Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/HNN0KU7IiTJStGaOGTqF_XR0ZzM.roa
File: HNN0KU7IiTJStGaOGTqF_XR0ZzM.roa (raw, json)
Hash identifier: rmNekKcX/aQsbkqF8kU2P0webABAApIFO8lmDXKbXUU=
Subject key identifier: 1C:D3:74:29:4E:C8:89:32:52:B4:66:8E:19:3A:85:FD:74:74:67:33
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019FA7012157BC3A7EBDC9BEAFFE3BD9A167
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/HNN0KU7IiTJStGaOGTqF_XR0ZzM.roa
Signing time: Tue 28 Jul 2026 04:34:56 +0000
ROA not before: Tue 28 Jul 2026 04:34:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
94.177.27.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:01:21:57:bc:3a:7e:bd:c9:be:af:fe:3b:d9:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 28 04:34:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cd374294ec8893252b4668e193a85fd74746733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:bc:98:24:b1:05:71:87:6f:2c:7a:4d:32:
4f:a9:a1:3a:5e:14:5b:f2:f7:d4:f0:47:b3:6c:81:
48:96:18:4f:78:e7:7f:4c:f4:99:d8:5c:ad:6d:70:
f0:7e:32:0c:2f:25:d5:96:01:31:ce:ee:2f:32:fb:
e0:46:05:80:26:63:23:47:67:6f:1f:2c:94:ba:0e:
36:1c:4c:f8:9e:f9:cf:76:ed:8f:91:81:22:c3:56:
d9:62:ae:00:52:3c:c3:29:85:02:a4:e0:64:3c:9f:
9d:01:e0:8a:70:78:87:94:9e:9c:15:f2:27:6d:e2:
86:04:3c:95:7b:dd:1d:61:26:2c:f1:78:67:4c:86:
d6:c0:7b:a6:3c:46:6b:21:65:b5:45:3b:9d:0d:69:
97:9d:86:15:26:19:c1:9e:43:19:87:92:38:53:ad:
d1:c1:fe:d8:d4:22:af:4c:cf:10:c6:07:56:18:65:
ef:c3:d9:ef:e4:aa:cc:97:09:95:41:3c:34:c3:fa:
42:bb:cd:f6:96:bb:29:a5:8d:13:d5:63:e0:73:23:
04:84:ee:ea:99:84:fd:c5:8b:5d:34:47:ba:9f:f4:
21:12:97:54:82:e6:11:3f:18:a5:80:b6:1c:9c:bd:
84:0a:f7:ac:54:d4:fe:43:21:ed:ae:0b:6d:c4:0f:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:74:29:4E:C8:89:32:52:B4:66:8E:19:3A:85:FD:74:74:67:33
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/HNN0KU7IiTJStGaOGTqF_XR0ZzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
94.177.27.0/24
176.223.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3f:02:28:94:10:5d:60:b4:58:b5:c1:da:1c:8e:ba:74:2e:
55:b7:de:3f:02:73:8a:b8:97:41:a6:7d:d3:dd:b4:f3:37:ed:
f4:53:1d:ef:88:ef:92:86:d7:09:3d:fe:ca:31:57:55:36:a3:
2f:82:ee:3d:8b:dc:84:a6:6e:93:c0:30:51:78:e2:d2:31:20:
69:15:ee:89:88:95:3c:a6:43:95:a9:55:3b:ae:da:8a:19:f4:
7f:ee:10:e7:df:86:78:b1:74:b0:58:d2:ec:84:28:77:9b:f0:
8d:fb:86:ee:05:eb:60:e0:98:98:e5:d5:00:c4:89:8e:af:a0:
d5:3a:61:7d:1d:90:03:fd:17:51:d8:7e:5c:b4:58:22:9a:7b:
9b:6c:85:79:01:ad:f6:aa:06:24:3c:8d:13:8b:88:83:9a:78:
39:80:5e:25:e6:91:52:0b:34:41:e4:b4:fd:d8:d3:43:31:ba:
ce:c7:4b:0e:da:80:90:2d:90:b2:12:83:84:41:db:25:83:39:
18:99:02:b5:f5:36:b9:0b:b5:db:eb:e8:33:fa:fe:0a:5c:d9:
b4:b5:4f:64:3a:a3:cd:c3:f0:c9:30:1a:67:9f:37:af:1d:49:
9c:aa:70:92:4b:99:7c:27:a6:53:82:82:bf:d8:71:8a:f9:70:
65:f3:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:49 2026 by rpki-client