f:4d:b7:
e7:9f:33:bf:0c:40:75:86:41:0f:8a:02:94:cf:e7:d3:c0:40:
54:a4:8a:f6:87:a5:05:aa:d2:c1:c2:2b:3d:ba:4b:7d:9f:2e:
48:b3:69:ca:d4:2c:dd:92:f1:2c:99:90:35:c6:a8:93:05:eb:
52:53:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:33 2026 by rpki-client