Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/HfwuLvDnrK0ij3xxLHxH4kkTqyY.roa
File: HfwuLvDnrK0ij3xxLHxH4kkTqyY.roa (raw, json)
Hash identifier: RmMTx/vPpPncbtjqx7NRZUvb7Hnsd71IPJPh5CfNICo=
Subject key identifier: 1D:FC:2E:2E:F0:E7:AC:AD:22:8F:7C:71:2C:7C:47:E2:49:13:AB:26
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D9586EC966CF8C99C7CA5A4E3A4038247
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/HfwuLvDnrK0ij3xxLHxH4kkTqyY.roa
Signing time: Thu 16 Apr 2026 09:02:20 +0000
ROA not before: Thu 16 Apr 2026 09:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 89.33.81.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
150.251.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:86:ec:96:6c:f8:c9:9c:7c:a5:a4:e3:a4:03:82:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Apr 16 09:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dfc2e2ef0e7acad228f7c712c7c47e24913ab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:5f:ff:83:4a:26:9b:93:7b:42:b3:79:9f:
b9:a4:bc:d5:8d:6d:65:91:23:3a:da:6c:4d:0a:06:
26:ac:d9:f9:f1:f5:6c:22:b8:cf:b7:25:c5:0c:f9:
d3:0f:af:cb:62:ea:68:ab:ce:9c:38:44:00:fe:66:
6b:f7:48:1f:40:d7:76:9a:d1:01:57:0a:19:af:ab:
7e:f7:72:0c:0c:08:81:81:91:d9:c4:4b:d6:b4:8c:
1a:ca:c3:e5:a8:14:dd:0b:b2:f4:2b:7f:c4:6a:0a:
35:59:4b:86:46:30:9f:eb:9e:af:2e:e4:48:d2:5c:
17:9a:73:98:a3:6e:09:0e:5d:56:d6:b4:47:dd:19:
7d:4f:5e:64:9f:85:c1:17:14:81:7c:10:62:33:f8:
13:da:bb:9a:7e:09:1d:3c:94:1a:34:c7:c8:63:20:
5f:32:41:4b:81:8c:ba:64:77:17:a3:a3:ec:25:9e:
fd:dc:4d:d1:19:77:57:75:2a:ee:fc:0a:72:0f:1d:
b2:dd:65:01:84:d1:aa:5c:40:52:58:d9:d0:4c:6a:
f6:92:60:af:dd:12:18:18:65:0e:51:41:8b:0f:5c:
5f:1d:79:72:d3:42:75:cc:5e:23:b8:00:99:61:51:
97:4b:1a:68:e3:78:8f:51:05:fc:47:a9:25:1e:70:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:2E:2E:F0:E7:AC:AD:22:8F:7C:71:2C:7C:47:E2:49:13:AB:26
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/HfwuLvDnrK0ij3xxLHxH4kkTqyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.81.0/24
89.34.90.0/24
150.251.149.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ba:59:65:b3:10:30:97:08:24:e3:8d:88:eb:a4:29:70:84:
18:e5:b2:9b:a8:4b:f1:e8:4a:49:a4:1d:ea:30:7d:ee:b6:2a:
09:96:8c:c9:97:7c:45:37:12:0f:4a:d5:99:f8:8c:76:6d:de:
3e:0f:23:cb:ce:dd:7d:67:6a:ea:17:a6:27:98:af:b4:ff:e1:
e4:2c:bb:8d:82:4b:67:b9:c1:ae:f3:aa:2c:01:10:87:00:13:
a9:66:13:24:ca:ec:01:96:1c:e7:c7:e6:ae:55:e8:b6:2a:f8:
b8:57:8e:bb:72:04:88:b3:01:c7:01:92:05:2a:5a:09:12:85:
5b:62:70:6e:3f:ef:0f:fb:00:71:84:46:c1:15:d0:16:40:98:
29:1a:5c:59:dc:9b:d9:ed:2d:75:89:2e:d9:48:c8:f6:f6:bb:
d5:25:c0:88:c0:96:58:66:41:19:b2:39:6d:bc:4d:d8:34:0f:
9f:49:83:d8:6f:ce:93:d7:19:28:46:ea:af:3b:29:cf:b3:48:
a4:38:80:54:ca:88:16:b3:08:46:8e:ad:db:2a:90:84:25:7d:
d0:c6:80:9e:ea:3f:22:7a:90:ba:5d:de:48:9a:7c:76:e8:7c:
33:fc:4f:e9:e7:02:3c:f9:7d:01:46:30:13:9e:05:21:6b:64:
4b:43:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:51 2026 by rpki-client