Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Hg0TMugAkl-iXb3TDFaLZ-3zFh0.roa
File: Hg0TMugAkl-iXb3TDFaLZ-3zFh0.roa (raw, json)
Hash identifier: IjRG8EtriLwJO4jTTgXFTczYQNvOSwKPOmihXtfruu0=
Subject key identifier: 1E:0D:13:32:E8:00:92:5F:A2:5D:BD:D3:0C:56:8B:67:ED:F3:16:1D
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01A0E7DF60AA87555499A80E782AE6EA13E0
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Hg0TMugAkl-iXb3TDFaLZ-3zFh0.roa
Signing time: Mon 28 Sep 2026 11:56:11 +0000
ROA not before: Mon 28 Sep 2026 11:56:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.224.196.0/22 maxlen: 24
80.224.220.0/22 maxlen: 22
80.224.228.0/22 maxlen: 22
80.224.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:df:60:aa:87:55:54:99:a8:0e:78:2a:e6:ea:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Sep 28 11:56:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e0d1332e800925fa25dbdd30c568b67edf3161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:54:58:69:6c:75:d4:94:a1:f9:fe:19:77:
0b:9d:d6:e9:96:09:dd:97:a8:aa:42:0f:98:1f:69:
1b:29:6a:76:a5:e0:29:2e:d3:f1:a6:0a:f9:1f:86:
44:f5:16:07:66:0b:11:6e:93:81:fc:5a:f2:ab:73:
d4:45:5a:a4:bd:9d:3d:93:ce:20:eb:86:de:ee:33:
79:01:18:bb:85:ee:31:03:ae:17:df:80:cb:ab:35:
58:9d:4b:0f:84:9e:95:6c:31:80:58:f4:1d:d5:d5:
5a:d5:11:b6:7e:f4:0a:e8:bc:e6:10:e5:a7:cd:72:
2a:61:ab:3f:85:10:3a:09:0c:9c:07:38:6e:36:20:
e1:1d:f3:ae:9c:77:3d:ce:63:65:6f:c4:f7:77:6f:
6a:bb:0f:92:51:20:ac:80:c8:b2:8e:d8:63:13:a6:
ed:76:43:d5:1e:27:e8:44:28:5b:55:19:05:db:30:
79:43:5e:4c:d5:38:6b:58:e6:27:d1:c7:ca:70:12:
32:ea:da:df:59:cd:73:d6:5b:07:8f:50:f1:89:b1:
7c:9f:3d:7d:2c:98:7c:42:47:99:a4:63:9e:7d:2e:
56:03:05:be:a5:39:f8:e2:90:95:14:71:70:fb:93:
7b:72:6e:4c:e5:1b:9c:b1:d2:cf:c2:c6:2e:08:ac:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:13:32:E8:00:92:5F:A2:5D:BD:D3:0C:56:8B:67:ED:F3:16:1D
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Hg0TMugAkl-iXb3TDFaLZ-3zFh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.196.0/22
80.224.220.0/22
80.224.228.0/22
80.224.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:1b:3f:df:59:9b:9f:c5:4c:f5:e8:e7:b8:e5:c1:b2:dc:d1:
fb:86:fe:fe:94:5f:3f:38:e2:dd:bd:a6:d8:64:a3:9c:b5:10:
9d:fe:72:ce:52:b9:d7:2b:b4:30:a8:5d:82:76:33:b8:6b:c9:
dd:02:06:5e:3c:95:62:30:f1:c0:1d:1f:28:49:44:98:c5:cc:
a4:5e:f6:b1:46:c1:6f:9a:e1:2e:46:82:af:34:50:3f:32:ac:
52:22:19:03:51:de:65:85:bc:d2:69:c5:59:e3:a7:51:4a:c6:
eb:4c:a8:ea:a0:21:a6:67:d9:4f:0f:ea:e6:27:ed:3d:d2:2c:
80:ac:a2:ff:f2:31:f6:7b:d1:34:59:85:f5:d9:cf:db:23:e3:
f3:5c:18:18:52:10:01:c1:3a:bd:73:e3:51:5b:00:60:a3:5a:
c1:aa:79:f3:ad:69:b4:04:2a:9e:4c:e5:53:8e:65:be:00:9f:
50:5e:c6:c7:7c:4c:d8:9b:8b:f4:02:94:53:6f:e7:27:9f:41:
71:ca:7b:c9:08:56:95:8d:ab:86:e3:f6:64:30:76:6e:55:50:
f0:3d:b2:c2:7b:3f:1e:3e:6b:04:32:cf:f4:a7:e6:81:a2:9b:
f0:66:d6:0c:cf:a1:b6:55:d9:d3:13:58:38:2c:1f:93:c8:70:
09:f7:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:53:28 2026 by rpki-client