Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa
File: HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa (raw, json)
Hash identifier: d+42K0KbbMljsHI/57qhDXnhu+FZGoaYhE5dNSHCWpo=
Subject key identifier: 1E:A0:59:85:DD:D9:42:E7:D9:30:4C:97:54:B4:A3:92:61:EA:76:AF
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 01A0A13C2087109932A52E67A936022173FE
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa
Signing time: Mon 14 Sep 2026 18:44:27 +0000
ROA not before: Mon 14 Sep 2026 18:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:3c:20:87:10:99:32:a5:2e:67:a9:36:02:21:73:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Sep 14 18:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ea05985ddd942e7d9304c9754b4a39261ea76af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:63:f9:3e:10:0c:bd:5a:87:fa:cb:0a:4c:
ed:aa:6a:bf:e3:f8:97:90:c3:9d:65:e0:f2:ad:56:
d4:cb:cc:29:f3:59:73:59:29:19:a3:39:a8:dd:ea:
53:13:7c:5a:6f:a4:c2:1f:2c:c6:b6:f1:ef:e2:44:
37:38:98:05:f4:72:ce:24:a9:51:0d:0c:40:b6:34:
74:bf:f3:e3:2f:01:0d:77:5b:0b:e6:b1:d0:f3:ba:
d1:73:52:f1:f6:d3:ca:87:f3:96:eb:e6:87:70:01:
cd:65:34:37:a6:c0:5b:b8:44:63:55:b8:30:67:31:
b2:9e:29:d0:ee:a2:7b:70:9c:cb:8c:0c:3a:90:3c:
47:f9:eb:34:7d:36:a8:0e:6c:e1:ff:7e:9a:c4:44:
b7:6e:e6:be:69:69:0d:9f:42:68:34:79:ae:3a:af:
69:d1:2f:a6:5d:53:30:a6:77:08:79:dd:96:d2:4a:
09:9d:ac:bd:de:02:cc:34:e8:b4:72:2a:3b:9d:13:
7a:7b:8f:82:5a:51:b4:41:7d:78:11:74:fd:42:d8:
36:61:31:bf:5b:42:c6:e8:81:ae:66:fb:36:86:13:
36:09:7a:8c:c3:f6:3f:61:11:75:11:5d:96:a4:3f:
a1:d1:dd:b9:42:79:ca:86:e9:06:99:36:a0:52:c7:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:59:85:DD:D9:42:E7:D9:30:4C:97:54:B4:A3:92:61:EA:76:AF
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/HqBZhd3ZQufZMEyXVLSjkmHqdq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8b:57:78:a0:c4:1c:19:3b:b9:03:49:46:fb:5c:a7:27:7c:
a5:c7:51:38:bf:84:e0:c6:5e:d3:20:a4:fb:8c:a3:ea:63:99:
d0:e0:18:64:31:db:f2:b9:8a:07:8e:7e:d7:0b:1b:8f:17:56:
67:e2:d9:96:58:33:0b:bb:88:30:a4:e7:6a:d8:2b:f1:f4:e0:
19:82:4e:67:17:0d:60:26:b3:97:a7:73:ee:ed:18:93:4d:5d:
98:a6:11:38:11:27:82:a8:05:20:69:51:57:ab:af:28:3f:5a:
f7:ae:48:a8:de:61:8d:64:1b:df:b7:f4:47:ac:fe:59:4d:07:
ed:94:7f:03:44:6e:0e:b1:ab:0a:8c:ac:9d:ea:4d:c9:4c:bf:
ad:68:0d:d3:39:ad:16:74:f1:69:2e:58:3c:e6:9e:7e:7a:0e:
87:d6:33:85:ae:74:55:e7:79:a7:27:23:80:d7:15:28:4e:be:
89:19:5b:43:e7:f4:92:32:12:13:83:8a:7f:35:85:5b:42:d4:
4a:43:05:89:f0:44:74:99:2b:2f:ec:bc:76:3f:e2:ac:09:cd:
42:6e:26:32:b0:39:71:aa:c9:f4:93:38:ef:99:c5:47:c8:5e:
b1:21:86:18:b7:3b:df:c1:3a:ad:fb:e4:69:37:2b:54:5e:d1:
27:58:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:08 2026 by rpki-client