Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/HDUXqeFC5mTa7lU_RmwELJjd7sg.roa
File: HDUXqeFC5mTa7lU_RmwELJjd7sg.roa (raw, json)
Hash identifier: U543lYj0wOYAaksGChXjX7Bufgd0My2VXcD17aAopUA=
Subject key identifier: 1C:35:17:A9:E1:42:E6:64:DA:EE:55:3F:46:6C:04:2C:98:DD:EE:C8
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0B3F844A3AA2DAA7D622F999B99E7B8D0
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/HDUXqeFC5mTa7lU_RmwELJjd7sg.roa
Signing time: Fri 18 Sep 2026 10:03:07 +0000
ROA not before: Fri 18 Sep 2026 10:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 88.223.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f8:44:a3:aa:2d:aa:7d:62:2f:99:9b:99:e7:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 18 10:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c3517a9e142e664daee553f466c042c98ddeec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:e0:11:a3:ca:17:c9:a7:05:55:5e:fa:89:
a0:0b:02:b4:d8:76:a9:2d:7d:4e:c1:4f:3d:0f:c5:
27:c2:21:b4:85:14:8f:f5:71:a8:75:6e:7a:a6:b8:
54:81:4d:ef:4b:55:3c:bf:b0:51:d2:2b:7d:be:27:
b2:8b:c0:b8:92:15:31:e6:62:42:51:99:10:99:a0:
22:bc:e5:51:a3:6d:d9:82:7c:05:6a:08:5e:45:b5:
97:01:5d:50:3d:f9:85:52:7d:82:21:a6:e2:25:04:
ad:eb:bc:bb:e1:5b:c0:03:cc:71:f8:6d:f8:c1:5e:
9f:3a:4c:1d:93:9c:ee:c6:39:6e:00:5a:38:17:8f:
b2:d8:ae:2e:16:20:8d:ca:ef:94:91:73:d7:54:39:
51:0c:7b:e2:cd:f7:ef:c2:aa:e8:97:42:e5:e1:96:
04:a2:89:f5:cc:f2:fa:d5:5d:61:19:cb:67:16:5a:
b5:3c:ed:5f:68:04:ea:44:78:78:b5:22:44:e9:70:
18:97:d1:d4:d1:49:95:72:bc:e8:00:aa:68:e3:51:
70:66:0d:47:cc:2f:37:5c:8c:43:cb:f4:8e:78:17:
c6:13:26:db:17:ae:d0:b6:f8:3e:87:10:38:f1:b3:
a7:55:73:95:e6:5a:ab:22:ef:00:9c:dd:d5:0c:13:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:17:A9:E1:42:E6:64:DA:EE:55:3F:46:6C:04:2C:98:DD:EE:C8
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/HDUXqeFC5mTa7lU_RmwELJjd7sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e6:7a:1d:47:15:e0:3a:c6:ef:18:12:68:f9:0c:60:a1:e4:
db:2f:f3:20:08:7e:68:90:7d:46:e1:5d:73:b3:27:e0:31:6c:
c6:c3:74:f4:c0:58:48:2c:78:2c:83:3d:66:b5:26:77:45:a2:
f0:30:41:4c:4c:15:fb:9d:5e:31:6a:c9:3f:18:53:73:06:89:
df:e2:75:16:1c:37:8d:b3:ee:32:5c:41:6c:95:2c:cf:4b:5e:
22:85:99:b6:0c:fe:e8:c0:8a:ab:55:93:c3:63:c5:4b:86:0d:
3e:65:17:c1:6e:b7:bf:82:d9:50:74:d4:ef:8a:1c:6b:0c:fd:
cd:b8:f2:cf:e3:83:9e:63:0d:8d:53:5d:e5:6a:6b:98:cb:9d:
ea:f9:63:1a:fd:9f:0c:aa:08:f1:62:0a:57:42:09:41:da:d0:
34:62:a7:62:f4:72:cb:e2:93:38:de:5f:d5:70:5b:58:8b:dc:
7d:35:4f:c0:f5:df:d5:31:51:a1:de:cc:d5:42:7c:51:85:8a:
57:73:46:af:e4:5a:3d:fd:48:70:3b:4b:01:48:9a:49:02:45:
b2:5b:e5:ed:36:9d:85:d0:1b:f4:1c:d9:98:9e:a5:f9:31:2f:
54:41:2c:39:02:fe:4e:6e:e5:66:59:f0:7c:7a:e0:e9:bc:aa:
54:f3:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:49 2026 by rpki-client