Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/hntq3x3r-D44_Rf8CDDaS4eB1YA.roa
File: hntq3x3r-D44_Rf8CDDaS4eB1YA.roa (raw, json)
Hash identifier: parhfBhAnlbSNxB1FuU5+fLVHAbqIq9TLbhy1muV2zU=
Subject key identifier: 86:7B:6A:DF:1D:EB:F8:3E:38:FD:17:FC:08:30:DA:4B:87:81:D5:80
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05A183D9C5CA177141BA55AAD9A22A682
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/hntq3x3r-D44_Rf8CDDaS4eB1YA.roa
Signing time: Mon 31 Aug 2026 23:12:13 +0000
ROA not before: Mon 31 Aug 2026 23:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a06:9801::/48 maxlen: 48
2a06:9801:741::/48 maxlen: 48
2a06:9801:ff0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:18:3d:9c:5c:a1:77:14:1b:a5:5a:ad:9a:22:a6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 31 23:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=867b6adf1debf83e38fd17fc0830da4b8781d580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:45:5f:93:27:98:9a:1a:f1:6f:24:fa:04:
b9:83:3f:07:1c:a8:ad:9b:f4:66:c0:b6:ba:09:a9:
a4:0b:ff:ba:78:7c:b8:b7:35:82:08:a6:87:99:5d:
c0:b9:c8:9e:95:76:88:0e:41:4f:25:63:26:c4:65:
0d:4b:d0:f9:fb:97:05:c4:31:0e:26:89:39:d4:34:
57:35:ae:b5:36:f7:a7:6f:5c:35:d0:76:80:ea:a5:
f8:37:c0:9c:4f:f5:77:90:6e:76:e8:96:f7:cf:90:
84:71:1e:b7:12:af:4a:e2:80:70:65:63:7e:e6:70:
e7:da:e0:96:d0:03:7e:f4:a5:ed:2c:27:0b:3d:e1:
0c:7a:91:ac:fb:79:06:71:97:5e:af:67:12:c2:8a:
12:6f:00:ec:01:6d:1b:62:8c:cb:62:31:0e:84:98:
77:4a:80:dd:0a:a8:e1:58:f9:5e:5e:6b:94:53:70:
75:a8:8e:4d:9d:3d:f8:e3:59:6f:71:e0:8e:e8:05:
45:83:0e:fb:de:3b:52:5b:2d:fc:5b:d9:cc:3d:48:
f0:d4:bb:f8:81:5e:16:d4:10:47:9d:6c:ae:3f:88:
a0:54:d5:88:3a:89:e0:e4:dc:0f:41:66:dd:40:f1:
48:7f:f3:c3:5d:4b:eb:72:5e:58:15:de:b9:3c:78:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:6A:DF:1D:EB:F8:3E:38:FD:17:FC:08:30:DA:4B:87:81:D5:80
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/hntq3x3r-D44_Rf8CDDaS4eB1YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801::/48
2a06:9801:741::/48
2a06:9801:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
02:f4:1a:4f:71:08:cb:e7:f5:bd:f7:8b:7b:ce:da:6f:23:3b:
b6:f7:8a:33:2f:03:87:21:c8:f8:a9:ab:c1:5e:57:2d:be:48:
b9:80:7e:d1:f0:0d:bb:cd:10:a3:52:7f:d3:6b:e8:c4:cc:14:
ac:a7:73:69:f4:5c:70:ba:63:e6:1a:26:51:9a:0d:67:da:4b:
3b:2f:a9:5c:08:f3:ec:80:8a:ce:53:b3:b7:d9:9c:45:a2:d9:
9f:1d:c2:88:01:5c:b2:ac:c7:3f:aa:6c:4e:bb:cf:bd:9e:c9:
54:ab:cd:85:df:a9:cf:7f:35:dc:87:73:25:1f:c0:b2:84:71:
70:28:e2:78:d6:99:d8:ef:a4:fe:50:9b:7f:a9:af:dd:5b:46:
a7:fd:52:dc:33:1f:50:7b:ee:32:25:ea:34:0f:94:a4:72:32:
86:af:77:39:ec:63:51:9b:27:b5:49:2a:6e:86:44:a6:59:80:
ea:0f:c5:9b:f6:82:05:52:35:61:2e:14:db:6d:89:81:13:95:
9c:e8:1b:00:c4:82:9d:81:e6:22:06:5c:ab:96:da:91:33:9f:
4e:0f:30:3d:19:56:6f:42:c2:3e:b4:f8:c7:52:9c:f0:62:43:
63:2b:61:92:cd:df:c5:e9:af:62:d7:f6:ee:e7:1d:55:a8:9a:
29:44:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:44:00 2026 by rpki-client