Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HaI5LUR-dMlo4JDehW8LV0dJ3c4.roa
File: HaI5LUR-dMlo4JDehW8LV0dJ3c4.roa (raw, json)
Hash identifier: w7aEQMkoFtY0N1DRH79daH77QQiPCgvGBCEEG6Q0Mic=
Subject key identifier: 1D:A2:39:2D:44:7E:74:C9:68:E0:90:DE:85:6F:0B:57:47:49:DD:CE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C57041ED8F87E952B1CD134761744175C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HaI5LUR-dMlo4JDehW8LV0dJ3c4.roa
Signing time: Fri 13 Feb 2026 12:40:13 +0000
ROA not before: Fri 13 Feb 2026 12:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 192.71.161.0/24 maxlen: 24
193.180.119.0/24 maxlen: 24
193.182.245.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
193.235.104.0/24 maxlen: 24
193.235.106.0/24 maxlen: 24
193.235.108.0/23 maxlen: 24
194.71.221.0/24 maxlen: 24
194.103.47.0/24 maxlen: 24
194.132.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:04:1e:d8:f8:7e:95:2b:1c:d1:34:76:17:44:17:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 13 12:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1da2392d447e74c968e090de856f0b574749ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:0f:c5:31:c0:05:f5:e2:31:38:3a:27:23:
70:41:8a:b1:9b:05:6e:3a:35:b3:2d:93:72:19:a1:
bd:dd:3f:fa:58:81:ed:64:52:8f:37:7c:8c:8b:c8:
68:d9:d7:21:dd:57:27:84:86:0a:da:a3:4a:e8:06:
7b:e4:a2:36:ca:4e:3c:cd:e3:b7:52:dc:c0:9e:fa:
f6:26:e9:2c:6f:97:7a:7a:59:fe:b1:0b:62:2e:f6:
f0:f8:50:48:6f:fb:15:12:84:57:59:84:15:b7:6e:
33:5f:91:6d:fe:fc:90:c5:fb:a8:28:b2:f8:a7:aa:
ef:17:65:6f:24:d9:b6:d4:27:7c:c0:d1:3b:c9:35:
d1:1f:ca:bb:12:90:22:32:91:9d:44:db:3b:55:0d:
f4:49:7f:d9:e4:69:15:4e:28:c5:93:84:1a:b4:68:
da:27:f1:93:dd:ad:93:69:18:d6:fa:29:ce:6d:77:
56:a0:01:08:dc:af:57:9e:e2:83:e0:f5:4b:75:f9:
4e:10:1b:68:dd:3a:6c:34:16:ca:c9:ee:e7:57:70:
86:b3:3c:5c:80:a8:de:f2:47:46:cf:7e:6b:af:20:
89:6b:f3:58:eb:8a:2e:e2:61:7c:bf:7c:a0:6b:18:
86:c5:90:52:ce:05:7a:b1:be:ad:a1:bf:1e:5f:dc:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:39:2D:44:7E:74:C9:68:E0:90:DE:85:6F:0B:57:47:49:DD:CE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HaI5LUR-dMlo4JDehW8LV0dJ3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.161.0/24
193.180.119.0/24
193.182.245.0/24
193.234.82.0/24
193.235.104.0/24
193.235.106.0/24
193.235.108.0/23
194.71.221.0/24
194.103.47.0/24
194.132.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b9:85:bc:16:88:fe:9e:05:b9:45:e2:de:f1:eb:24:40:f1:
76:bc:23:6c:23:64:8d:0e:f1:2b:18:40:25:02:f3:f9:ea:83:
c7:3a:22:e6:9b:fc:a7:75:be:8f:57:74:ea:9f:bc:c2:f8:65:
26:29:02:f2:c7:3c:e7:ae:a3:bb:ed:d2:88:29:d7:f5:da:f0:
53:5e:4e:8f:99:4b:d6:6b:32:29:c7:e9:db:9a:45:a3:13:98:
1e:41:49:9d:5f:87:37:e8:8b:22:2b:08:b7:86:e1:40:2a:2e:
f4:e4:54:8a:92:6f:52:c1:93:83:61:8d:1e:04:3d:81:b0:82:
8f:f2:f5:5e:b7:ea:7a:a2:64:6a:2a:0d:de:53:0d:db:53:7e:
41:59:42:b8:4b:13:4f:f2:c3:d6:e0:5c:d0:c1:7b:73:66:60:
0f:10:01:b6:c3:7e:ac:7f:b8:cc:d9:f2:26:5e:ef:6c:53:cf:
2c:28:06:14:c5:76:b0:21:c0:25:74:a4:e3:a7:18:d2:82:df:
dc:33:d9:21:53:f4:26:d9:b8:2b:13:53:82:bf:10:2c:75:e3:
57:7a:c4:32:5f:a1:a3:fa:7c:55:cd:f8:bd:09:01:b9:08:4a:
57:2a:9b:0b:13:66:c5:64:88:60:47:c1:e9:2f:08:2a:d6:31:
a2:fc:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:46 2026 by rpki-client