Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/05HbW4vWO71TuXnlLUIhotjCjQA.roa
File: 05HbW4vWO71TuXnlLUIhotjCjQA.roa (raw, json)
Hash identifier: wd8NR6jnQPtSkv4WqVTGTX5hWiMAv5m+dMvP8o7c5l8=
Subject key identifier: D3:91:DB:5B:8B:D6:3B:BD:53:B9:79:E5:2D:42:21:A2:D8:C2:8D:00
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 019C4D2F54761DC1EB8D1DF047B54F6E3C38
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/05HbW4vWO71TuXnlLUIhotjCjQA.roa
Signing time: Wed 11 Feb 2026 14:51:13 +0000
ROA not before: Wed 11 Feb 2026 14:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49714
IP address blocks: 100.43.78.0/24 maxlen: 24
2a0e:fd87::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:2f:54:76:1d:c1:eb:8d:1d:f0:47:b5:4f:6e:3c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Feb 11 14:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d391db5b8bd63bbd53b979e52d4221a2d8c28d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:79:04:bd:77:8b:67:23:02:05:e8:e9:b5:
e5:8a:20:52:98:f8:8c:15:a6:cc:a4:51:bc:27:7b:
ac:ea:e8:d7:ae:72:04:4a:3f:b1:f0:2e:8f:cc:65:
44:8c:7f:35:f5:53:70:de:f9:80:3c:e5:49:ba:e7:
f6:3d:8b:09:dd:82:82:ab:39:cb:e2:90:b6:cd:0b:
38:cb:85:5d:5c:72:01:03:10:0f:4b:71:b4:3e:23:
24:df:49:54:db:3d:29:f5:67:ef:d0:46:f4:23:ec:
d4:6a:2c:13:54:87:30:7a:19:53:50:64:a8:ca:da:
11:cc:f9:62:31:19:73:f5:f6:f3:a4:57:c8:8f:4a:
60:af:22:fd:ec:32:75:89:7f:29:85:d9:95:d4:0f:
b7:c9:9c:43:2c:20:ed:7c:69:8e:e3:55:ce:b1:04:
b9:b9:71:0f:28:59:30:31:9f:61:b5:ec:94:0c:14:
a7:e3:f6:64:48:20:f4:9c:bd:c7:7c:92:76:29:22:
f4:0d:0e:34:f4:d0:5c:53:e8:4b:9e:14:63:e7:e1:
35:d9:71:da:ba:da:11:46:ec:2e:fb:1c:de:fa:e5:
f7:95:40:a5:bb:f5:42:82:22:28:58:9a:0d:4b:fe:
d8:e6:28:09:67:aa:f2:b8:59:79:0f:f8:88:20:d6:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:DB:5B:8B:D6:3B:BD:53:B9:79:E5:2D:42:21:A2:D8:C2:8D:00
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/05HbW4vWO71TuXnlLUIhotjCjQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
100.43.78.0/24
IPv6:
2a0e:fd87::/32
Signature Algorithm: sha256WithRSAEncryption
02:b0:ae:81:b8:f0:f9:65:33:7b:7a:3d:33:86:48:10:b4:5e:
11:41:ba:f3:dd:b5:32:81:66:13:5d:f2:ab:df:49:c0:ed:02:
12:61:fa:37:d0:c6:eb:cf:ca:93:6e:b1:3a:6b:be:82:bf:f6:
42:80:c4:0e:5a:45:3a:52:26:c6:0e:67:3a:cc:c4:74:2a:d1:
de:12:5d:4a:12:96:0d:5f:a7:3d:85:f5:ff:d8:fc:7d:d5:25:
2f:3d:22:55:97:65:c7:6f:dc:55:74:a1:f3:de:93:89:4c:6f:
8d:b3:0b:89:5a:07:98:92:09:ef:39:9f:1c:cf:b3:01:8a:1a:
86:23:dc:2e:33:f9:ac:e7:61:ac:fe:23:61:ff:49:f7:80:54:
24:f8:6e:4e:94:d1:39:1b:78:73:d0:b6:77:d2:d2:ea:aa:99:
1f:77:b7:ba:10:52:c0:9c:d5:0c:0a:d2:6a:c1:54:bb:ed:d3:
16:5e:1b:b1:62:80:b5:fd:47:66:83:65:67:e7:28:94:0b:4d:
ad:81:9c:37:fe:21:42:5e:8e:5b:da:3c:81:71:e9:ff:5f:71:
fd:a2:3a:2d:0b:40:df:90:d4:1d:4a:79:4f:90:b7:42:19:b8:
66:90:9f:45:21:15:a1:61:8d:fb:bd:46:39:26:cc:5c:f3:ec:
28:26:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:52 2026 by rpki-client