Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa
File: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (raw, json)
Hash identifier: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=
Subject key identifier: 1C:E1:E1:36:2B:B0:07:47:0C:87:94:54:14:5F:B5:95:7B:79:CF:0F
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019C6581D38814869988447E5FC00AE2D614
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa
Signing time: Mon 16 Feb 2026 08:12:12 +0000
ROA not before: Mon 16 Feb 2026 08:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206760
IP address blocks: 85.92.109.0/24 maxlen: 24
91.107.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:81:d3:88:14:86:99:88:44:7e:5f:c0:0a:e2:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Feb 16 08:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ce1e1362bb007470c879454145fb5957b79cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:a8:e4:da:53:48:d2:e0:f1:2d:e6:89:bf:
db:c5:8e:88:be:cc:b0:a1:49:03:bb:a5:1e:53:7c:
28:72:00:86:b9:2f:05:93:2e:4a:9b:9f:90:d2:de:
78:f1:45:67:06:12:80:f1:42:39:87:e8:22:63:3d:
b5:21:3b:56:fd:c1:12:83:7b:5b:29:8b:a9:c1:87:
3d:8f:16:57:30:44:4b:c5:8a:36:59:8c:6c:6f:76:
ae:14:5a:c1:ed:a2:5d:b1:c1:1d:50:46:d6:8e:02:
99:cc:bf:79:97:c2:b2:9e:21:bc:ff:b0:dd:97:5c:
24:93:d7:f9:c9:f2:57:e1:a0:8e:dd:e5:63:91:05:
98:5a:b6:db:e4:ca:cf:00:f3:da:45:9e:8b:c9:96:
f2:61:49:53:b0:16:1c:99:c5:48:ce:d1:9a:11:c2:
0c:00:da:c4:59:07:f4:57:10:9a:4b:ff:b6:0f:1a:
7b:b8:99:d7:d7:ee:4b:22:c6:32:65:59:ee:b8:45:
88:70:23:dd:48:b0:6c:21:ee:54:7f:8d:b5:5c:de:
c8:15:6c:02:f6:74:b6:dc:7b:fa:0c:bb:48:5c:a0:
ec:b3:33:29:de:bd:f1:cf:ce:4d:db:29:05:ca:1c:
e4:49:3e:88:ae:fd:09:8b:84:ca:4d:86:10:05:a2:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E1:E1:36:2B:B0:07:47:0C:87:94:54:14:5F:B5:95:7B:79:CF:0F
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.109.0/24
91.107.118.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d9:02:12:2e:8f:7e:9d:ad:7a:89:e8:ed:63:15:ce:f2:e5:
c1:c8:71:44:94:94:fb:ef:c7:50:84:3a:35:3f:8c:03:48:dd:
a0:ca:0a:b2:08:54:10:c0:cf:ce:f3:30:e1:21:6b:f6:60:6c:
46:b1:22:46:bb:33:59:0b:11:17:51:bf:ab:ba:9f:58:43:d8:
d2:80:94:67:16:7a:78:49:fa:53:d4:09:f9:48:c6:af:be:8b:
61:eb:2b:91:a0:6a:3c:ad:06:95:b2:19:04:e8:2c:d1:0e:82:
ca:4f:24:f2:d2:2c:f3:a9:f1:dd:49:f4:2f:58:d3:49:c8:33:
46:88:0f:eb:5c:d4:6f:6e:cd:f9:3e:27:28:20:62:c6:0b:a0:
d2:6e:df:4e:75:83:75:de:97:f7:06:7c:07:08:6f:03:18:0e:
6c:c7:5a:22:ef:6e:df:e2:d5:a1:ba:e9:8f:45:00:5e:73:9f:
11:84:6b:dd:a0:14:21:37:88:99:36:b9:c5:b6:8b:d0:a3:e7:
18:91:a2:84:c1:1f:13:89:b1:ea:2b:f8:6b:81:48:58:a4:6f:
45:e4:76:05:d8:b5:da:2c:f8:c1:98:2a:d8:f8:b2:1e:18:90:
c8:d5:bc:57:11:14:da:93:08:9f:d6:f0:82:f9:16:3b:81:94:
57:e7:1c:c6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxlgdOIFIaZiER+X8AK4tYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjYwMjE2MDgxMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2UxZTEzNjJiYjAwNzQ3MGM4Nzk0NTQxNDVmYjU5NTdiNzljZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolWo5NpTSNLg8S3mib/bxY6Ivsyw
oUkDu6UeU3wocgCGuS8Fky5Km5+Q0t548UVnBhKA8UI5h+giYz21ITtW/cESg3tb
KYupwYc9jxZXMERLxYo2WYxsb3auFFrB7aJdscEdUEbWjgKZzL95l8KyniG8/7Dd
l1wkk9f5yfJX4aCO3eVjkQWYWrbb5MrPAPPaRZ6LyZbyYUlTsBYcmcVIztGaEcIM
ANrEWQf0VxCaS/+2Dxp7uJnX1+5LIsYyZVnuuEWIcCPdSLBsIe5Uf421XN7IFWwC
9nS23Hv6DLtIXKDsszMp3r3xz85N2ykFyhzkST6Irv0Ji4TKTYYQBaII3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBzh4TYrsAdHDIeUVBRftZV7ec8PMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvSE9IaE5pdXdCMGNNaDVSVUZGLTFsWHQ1enc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVVxtAwQA
W2t2MA0GCSqGSIb3DQEBCwUAA4IBAQBG2QISLo9+na16iejtYxXO8uXByHFElJT7
78dQhDo1P4wDSN2gygqyCFQQwM/O8zDhIWv2YGxGsSJGuzNZCxEXUb+rup9YQ9jS
gJRnFnp4SfpT1An5SMavvoth6yuRoGo8rQaVshkE6CzRDoLKTyTy0izzqfHdSfQv
WNNJyDNGiA/rXNRvbs35PicoIGLGC6DSbt9OdYN13pf3BnwHCG8DGA5sx1oi727f
4tWhuumPRQBec58RhGvdoBQhN4iZNrnFtovQo+cYkaKEwR8TibHqK/hrgUhYpG9F
5HYF2LXaLPjBmCrY+LIeGJDI1bxXERTakwif1vCC+RY7gZRX5xzG
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:20:01 2026 by rpki-client