Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/HlmZWhQKKZe7LbyNd19F5rOhw9c.roa
File: HlmZWhQKKZe7LbyNd19F5rOhw9c.roa (raw, json)
Hash identifier: Jouu85rdzqcnP2F6Q7QfLS0eE3v/NY3xgKHeYPAUq20=
Subject key identifier: 1E:59:99:5A:14:0A:29:97:BB:2D:BC:8D:77:5F:45:E6:B3:A1:C3:D7
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019C911B3B3F64A748125F811147CC21A0B8
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/HlmZWhQKKZe7LbyNd19F5rOhw9c.roa
Signing time: Tue 24 Feb 2026 19:23:26 +0000
ROA not before: Tue 24 Feb 2026 19:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200919
IP address blocks: 89.126.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:1b:3b:3f:64:a7:48:12:5f:81:11:47:cc:21:a0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Feb 24 19:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e59995a140a2997bb2dbc8d775f45e6b3a1c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:91:e1:74:c3:cc:dc:0d:df:d6:8c:6c:a7:
19:9f:92:d2:f2:1c:6c:00:d3:30:0b:43:31:6b:db:
50:e8:e1:ed:99:fe:ea:44:85:a6:c7:01:8f:bb:d3:
85:96:a9:5d:1a:6a:ea:09:de:5e:71:34:73:d2:1f:
09:c7:b6:a8:36:5b:21:e1:ef:24:d3:f9:9f:a1:88:
59:8e:e5:fd:53:8d:25:aa:6c:41:7a:37:e7:64:53:
81:85:bf:1a:a3:6d:01:c2:93:1e:c8:fd:6d:cd:ec:
c8:29:c8:4c:7c:66:4a:98:2e:71:17:54:d6:6f:14:
b1:18:df:a5:28:43:c4:c2:6e:01:d7:e1:e4:9d:aa:
5d:99:cc:89:f1:6b:94:cb:59:78:7e:73:25:20:7f:
29:af:c7:6d:a0:75:c3:97:9e:85:e7:f7:49:ee:83:
01:69:26:6b:dd:7e:cb:0c:d1:2e:ab:8b:97:69:76:
c6:11:8f:66:2f:4d:c4:dc:76:94:bd:be:51:94:cf:
93:e2:3a:a5:d4:b2:9c:91:a5:ea:19:ab:a8:0d:f5:
44:cd:fe:f7:55:a5:02:93:bb:aa:f7:bb:34:31:0b:
48:98:30:6e:35:94:74:bf:9a:1c:a0:69:c3:8d:cd:
ef:17:3e:83:2f:d4:91:a1:39:90:a9:53:7b:71:65:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:59:99:5A:14:0A:29:97:BB:2D:BC:8D:77:5F:45:E6:B3:A1:C3:D7
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/HlmZWhQKKZe7LbyNd19F5rOhw9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:63:bf:36:ed:6c:f8:62:d9:da:a1:f0:d3:ca:37:bb:c3:0a:
6f:de:c9:64:52:85:78:18:76:a8:d8:a8:6c:a1:a0:86:e8:e4:
2e:91:a1:7f:69:9c:15:52:d5:3d:b2:51:90:49:6c:20:cd:ee:
30:86:4b:c6:93:c6:76:d8:e8:ed:4d:0f:8e:46:5d:dd:a7:7b:
7d:3a:04:39:b4:bc:21:df:bb:c7:1f:b6:ff:64:3c:66:97:e2:
44:fb:08:a0:61:75:68:56:64:75:11:ac:a6:96:86:18:59:43:
fe:0e:28:de:9b:d3:b0:81:70:82:d1:33:71:ea:f7:f7:2a:80:
11:56:57:5a:12:b4:c1:b7:d4:bc:4f:d0:19:dd:66:a0:23:8e:
e2:31:41:d9:be:35:58:5f:4c:c1:6a:8d:87:2e:4c:26:bb:31:
d1:54:e4:ed:78:3f:a2:33:80:27:9b:6a:34:45:aa:f0:73:71:
98:01:1a:98:59:91:92:43:bf:94:2b:ae:51:22:d0:ef:b3:e2:
7f:0d:e3:af:bd:b3:d8:27:17:fa:98:70:dd:ac:80:b9:91:34:
c2:5e:7c:6e:0e:29:7f:d6:46:f9:36:1b:9a:99:a1:db:94:5a:
ae:1e:b7:e5:e6:81:02:67:6c:aa:0e:ea:80:70:52:f0:7b:00:
bf:ee:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:58 2026 by rpki-client