Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/hcdiXK81uJfC8h4E8fYnaTUhAfo.roa
File: hcdiXK81uJfC8h4E8fYnaTUhAfo.roa (raw, json)
Hash identifier: dPpKiBklH1aC6AzaZKujsTV7Rjv/gZUn1ELmZIIgRoI=
Subject key identifier: 85:C7:62:5C:AF:35:B8:97:C2:F2:1E:04:F1:F6:27:69:35:21:01:FA
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0AE5C1F9369B7BC8E8F82115A3DCE40F4
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/hcdiXK81uJfC8h4E8fYnaTUhAfo.roa
Signing time: Thu 17 Sep 2026 07:54:28 +0000
ROA not before: Thu 17 Sep 2026 07:54:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 147.90.192.0/20 maxlen: 20
147.90.200.0/21 maxlen: 21
2a04:30c0::/32 maxlen: 32
2a06:25c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:5c:1f:93:69:b7:bc:8e:8f:82:11:5a:3d:ce:40:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 17 07:54:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85c7625caf35b897c2f21e04f1f62769352101fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:21:07:e0:5f:24:4d:2c:ec:aa:c0:13:00:
6d:42:9f:95:38:0c:23:f3:55:fa:b6:0f:1c:ea:a4:
e2:dc:e7:2f:b2:52:1f:34:7d:82:7f:6e:1f:96:a9:
61:0e:e5:ca:5a:b9:07:64:89:0b:32:3e:ec:8f:b0:
34:d7:3c:51:b0:70:2b:8f:b1:71:f9:a3:91:e0:a1:
73:c0:31:13:d8:3a:cf:ed:1d:d1:6b:63:f6:9c:08:
a4:b8:54:06:28:62:55:3f:1a:ce:0b:91:7c:20:f1:
08:31:8e:12:99:6d:05:03:6f:c7:6c:b9:01:44:ba:
ef:cc:f7:8b:be:e9:cd:ee:6b:7a:80:ab:be:5a:b1:
a7:ea:d1:6d:37:34:10:97:e7:ff:1b:77:4f:12:61:
a5:96:93:f8:1b:10:97:09:00:f1:7a:48:7e:b3:dc:
9b:8f:04:a0:70:07:2f:99:f5:72:6b:53:f7:86:33:
27:af:fb:c2:63:6d:aa:0c:ae:0b:72:84:31:87:03:
e1:42:fb:c6:02:77:e8:82:19:18:61:6f:e2:57:75:
ac:c5:f7:89:a3:6d:ee:13:b7:3e:01:0c:48:70:71:
07:cf:02:e3:21:f6:e5:e5:66:55:81:a7:cc:b8:11:
cc:2f:ed:cb:6c:32:cf:54:cd:58:90:33:19:9e:c3:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:62:5C:AF:35:B8:97:C2:F2:1E:04:F1:F6:27:69:35:21:01:FA
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/hcdiXK81uJfC8h4E8fYnaTUhAfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.192.0/20
IPv6:
2a04:30c0::/32
2a06:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
69:2a:23:8c:14:c2:32:62:c3:e4:26:2c:90:d8:e2:67:f2:62:
6a:f0:bc:28:13:b1:f3:31:54:e4:0e:c5:ff:b1:56:e5:7b:ca:
75:9f:6b:b0:6d:c8:b2:83:be:77:c9:e2:f3:e9:ed:b6:d7:21:
7c:11:fe:20:84:33:a4:61:77:64:5a:c9:f6:00:fb:55:ba:91:
37:2e:e8:46:d8:9d:0c:fc:bc:f2:4d:14:80:86:9b:b6:63:56:
36:04:8f:50:70:f3:fc:78:57:24:0f:8e:0d:44:63:77:26:db:
d4:6a:13:64:40:55:67:02:cb:19:31:f4:5c:a8:23:97:05:e5:
8c:ae:e9:84:c9:f4:3d:30:09:92:a8:ec:29:b0:57:19:87:05:
c5:06:d6:91:24:fb:6b:b4:f3:40:0b:89:8e:4d:cd:dd:12:48:
ce:73:f7:84:d3:e6:b6:51:bb:ee:65:d3:c0:a0:38:6e:59:9a:
51:8f:60:04:37:54:29:f8:d4:c4:3e:24:02:3b:48:44:a7:81:
36:67:c7:a2:51:65:97:a4:44:7b:2c:36:0d:40:9d:cc:3d:80:
9e:bd:87:c5:8c:5f:63:00:46:b5:45:84:24:10:4d:87:4a:d7:
a6:7d:3f:bf:43:55:52:db:a1:c8:9c:70:7b:44:e2:bb:45:b7:
83:88:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:58:38 2026 by rpki-client