Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/H_EahYix-W19mql9n-PQwFFmZ30.roa
File: H_EahYix-W19mql9n-PQwFFmZ30.roa (raw, json)
Hash identifier: 17ddLBS1IPaDyhHagz+Emm7kfAhJ3BI92bEt/QsilrI=
Subject key identifier: 1F:F1:1A:85:88:B1:F9:6D:7D:9A:A9:7D:9F:E3:D0:C0:51:66:67:7D
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 01A02BA9414A85BCD73219908B736151C06C
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/H_EahYix-W19mql9n-PQwFFmZ30.roa
Signing time: Sat 22 Aug 2026 22:48:27 +0000
ROA not before: Sat 22 Aug 2026 22:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216038
IP address blocks: 2001:67c:20a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2b:a9:41:4a:85:bc:d7:32:19:90:8b:73:61:51:c0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Aug 22 22:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ff11a8588b1f96d7d9aa97d9fe3d0c05166677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:46:ae:5c:d1:59:f1:d2:b8:72:f0:23:6a:
2e:d4:c0:83:2b:f7:e1:f7:d7:a7:84:46:2d:43:de:
4c:f5:e5:e7:e8:7e:f0:d4:9f:2b:7a:92:28:e0:4a:
8e:fc:0d:49:a8:25:ed:57:bb:d5:42:38:de:ad:b6:
20:ee:7f:7c:4d:b4:c8:f2:f4:c7:af:b3:8d:37:53:
11:01:ae:68:ac:9a:72:45:6c:5a:56:06:47:bd:bc:
56:7b:cb:0a:fe:e7:95:17:e3:34:71:b1:36:16:49:
4a:7d:25:ae:12:a0:f6:f5:08:9b:17:e4:28:c7:30:
98:15:15:e8:9a:fd:21:8d:d2:76:1d:b5:45:53:b4:
bb:a3:f7:d6:ec:6a:15:a0:02:09:d0:25:a6:ff:25:
5a:c6:73:6a:ce:c8:ff:ae:4c:d6:0c:70:f7:47:15:
86:9d:ad:ca:8c:c0:47:03:be:92:ff:be:a7:89:67:
12:3f:dc:85:98:80:3b:a0:bf:f9:9c:28:34:8a:fb:
15:34:92:c6:d6:95:cb:2a:0b:54:58:53:6e:ea:52:
19:f1:e6:70:02:44:36:c9:bd:a8:84:d8:4b:2e:17:
1b:0b:d0:e2:1a:33:32:b6:b7:c9:d9:7d:3b:7f:17:
51:74:18:cd:54:de:06:5d:5a:d9:bd:96:5f:8e:5b:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:1A:85:88:B1:F9:6D:7D:9A:A9:7D:9F:E3:D0:C0:51:66:67:7D
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/H_EahYix-W19mql9n-PQwFFmZ30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:20a1::/48
Signature Algorithm: sha256WithRSAEncryption
51:6c:a1:63:cb:ca:98:35:67:7e:73:f0:bb:48:a2:45:fa:2c:
3c:b9:70:4f:fe:d0:6b:16:31:c3:88:bf:50:75:c0:af:f4:76:
d1:06:d3:22:a9:60:22:40:ab:ac:3b:fb:be:a4:2b:36:a5:39:
26:1f:b8:b5:d4:f4:a6:45:94:14:79:84:c3:73:d1:70:a8:2e:
dc:29:dc:2d:3e:d8:c8:20:78:2b:ec:fe:cb:88:79:50:ef:d5:
a9:8e:5b:30:9b:67:12:ab:ce:5a:ae:70:f7:c3:39:17:c5:11:
21:2e:29:1b:80:cc:a2:e4:64:d9:2a:0c:95:06:12:c4:af:52:
30:93:cc:8f:c6:5c:92:87:00:e4:c9:ea:85:28:41:04:26:46:
ff:92:2c:27:00:76:3d:80:3d:f8:89:d2:45:ae:b1:55:aa:6c:
63:cf:55:2d:52:53:6d:31:dc:81:b7:1d:bd:e6:dd:9a:b8:a4:
bd:14:8f:4e:33:83:07:1a:7e:7b:0f:7d:79:29:43:09:6c:cf:
86:c7:fc:26:36:4e:d3:68:8c:90:3e:ca:f0:e7:86:ff:85:ed:
21:23:a3:5f:6d:ae:ab:1d:31:f2:48:29:ad:b1:2c:c7:47:71:
0e:f3:21:1a:80:61:6b:e1:dd:8b:38:9f:05:6c:9a:50:89:f4:
da:1b:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:39:06 2026 by rpki-client