Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/hNBmFkiHmudsLcJgnF-n_v0oucc.roa
File: hNBmFkiHmudsLcJgnF-n_v0oucc.roa (raw, json)
Hash identifier: AAzY0jDa+i02UKTkSg8fvBx8nVxmgk4A4r4FDAAAA9Y=
Subject key identifier: 84:D0:66:16:48:87:9A:E7:6C:2D:C2:60:9C:5F:A7:FE:FD:28:B9:C7
Certificate issuer: /CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
Certificate serial: 01A07BD42A675D3919CC4DF0D3D2883C2DBE
Authority key identifier: 6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/hNBmFkiHmudsLcJgnF-n_v0oucc.roa
Signing time: Mon 07 Sep 2026 12:24:57 +0000
ROA not before: Mon 07 Sep 2026 12:24:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 185.54.84.0/22 maxlen: 22
2a04:d180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:d4:2a:67:5d:39:19:cc:4d:f0:d3:d2:88:3c:2d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554
Validity
Not Before: Sep 7 12:24:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84d0661648879ae76c2dc2609c5fa7fefd28b9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:f6:db:33:9f:30:ed:4a:a9:08:3a:e1:49:
5c:3d:7d:4b:05:ba:ff:55:03:e7:cf:69:9e:6e:e3:
61:56:30:fa:d4:80:09:d5:cb:21:2c:24:5c:87:f2:
c7:e9:99:75:16:71:29:a3:ff:d7:07:96:e2:da:a1:
8c:6d:98:94:3b:e0:d9:f8:9d:80:0c:f7:ea:14:79:
b7:64:a5:19:6d:fb:90:85:af:40:6f:c3:aa:a9:8a:
88:27:f4:4c:03:d2:d7:97:f8:bf:48:16:3a:6a:ac:
59:a2:80:32:29:c4:e5:a0:e2:a1:41:27:cf:86:c8:
c0:28:c6:2e:45:3a:c0:ce:a9:93:46:f3:e8:fb:13:
f3:a5:43:a2:3f:08:f8:ad:b6:73:d2:d4:04:1b:a0:
1e:9c:46:4f:fb:82:c7:54:69:e5:08:5a:ba:29:e6:
64:36:1e:fb:1e:66:6d:66:ad:69:e9:f2:44:53:7a:
a4:57:1a:92:e7:65:94:ce:30:de:2e:1b:55:0e:ce:
6d:1e:d7:88:cf:69:ec:7b:e9:60:4e:e2:e8:a3:7b:
8c:49:62:ac:8c:e5:87:e2:a4:a0:8d:73:49:6a:9e:
a1:38:7d:7b:cc:a4:37:68:f9:ce:a0:23:6f:89:ef:
2f:e4:d7:94:04:50:bf:34:9f:bb:a7:bd:a4:a6:e1:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D0:66:16:48:87:9A:E7:6C:2D:C2:60:9C:5F:A7:FE:FD:28:B9:C7
X509v3 Authority Key Identifier:
keyid:6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/hNBmFkiHmudsLcJgnF-n_v0oucc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.84.0/22
IPv6:
2a04:d180::/29
Signature Algorithm: sha256WithRSAEncryption
31:ca:66:eb:b3:d2:6d:6a:78:7c:13:81:3c:ac:17:f1:7d:3c:
51:71:1b:13:c9:15:1f:be:1c:7f:d0:15:2e:c0:f5:e0:79:43:
41:e8:74:9d:f2:de:ae:7e:96:8e:69:e1:fb:fe:94:fc:05:a3:
73:9d:05:99:01:d9:f0:e7:bb:8d:e9:aa:9d:81:1f:fd:45:f6:
b3:c2:ff:7a:81:8b:55:c6:88:e8:70:12:f6:a4:2d:c3:e1:a0:
49:7e:df:58:de:53:0d:f0:14:61:89:89:00:88:35:e0:a6:f0:
13:d7:37:aa:fc:05:b7:6c:82:05:43:df:1d:64:ae:df:41:c8:
02:75:2d:50:8f:31:ca:a1:d4:30:c1:83:17:91:7c:a9:65:fc:
4e:75:81:a0:a3:02:6d:27:b5:7b:a5:c4:d3:2d:0d:16:29:2e:
54:ee:79:45:be:85:c7:37:0c:32:13:9e:8c:b3:b2:4e:d7:5e:
8c:85:1a:53:d2:c6:85:70:ae:50:f0:99:57:dd:33:e4:bc:f0:
33:2d:34:e3:a4:f3:28:fe:9c:e4:e2:b8:3d:69:b5:75:9f:b0:
2f:9e:54:f7:c4:d3:8b:80:ef:f2:7b:f2:24:8d:6f:ef:dd:7b:
26:c3:2a:0d:52:4f:34:95:d8:6c:77:29:a3:30:7b:5e:19:bb:
1d:23:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:07 2026 by rpki-client