Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/hGjAKW9JBbb2okUNgyTtzh8yQRg.roa
File: hGjAKW9JBbb2okUNgyTtzh8yQRg.roa (raw, json)
Hash identifier: wGrUB5iKzwchIffKrS8H+33LD/kv5hAL0g4NpTJiaUo=
Subject key identifier: 84:68:C0:29:6F:49:05:B6:F6:A2:45:0D:83:24:ED:CE:1F:32:41:18
Certificate issuer: /CN=7e0aa229035bb5199e822d0d73873c931a74b397
Certificate serial: 01A084D996BB71908AC943B6B48F91EE794E
Authority key identifier: 7E:0A:A2:29:03:5B:B5:19:9E:82:2D:0D:73:87:3C:93:1A:74:B3:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/hGjAKW9JBbb2okUNgyTtzh8yQRg.roa
Signing time: Wed 09 Sep 2026 06:27:27 +0000
ROA not before: Wed 09 Sep 2026 06:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41927
IP address blocks: 193.169.246.0/23 maxlen: 24
193.169.247.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:d9:96:bb:71:90:8a:c9:43:b6:b4:8f:91:ee:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0aa229035bb5199e822d0d73873c931a74b397
Validity
Not Before: Sep 9 06:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8468c0296f4905b6f6a2450d8324edce1f324118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:cd:a8:3b:d8:da:42:46:25:99:ff:43:49:
09:03:33:c6:99:fd:c6:14:21:d8:ee:8e:90:9e:2e:
72:61:a9:ff:ef:33:90:92:7b:a9:f9:bb:9b:30:ef:
96:f8:40:29:df:d1:52:0f:50:97:75:12:eb:0d:3d:
1f:85:9c:c5:0f:87:61:49:5f:a2:30:31:ad:b7:db:
fe:69:fc:55:f9:52:74:1d:bd:5a:da:a8:31:47:62:
e9:e7:2b:0e:da:87:5b:14:64:2a:b9:02:a7:a9:8e:
12:83:6d:53:45:32:54:3e:9f:89:37:1f:e7:99:ce:
9a:a8:87:ff:db:c7:04:4f:36:29:ce:58:a7:5f:b3:
16:40:94:ca:da:3d:f1:d0:40:aa:c2:77:b9:db:f4:
07:f3:15:46:81:6a:37:2b:89:54:29:3e:f3:3a:32:
47:bf:8c:be:3b:4c:be:61:53:ce:0b:d9:30:bf:94:
c7:e6:14:5e:7c:6f:f1:cf:db:1e:cd:68:c6:cd:4a:
9c:79:98:c2:7b:83:be:ba:28:13:ee:55:d1:a6:50:
d8:75:96:43:2d:ac:1d:de:8f:00:4c:83:73:13:d6:
d3:61:b6:0c:86:64:71:4e:96:ab:d3:21:7a:1a:a7:
7c:4d:00:b4:83:cb:cd:14:16:a9:f8:1c:11:d3:4a:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:C0:29:6F:49:05:B6:F6:A2:45:0D:83:24:ED:CE:1F:32:41:18
X509v3 Authority Key Identifier:
keyid:7E:0A:A2:29:03:5B:B5:19:9E:82:2D:0D:73:87:3C:93:1A:74:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/hGjAKW9JBbb2okUNgyTtzh8yQRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.246.0/23
Signature Algorithm: sha256WithRSAEncryption
49:d8:a6:e6:1f:a6:6f:40:ac:05:90:0c:91:8b:11:ca:80:d2:
56:4f:cb:78:b5:7e:1b:a1:ab:db:28:92:b1:c2:da:f7:b1:2b:
60:f3:ad:53:93:d7:f7:b5:b5:4c:93:9a:59:5d:19:2c:c9:67:
41:66:7d:3a:31:70:21:8b:6c:d8:02:50:60:a1:e4:e0:23:60:
0f:18:fb:a2:47:d4:11:9a:7a:c6:a2:48:45:49:a6:72:f8:d8:
e9:b2:95:7b:f0:f7:66:7d:33:37:5f:2a:b9:65:0d:e6:db:35:
c9:a3:99:43:34:43:8b:9d:c2:50:81:98:49:bc:49:62:98:1e:
46:a9:1f:eb:0d:36:d0:3d:26:2d:0c:06:72:86:8a:ff:a2:90:
ee:cd:0a:a1:37:1a:32:a0:63:0a:62:a5:f0:97:8b:74:9f:51:
83:fc:64:42:a8:b6:dd:c5:c4:e4:24:cf:4c:a0:63:82:65:97:
41:05:e1:5e:8a:89:fe:16:22:47:02:97:2f:41:7e:4f:5c:42:
3b:a9:e9:ee:78:4f:e4:89:68:b0:5c:b4:f3:71:8d:50:73:3b:
3a:39:70:24:80:9a:c8:70:a7:d2:11:62:0a:77:22:21:04:8a:
88:19:f1:14:3f:fc:bd:72:ee:ec:8c:b2:fa:b8:a4:a8:f9:a4:
02:2c:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:52:54 2026 by rpki-client