Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/hsTKNuFtecu81R43BCP7v63FtKE.roa
File: hsTKNuFtecu81R43BCP7v63FtKE.roa (raw, json)
Hash identifier: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=
Subject key identifier: 86:C4:CA:36:E1:6D:79:CB:BC:D5:1E:37:04:23:FB:BF:AD:C5:B4:A1
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019C6C4C690992A6E80FE4650108397DFD29
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/hsTKNuFtecu81R43BCP7v63FtKE.roa
Signing time: Tue 17 Feb 2026 15:51:12 +0000
ROA not before: Tue 17 Feb 2026 15:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211261
IP address blocks: 185.223.178.0/24 maxlen: 24
185.237.215.0/24 maxlen: 24
2a0d:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:4c:69:09:92:a6:e8:0f:e4:65:01:08:39:7d:fd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Feb 17 15:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86c4ca36e16d79cbbcd51e370423fbbfadc5b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:b3:e4:ab:f8:93:85:b8:ba:8f:99:dc:2a:
c4:fa:c3:52:96:06:30:6a:54:67:fe:f7:20:2b:ab:
d4:1d:71:82:0f:ae:55:ed:44:92:73:b2:14:48:1e:
e2:cf:3f:3c:cb:ca:b5:4f:da:b3:0a:d1:24:5a:ca:
e2:ad:fc:ce:c1:cd:f3:27:b3:0e:82:77:7e:06:af:
eb:53:05:73:f8:81:2e:b7:07:58:d9:66:8b:82:53:
9e:c6:d7:23:1a:5a:49:d5:81:c2:78:7d:52:ad:62:
9d:79:71:18:45:27:b7:bd:39:de:c2:de:99:3d:fa:
07:78:73:b1:af:6d:88:b3:2e:62:ca:c9:7c:d7:f4:
1d:20:43:8b:12:4f:98:5c:e1:42:03:43:af:56:02:
f5:37:34:72:57:cb:1f:cf:ef:d2:e7:37:47:48:69:
99:ed:c7:cd:d4:e5:42:7f:bf:1a:25:84:12:8b:5f:
68:68:78:1d:17:3c:87:81:b4:5e:61:7d:24:66:dc:
f8:6a:9e:07:15:a8:61:b0:b8:41:f1:cf:b2:6a:3b:
d0:81:76:ea:0c:79:a2:b6:cf:5a:2e:2d:5b:f4:2c:
91:f8:3e:39:92:42:e9:1c:73:02:91:89:ec:82:3d:
d3:16:ec:0f:45:00:24:9c:fb:d3:4f:b8:5d:86:da:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:CA:36:E1:6D:79:CB:BC:D5:1E:37:04:23:FB:BF:AD:C5:B4:A1
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/hsTKNuFtecu81R43BCP7v63FtKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.178.0/24
185.237.215.0/24
IPv6:
2a0d:c240::/29
Signature Algorithm: sha256WithRSAEncryption
2a:c9:21:db:50:40:03:81:05:f0:b3:81:b6:de:ed:92:2e:b7:
97:d3:bb:81:ff:5e:56:e6:51:db:31:f4:04:7b:66:b2:80:dd:
1c:c9:dd:2d:b7:e8:a9:19:d1:74:aa:a8:aa:9a:ac:2f:80:14:
4a:a2:b8:fb:c0:a3:32:6e:e0:c9:c9:1c:cd:bf:92:dd:c0:89:
be:c2:6e:b0:a0:c7:ee:b8:63:c8:0b:36:6e:d8:90:7c:c9:fa:
f3:29:76:ba:06:ac:c6:e9:0e:e5:fa:60:7f:0c:b4:1e:3b:92:
3a:6a:15:af:ef:18:0f:42:d4:5c:dc:7c:74:45:6f:41:b9:e0:
4d:cc:aa:bd:4b:ea:ab:dc:ce:ab:cd:67:44:b3:04:00:fc:fc:
45:74:39:8f:1e:00:51:38:62:dd:05:21:d6:28:4b:29:74:c3:
90:13:f8:da:67:db:f9:ce:a2:da:bb:bc:61:ff:5a:90:ed:a7:
cd:85:9b:0b:b4:49:96:2e:fd:7a:e8:93:f8:71:10:a0:f5:3b:
fe:cd:de:31:3e:88:ce:d7:c5:00:74:66:c4:5a:7b:51:0d:bc:
9d:d2:32:0d:68:1d:f8:b2:a8:f2:e2:33:9f:75:d1:f3:1c:66:
4d:df:08:d2:39:c6:29:f7:cb:db:e7:79:60:61:e0:0f:dd:1e:
d6:da:87:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:30 2026 by rpki-client