Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/hRGXnqMuvvp8ezdGfd45_rLgiwA.roa
File: hRGXnqMuvvp8ezdGfd45_rLgiwA.roa (raw, json)
Hash identifier: c1R3TI5GdxYNvsLIzQT5n+CI+5W996We99FtvnhCTiY=
Subject key identifier: 85:11:97:9E:A3:2E:BE:FA:7C:7B:37:46:7D:DE:39:FE:B2:E0:8B:00
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 01A08F5F10EEE8E8FAF9A4E2C99C964E3D25
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/hRGXnqMuvvp8ezdGfd45_rLgiwA.roa
Signing time: Fri 11 Sep 2026 07:29:27 +0000
ROA not before: Fri 11 Sep 2026 07:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197959
IP address blocks: 2a0a:e641::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:5f:10:ee:e8:e8:fa:f9:a4:e2:c9:9c:96:4e:3d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Sep 11 07:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8511979ea32ebefa7c7b37467dde39feb2e08b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:ac:71:e9:29:45:44:a0:11:4d:23:6a:6a:
66:19:ab:d6:a9:78:31:8c:3e:5d:3d:76:3f:29:60:
65:a9:a1:e9:d5:b9:a3:a6:bf:b8:6f:d9:f4:79:42:
01:29:de:cc:84:e1:95:89:77:d6:a5:81:04:db:5f:
31:bc:66:61:a9:f5:c7:ca:37:23:7a:b9:7d:b5:b6:
8e:55:d5:27:24:56:22:4a:79:d1:98:0d:d8:98:a7:
98:c5:9c:83:60:20:42:c6:03:a4:e8:d4:30:da:53:
87:e3:c1:b7:b8:59:6b:d1:a8:cd:5a:9c:1e:59:0a:
0f:02:16:b2:f5:cf:24:74:de:6c:3a:39:56:24:c6:
2c:f4:70:b9:e9:2b:a2:d2:31:30:07:ed:8d:34:01:
4d:76:6b:72:24:f7:c3:f8:99:7c:f6:49:2e:a3:6f:
04:83:f6:74:ad:be:f1:7d:4d:6d:f5:38:e3:e0:07:
e8:05:ac:99:17:7f:f2:0c:b0:15:7f:ac:54:da:c8:
14:03:e5:5b:d6:f2:62:2f:79:5b:83:49:f0:e3:33:
ea:39:4a:02:15:45:31:32:1d:c8:be:c7:20:17:34:
cd:fe:2f:03:68:4e:40:d0:94:4d:a9:49:b9:2b:39:
b8:28:28:32:af:21:2f:15:73:c4:ab:f4:4f:33:9a:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:97:9E:A3:2E:BE:FA:7C:7B:37:46:7D:DE:39:FE:B2:E0:8B:00
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/hRGXnqMuvvp8ezdGfd45_rLgiwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e641::/36
Signature Algorithm: sha256WithRSAEncryption
47:56:87:3c:7d:0e:a1:b2:1e:4c:6c:c3:17:40:97:2d:fd:c2:
dc:26:84:a8:44:b6:75:2c:74:aa:e2:c3:25:38:e0:c0:2f:93:
45:fc:99:ed:2f:3f:bf:4b:0f:0d:09:84:19:12:8a:4b:7a:b3:
79:85:5c:93:e1:ef:8d:7d:d3:e5:a6:eb:91:89:78:43:05:63:
d0:38:1d:3b:d5:0d:1c:f0:03:c5:a4:d1:03:af:90:a1:95:3a:
6f:3c:bb:3f:e1:55:89:dc:af:25:95:20:7f:af:52:ec:cb:4f:
28:86:75:cb:fb:99:66:5a:35:4f:ca:e3:18:e3:1a:b0:3a:67:
8d:49:36:53:00:f6:6f:14:5d:69:9f:fd:13:e1:79:4a:91:fc:
7e:9c:3a:80:2d:b2:cb:83:11:9a:bd:27:08:bc:45:50:1d:2a:
2a:99:32:b1:bd:5f:71:de:c6:2e:f6:f6:07:aa:59:79:9c:51:
d2:ae:83:5e:50:d9:32:6c:ec:3f:57:ab:cd:aa:bb:ce:cb:0c:
dc:30:bc:e6:d8:a9:69:fa:84:5d:78:f6:e5:9f:db:37:be:16:
87:86:c2:b4:d0:76:01:e2:dc:1b:41:9e:28:b6:8d:53:eb:95:
08:81:d7:05:a4:e0:b5:29:79:91:bd:c0:26:77:ee:29:5f:2e:
a6:f3:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:06:42 2026 by rpki-client