Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HcQ4KxJ_7UUs4gW4Slh2R9YtGvs.roa
File: HcQ4KxJ_7UUs4gW4Slh2R9YtGvs.roa (raw, json)
Hash identifier: dRJM4dcA9gc4A5TbOlYLM7mPnYASVIdNc0yitT5JHK8=
Subject key identifier: 1D:C4:38:2B:12:7F:ED:45:2C:E2:05:B8:4A:58:76:47:D6:2D:1A:FB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019D9625527DB337EEC6453F69B2E80A91D7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HcQ4KxJ_7UUs4gW4Slh2R9YtGvs.roa
Signing time: Thu 16 Apr 2026 11:55:21 +0000
ROA not before: Thu 16 Apr 2026 11:55:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50572
IP address blocks: 192.36.222.0/23 maxlen: 23
192.36.242.0/24 maxlen: 24
193.180.0.0/24 maxlen: 24
193.182.251.0/24 maxlen: 24
193.182.252.0/24 maxlen: 24
193.182.253.0/24 maxlen: 24
194.14.104.0/24 maxlen: 24
194.68.229.0/24 maxlen: 24
194.103.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:25:52:7d:b3:37:ee:c6:45:3f:69:b2:e8:0a:91:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 16 11:55:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dc4382b127fed452ce205b84a587647d62d1afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:40:d8:5d:64:cc:0a:35:6e:31:c0:4d:8a:
22:e7:fd:21:73:a4:89:ee:a7:2f:99:16:da:78:ad:
6a:3b:9e:22:16:ab:6e:59:03:7f:96:2f:ab:78:3f:
4f:a5:d8:aa:a8:9c:10:b0:68:5f:ef:01:90:07:3e:
34:4a:80:33:7d:a6:76:bd:8f:a1:ca:98:61:a8:35:
df:d7:74:8b:23:7a:9e:67:be:95:52:21:14:1c:05:
89:47:d9:9c:da:41:e5:66:f5:24:3f:9b:dc:89:ec:
e3:9a:92:72:84:99:39:af:ae:e6:96:3e:1d:2b:0d:
4c:a9:d4:d4:6c:b7:cd:84:10:1a:af:e7:bd:25:9c:
77:93:30:57:3a:0f:16:1b:64:82:0d:05:a8:6a:be:
fb:df:4c:d3:47:1f:8b:63:e5:26:89:f1:58:b8:20:
76:f3:f8:78:7a:8c:07:df:20:7c:7a:a0:15:eb:36:
6f:cd:23:8e:d8:23:4e:02:51:81:14:a3:ee:da:f2:
17:9f:6d:9e:74:44:27:dc:80:d5:15:b9:31:b2:c7:
33:f6:82:1d:68:6b:47:14:ef:69:69:94:c4:83:a5:
91:d9:b7:12:44:9e:a4:4d:f8:8e:fa:a3:39:4e:06:
cb:1a:33:cc:af:3c:98:a8:ac:30:41:ad:f3:ce:18:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:38:2B:12:7F:ED:45:2C:E2:05:B8:4A:58:76:47:D6:2D:1A:FB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HcQ4KxJ_7UUs4gW4Slh2R9YtGvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.222.0/23
192.36.242.0/24
193.180.0.0/24
193.182.251.0-193.182.253.255
194.14.104.0/24
194.68.229.0/24
194.103.228.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a1:0c:6c:52:92:3b:8a:20:76:8a:d8:72:c8:b2:33:61:91:
3e:15:0c:d7:c5:e8:bc:43:b8:dc:28:e8:31:71:e1:ed:66:05:
01:00:f3:c7:19:73:92:15:ef:b2:a4:83:ff:19:d2:34:f5:7f:
92:52:d5:2d:c1:77:25:38:b0:a5:63:f4:b4:c1:63:f4:f6:64:
2d:12:73:2e:db:f6:4a:b5:de:a8:ac:5c:37:2a:65:da:ec:78:
74:03:eb:37:06:b6:51:96:c4:fa:69:0b:9e:42:7d:9e:f9:e9:
26:35:e7:75:b4:70:82:b2:86:9d:30:00:6c:8e:90:89:a7:8d:
f3:67:61:a4:b4:63:42:08:f5:4b:c9:bd:16:ed:54:80:ad:96:
35:2f:68:ff:f1:8d:9a:3a:cd:e7:9d:53:d5:c1:9c:d8:45:8b:
3b:14:d9:c7:14:28:f4:f4:e6:fd:8d:55:c5:9e:34:24:3b:11:
c0:f7:83:c7:ea:1d:ab:b4:61:2c:2e:07:c1:88:76:55:2e:76:
4b:7a:c7:fd:d0:e6:82:d7:c6:04:a1:5f:29:2f:b7:c5:41:5e:
44:23:72:e7:95:d8:f6:3e:f8:ce:87:fb:84:4e:00:e7:df:51:
44:5a:c2:0d:33:61:f7:9b:1d:06:75:41:c9:d8:db:33:23:c5:
b8:6f:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:13:57 2026 by rpki-client