Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/hgOUaLDuSDgtlA1yV7iafLhOlwA.roa
File: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (raw, json)
Hash identifier: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=
Subject key identifier: 86:03:94:68:B0:EE:48:38:2D:94:0D:72:57:B8:9A:7C:B8:4E:97:00
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019F9F4708783F106C87A99A53C395DC8D5C
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/hgOUaLDuSDgtlA1yV7iafLhOlwA.roa
Signing time: Sun 26 Jul 2026 16:34:20 +0000
ROA not before: Sun 26 Jul 2026 16:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 217.147.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:47:08:78:3f:10:6c:87:a9:9a:53:c3:95:dc:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jul 26 16:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86039468b0ee48382d940d7257b89a7cb84e9700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:e6:83:87:30:5b:a9:90:e4:5f:2a:6f:a3:
53:4a:a2:ae:f7:81:1c:45:75:d2:8d:8b:c9:d7:9d:
e7:9b:2e:10:0c:a6:b3:fb:b7:89:6c:d4:2a:33:b7:
10:32:e5:fb:2a:98:8d:42:1c:74:bc:e8:8d:c7:ed:
54:53:2d:8b:15:7c:f6:12:59:c7:75:97:a3:1d:f0:
f1:e3:74:ff:3c:09:d9:90:38:07:c1:ff:11:42:14:
b7:4e:d1:fb:94:93:cd:98:2a:57:62:16:72:81:a4:
0f:0b:19:b5:2b:0b:8c:bf:1d:fe:b5:a0:27:58:9b:
8c:f1:b6:ca:76:72:e2:29:90:76:50:46:4e:2d:67:
ab:51:a8:3a:f5:22:5d:98:f9:10:e0:d8:8c:a9:25:
c9:48:43:5b:09:83:f2:4f:f0:4e:06:50:e0:d7:88:
03:5e:f0:f6:f6:f8:e4:d9:32:49:e7:1b:31:f6:a2:
4d:2f:25:aa:97:08:75:f5:46:ef:c6:68:5c:42:e0:
ab:2e:f7:47:45:04:99:ff:6a:42:0a:81:48:ec:4b:
ab:78:c1:d1:19:18:18:23:df:22:a9:b7:af:4d:5c:
a5:e6:52:a3:fc:2a:fa:8b:6e:74:3a:04:67:c8:6a:
60:c7:37:79:87:0b:e6:c2:36:e1:f6:a1:bb:af:5d:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:94:68:B0:EE:48:38:2D:94:0D:72:57:B8:9A:7C:B8:4E:97:00
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/hgOUaLDuSDgtlA1yV7iafLhOlwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/23
Signature Algorithm: sha256WithRSAEncryption
36:aa:07:fc:19:86:bd:34:5f:4a:db:7a:ee:20:77:d3:2b:59:
7b:f6:fc:49:05:e8:81:28:c2:1f:01:fa:ba:07:ba:73:7c:95:
fe:f7:53:49:94:08:70:95:d9:aa:59:66:8c:bb:d5:d8:60:1e:
2d:68:fe:bf:0b:5f:26:da:b6:a2:df:fb:53:61:a2:ed:3d:b9:
2b:8b:82:33:1e:2b:e6:29:fb:97:dd:54:31:d6:f5:72:51:07:
9a:8c:57:65:74:84:09:2e:00:c3:71:41:82:2e:15:9d:2a:b3:
13:1c:20:ca:6b:01:32:d8:90:c6:ec:52:7d:06:a0:93:9e:77:
b3:99:38:95:cb:97:8e:08:63:13:ae:66:98:6d:c7:7e:fd:f5:
13:e4:1a:c3:27:34:05:22:61:07:8e:d3:f1:0c:9a:1a:03:90:
4e:8b:91:68:95:46:72:b6:ec:54:0c:91:d3:df:1f:dc:ff:9f:
04:98:7f:4c:9d:0f:11:ca:34:b9:ab:4a:5d:9e:5f:a1:74:dc:
2b:7a:3f:8f:e4:59:9f:c8:31:f3:a9:94:61:94:af:3c:8f:13:
40:71:d0:11:eb:3a:28:20:47:5b:ce:cc:de:aa:3b:59:1d:4f:
e3:b1:a7:4f:fc:4b:59:86:48:54:5a:e7:d2:0d:e4:20:ce:a1:
b8:4c:b3:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+fRwh4PxBsh6maU8OV3I1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2
NTZkNWEwHhcNMjYwNzI2MTYzNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjAzOTQ2OGIwZWU0ODM4MmQ5NDBkNzI1N2I4OWE3Y2I4NGU5NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMnmg4cwW6mQ5F8qb6NTSqKu94Ec
RXXSjYvJ153nmy4QDKaz+7eJbNQqM7cQMuX7KpiNQhx0vOiNx+1UUy2LFXz2ElnH
dZejHfDx43T/PAnZkDgHwf8RQhS3TtH7lJPNmCpXYhZygaQPCxm1KwuMvx3+taAn
WJuM8bbKdnLiKZB2UEZOLWerUag69SJdmPkQ4NiMqSXJSENbCYPyT/BOBlDg14gD
XvD29vjk2TJJ5xsx9qJNLyWqlwh19UbvxmhcQuCrLvdHRQSZ/2pCCoFI7EureMHR
GRgYI98iqbevTVyl5lKj/Cr6i250OgRnyGpgxzd5hwvmwjbh9qG7r10OrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIYDlGiw7kg4LZQNcle4mny4TpcAMB8GA1UdIwQY
MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt
MTc2OWZlZjZiZTk2LzEvaGdPVWFMRHVTRGd0bEExeVY3aWFmTGhPbHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2
LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZOmMA0G
CSqGSIb3DQEBCwUAA4IBAQA2qgf8GYa9NF9K23ruIHfTK1l79vxJBeiBKMIfAfq6
B7pzfJX+91NJlAhwldmqWWaMu9XYYB4taP6/C18m2rai3/tTYaLtPbkri4IzHivm
KfuX3VQx1vVyUQeajFdldIQJLgDDcUGCLhWdKrMTHCDKawEy2JDG7FJ9BqCTnnez
mTiVy5eOCGMTrmaYbcd+/fUT5BrDJzQFImEHjtPxDJoaA5BOi5FolUZytuxUDJHT
3x/c/58EmH9MnQ8RyjS5q0pdnl+hdNwrej+P5FmfyDHzqZRhlK88jxNAcdAR6zoo
IEdbzszeqjtZHU/jsadP/EtZhkhUWufSDeQgzqG4TLNm
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:23:16 2026 by rpki-client