Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/HlfpAIBYIC3ASrDFNd5znTYM6Yg.roa
File: HlfpAIBYIC3ASrDFNd5znTYM6Yg.roa (raw, json)
Hash identifier: UNFNDQwhFwNsSioANDpz5AIiKDKArktt51oGasana+I=
Subject key identifier: 1E:57:E9:00:80:58:20:2D:C0:4A:B0:C5:35:DE:73:9D:36:0C:E9:88
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A11288514A234F661FDC0A193324189B4D
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/HlfpAIBYIC3ASrDFNd5znTYM6Yg.roa
Signing time: Tue 06 Oct 2026 18:44:45 +0000
ROA not before: Tue 06 Oct 2026 18:44:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 85.8.192.0/24 maxlen: 24
2a14:c380:35::/48 maxlen: 48
2a14:c380:50::/44 maxlen: 44
2a14:c380:70::/44 maxlen: 44
2a14:c380:90::/44 maxlen: 44
2a14:c380:130::/44 maxlen: 44
2a14:c380:600::/40 maxlen: 40
2a14:c380:c70::/44 maxlen: 44
2a14:c380:d70::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:88:51:4a:23:4f:66:1f:dc:0a:19:33:24:18:9b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Oct 6 18:44:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e57e9008058202dc04ab0c535de739d360ce988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:01:d8:d1:af:eb:d4:e0:d4:57:e1:f0:8f:
cc:d8:be:4b:ac:75:fb:8b:c1:c0:3a:0e:fe:e8:da:
30:78:d2:5c:20:2f:ea:e4:5e:48:94:32:c4:b8:aa:
79:b6:c4:98:ec:b6:a9:62:50:e1:4b:30:6b:da:f5:
33:c8:87:fc:3d:55:fa:b0:3f:34:16:37:4b:cd:f5:
cf:80:28:32:58:65:18:81:96:45:12:61:ec:0e:b7:
f8:8e:ce:dd:84:06:19:2e:36:0a:9d:77:02:25:b8:
7c:e2:0e:30:25:32:a6:14:dd:71:91:58:52:88:b1:
d6:d1:84:67:89:ad:bb:76:d9:46:72:be:d8:ad:3b:
67:8d:18:bb:79:90:24:5b:bb:a9:ea:35:64:43:60:
d0:b1:0f:c8:59:e7:ce:09:4a:67:1f:25:cd:1e:c3:
c5:0a:88:4c:de:61:f3:b8:b9:be:3b:16:83:c4:50:
f3:d5:83:4e:b6:5d:b8:ad:99:98:76:d9:96:83:50:
85:78:a2:0c:b4:e1:2b:73:08:0f:f2:7f:af:7b:0b:
20:da:36:b7:67:d2:a0:9a:7a:0d:5a:c2:08:e9:7c:
d9:36:cf:3c:7e:4e:15:85:82:22:63:92:bc:9a:84:
9d:e6:ce:53:9b:92:8f:1c:d0:99:be:93:a9:da:b1:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:E9:00:80:58:20:2D:C0:4A:B0:C5:35:DE:73:9D:36:0C:E9:88
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/HlfpAIBYIC3ASrDFNd5znTYM6Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.192.0/24
IPv6:
2a14:c380:35::/48
2a14:c380:50::/44
2a14:c380:70::/44
2a14:c380:90::/44
2a14:c380:130::/44
2a14:c380:600::/40
2a14:c380:c70::/44
2a14:c380:d70::/44
Signature Algorithm: sha256WithRSAEncryption
56:70:c1:a6:4a:1b:cc:26:bf:fb:62:5f:5a:00:cd:4b:18:64:
d5:74:f6:0d:28:98:0e:7d:a8:08:55:a5:e4:99:74:d3:f6:90:
1b:75:6b:cb:90:d3:48:67:31:cd:a5:82:81:1e:e9:f2:09:07:
ef:9d:f1:15:6a:7f:38:2f:e6:8f:c6:b3:6e:63:bd:5e:1c:4e:
72:83:ce:8a:cc:a2:57:26:3b:44:28:9d:9c:08:91:8d:73:db:
41:9e:c0:bf:fd:53:f3:62:45:ed:a9:dc:4f:d3:12:8f:68:cb:
53:72:64:bb:f0:34:42:8f:fb:0a:7f:ea:61:26:86:d3:49:71:
37:66:77:89:a5:c5:36:24:32:5d:cc:88:39:71:e9:9f:11:75:
22:95:1d:14:7a:0f:aa:c1:6a:63:c2:c2:01:34:cd:db:9c:8b:
27:b1:a5:5f:34:60:6a:68:34:a5:d1:81:c0:6c:6d:73:c6:41:
2c:7d:bf:d0:56:f4:46:60:50:1a:49:44:eb:57:14:27:25:ec:
50:61:38:1a:8c:7d:8b:66:26:a0:1c:e6:d8:7b:4f:98:6d:22:
ba:dc:d6:bf:49:35:6d:c4:77:44:3b:e2:3a:a9:07:c1:37:8c:
25:66:5e:ab:21:cc:b4:62:d6:89:d8:a1:b9:c5:77:25:ac:f4:
15:a0:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:45:58 2026 by rpki-client