Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/hSst--j5VCqGQF-z8DIf_npvY-Y.roa
File: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (raw, json)
Hash identifier: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=
Subject key identifier: 85:2B:2D:FB:E8:F9:54:2A:86:40:5F:B3:F0:32:1F:FE:7A:6F:63:E6
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 019C48B9A9D4A44EE8ED6CF56ACC5FEDACBB
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/hSst--j5VCqGQF-z8DIf_npvY-Y.roa
Signing time: Tue 10 Feb 2026 18:04:13 +0000
ROA not before: Tue 10 Feb 2026 18:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200160
IP address blocks: 2a0a:3e45:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:b9:a9:d4:a4:4e:e8:ed:6c:f5:6a:cc:5f:ed:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Feb 10 18:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=852b2dfbe8f9542a86405fb3f0321ffe7a6f63e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:41:ef:21:02:db:1a:ed:d6:12:6a:88:79:
93:66:1c:29:f2:ab:42:fd:bc:3e:75:99:6a:46:dd:
1f:ce:25:58:98:ea:c9:ad:d6:57:9c:3d:53:7c:9a:
65:f9:b4:92:cb:c7:36:a5:a7:e5:9d:4a:ac:a4:bb:
8d:13:e9:cd:55:19:11:fa:52:e1:86:a6:c3:39:c6:
7a:a5:19:0f:fe:58:09:f4:ce:11:fc:97:44:b3:55:
be:e6:36:11:03:ad:bf:c2:0b:44:8d:77:99:19:74:
9e:5f:3f:ae:68:b1:dd:ba:5b:04:62:46:72:2c:54:
e2:3f:76:9c:33:3b:87:07:a9:96:c5:f5:c0:ab:32:
00:52:b5:d5:13:0a:2c:04:a7:75:2b:ec:59:9a:1a:
3c:e5:5c:b6:a1:50:37:dc:4d:8d:b7:1c:a3:e5:bb:
7e:1f:50:e8:99:8e:bf:4a:51:24:8c:82:d2:36:70:
77:72:d0:fd:bb:cc:bb:99:af:d4:19:5a:ef:bd:53:
93:32:c8:3c:73:cf:c5:42:81:2a:1a:b8:63:76:fb:
71:62:0d:c2:5a:18:c1:f6:ad:83:57:04:35:c0:b7:
fa:e0:6b:52:a2:73:f2:21:47:f8:79:dd:18:82:ec:
37:d8:98:80:5c:7a:1b:1c:bb:60:94:0e:b3:16:51:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:2D:FB:E8:F9:54:2A:86:40:5F:B3:F0:32:1F:FE:7A:6F:63:E6
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/hSst--j5VCqGQF-z8DIf_npvY-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3e45:100::/40
Signature Algorithm: sha256WithRSAEncryption
2d:51:83:29:38:15:fc:8a:c9:2a:1d:1c:cf:8b:df:db:7b:38:
9b:63:db:22:4b:48:d4:27:f0:6f:cf:af:60:5c:40:9f:71:30:
0d:e1:04:b9:0d:5f:36:3c:3f:a6:4d:38:27:b2:b0:61:4b:b8:
f6:f2:e1:fc:e9:14:2a:8f:c9:4c:d6:42:c0:17:ed:9f:ea:a2:
c1:25:7a:10:9c:4d:bb:26:06:c2:d6:cb:2a:e6:a0:d6:b7:89:
e6:5d:e7:ed:d3:3b:87:98:d2:df:ba:ea:46:dd:62:09:3c:db:
6b:b5:56:eb:c2:2f:7e:12:8b:ba:8d:e7:12:fa:0c:48:86:66:
53:40:e9:3a:d9:b5:93:4c:72:d6:21:16:14:53:06:64:f4:d1:
72:94:b3:b4:be:75:bb:ab:9f:57:79:68:11:5a:c2:45:6c:d1:
d7:b4:22:d3:08:b2:bd:3f:b1:88:1c:95:6d:5c:b6:04:85:9b:
d3:06:d3:3d:12:94:f2:0c:d2:cd:ea:90:78:14:08:e7:e7:3f:
12:15:83:9d:14:82:0f:e7:1b:15:9e:0d:0a:3c:02:f7:bf:f4:
05:65:ea:a6:d5:b9:47:28:65:c4:62:cb:78:9a:ff:f6:07:3c:
65:ad:8f:db:a4:46:00:8b:8e:86:1b:09:88:ee:e9:e7:e4:58:
74:c3:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:50 2026 by rpki-client