Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/hPzqOeQ_w-Ij5x0l3KIEfZQVozA.roa
File: hPzqOeQ_w-Ij5x0l3KIEfZQVozA.roa (raw, json)
Hash identifier: jYuJ5+ntA9C/HKFCoZV1/jGdO4Gs+ralXOW9/Jy4aww=
Subject key identifier: 84:FC:EA:39:E4:3F:C3:E2:23:E7:1D:25:DC:A2:04:7D:94:15:A3:30
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019C99323F0739BE914731012037DEDC23A4
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/hPzqOeQ_w-Ij5x0l3KIEfZQVozA.roa
Signing time: Thu 26 Feb 2026 09:05:32 +0000
ROA not before: Thu 26 Feb 2026 09:05:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200924
IP address blocks: 217.147.48.0/22 maxlen: 22
217.147.52.0/23 maxlen: 23
217.147.54.0/24 maxlen: 24
217.147.56.0/23 maxlen: 23
217.147.58.0/23 maxlen: 23
217.147.61.0/24 maxlen: 24
217.147.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:32:3f:07:39:be:91:47:31:01:20:37:de:dc:23:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Feb 26 09:05:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84fcea39e43fc3e223e71d25dca2047d9415a330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:9c:37:c6:9c:b1:a4:3c:f1:b4:86:b5:18:
32:f4:77:ef:ac:e4:c6:5e:2e:63:c6:35:40:2c:9a:
c7:10:8c:2c:b3:49:eb:e7:36:fe:5a:80:c0:72:01:
6f:53:80:0d:b7:5d:5d:d5:6a:ed:73:73:e9:cc:20:
fa:19:dd:15:77:c5:cc:0a:b9:fd:fa:81:71:be:0f:
b5:3e:54:c4:cd:21:8a:73:b9:82:81:fc:ca:43:5f:
1d:c6:46:57:dc:f5:0c:bd:8b:9b:ed:96:c9:9b:95:
32:b0:6f:a9:ba:dd:da:64:40:11:0c:e6:9d:9f:c5:
2e:ee:10:e4:df:9f:65:13:19:16:60:24:70:89:2a:
ab:08:58:9c:a8:bb:49:ae:8c:92:ee:e2:02:ce:d7:
e3:22:6a:a0:f3:da:81:97:d6:0f:c2:7b:86:75:46:
67:b5:e3:c1:bd:16:74:29:70:b4:54:7f:06:4d:71:
c2:50:36:ed:d3:ec:86:f8:a6:af:e2:95:bf:d0:84:
11:75:34:88:49:b0:c9:cc:3c:e7:18:e0:30:bb:83:
fe:0d:68:b6:00:56:39:b4:b6:84:fb:4c:cb:e1:a5:
34:51:14:33:b0:c7:34:90:a2:6b:fa:93:b6:9c:14:
1b:b3:ef:40:aa:e4:51:15:7d:ee:fb:5c:9b:ae:43:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FC:EA:39:E4:3F:C3:E2:23:E7:1D:25:DC:A2:04:7D:94:15:A3:30
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/hPzqOeQ_w-Ij5x0l3KIEfZQVozA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.48.0-217.147.54.255
217.147.56.0/22
217.147.61.0-217.147.63.255
Signature Algorithm: sha256WithRSAEncryption
2b:2d:bd:24:88:35:68:1d:32:f2:83:d8:77:ce:f2:0c:a7:19:
5f:74:d8:ba:68:ee:27:5d:28:08:51:20:5c:1b:59:9f:a4:b5:
56:ff:91:9c:54:37:67:0e:cd:a7:34:c3:8f:32:39:28:41:45:
ce:bb:31:ab:3d:93:ba:1c:04:b1:6b:26:28:be:c2:03:38:91:
c5:f8:96:9d:4a:b8:ee:5d:90:5c:57:78:e7:10:13:da:65:f3:
7c:25:06:99:b5:16:45:08:82:4f:62:aa:43:fe:8a:c5:eb:e7:
04:67:b1:b7:88:45:79:fa:2c:89:08:21:57:36:03:3d:47:64:
16:9c:33:00:d0:66:8b:21:5a:ea:80:cb:1a:3b:ec:c7:87:1f:
90:32:bb:a0:30:95:46:23:d8:5c:aa:9e:7f:ea:85:a2:3b:1c:
f8:cd:b5:cc:10:0f:f4:9b:a0:06:9c:f1:37:71:57:ff:3e:8f:
64:1b:f1:71:bb:18:87:24:3f:9b:1e:90:c5:46:e9:a5:f4:57:
d8:87:8c:32:e8:0d:6e:2b:9e:03:75:e4:99:13:4d:c9:30:45:
b1:c2:2c:bd:1f:f3:ad:a8:5f:49:65:d8:83:cc:1e:f9:2d:58:
b5:39:65:51:1f:dc:e9:26:c3:c0:45:13:d5:0d:f8:47:2c:71:
e8:5d:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:10 2026 by rpki-client