Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/hXZFZHr0XCODM9k9s07wdTNy4yg.roa
File: hXZFZHr0XCODM9k9s07wdTNy4yg.roa (raw, json)
Hash identifier: HArJOYQvvBua4EDeDhYlhjafQPJqoF9wxDTtx9q/aEo=
Subject key identifier: 85:76:45:64:7A:F4:5C:23:83:33:D9:3D:B3:4E:F0:75:33:72:E3:28
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01A07AAE06A03120CD121F9C47E4A1874171
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/hXZFZHr0XCODM9k9s07wdTNy4yg.roa
Signing time: Mon 07 Sep 2026 07:03:40 +0000
ROA not before: Mon 07 Sep 2026 07:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:ae:06:a0:31:20:cd:12:1f:9c:47:e4:a1:87:41:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Sep 7 07:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=857645647af45c238333d93db34ef0753372e328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:ea:ae:b5:28:1e:6b:a7:c9:c7:3e:ba:4b:
ae:f2:e1:e6:5a:b9:7b:fa:aa:b5:3e:0b:61:e1:bf:
d5:ff:7d:14:0e:4a:f2:eb:f7:64:67:ae:e7:d4:46:
70:63:43:98:e7:a3:6e:f9:58:79:6c:5f:54:16:c9:
5a:02:86:b1:47:20:be:67:fe:69:20:31:43:43:06:
f3:c2:a3:58:c5:ce:7b:3a:5b:cb:32:7f:56:37:ed:
9b:50:1d:ad:ed:4a:ed:8f:6b:f0:af:79:c8:50:fd:
c2:00:30:e7:68:37:9a:7a:b3:9e:5f:fe:52:f8:1c:
f6:3a:55:7e:4c:e9:e5:d0:c0:12:40:c5:36:bc:4f:
8f:8a:60:d4:25:49:76:ef:4a:98:83:cb:2b:b9:a0:
40:ad:41:21:b1:9d:8e:86:2b:24:cb:ef:ea:aa:ec:
52:5f:18:ba:4d:d9:6c:44:60:e7:10:b3:92:98:15:
68:93:7c:bb:d5:17:d4:cb:e2:d2:df:2b:5c:26:fa:
ba:de:5a:1f:17:c5:d8:87:eb:a6:47:67:27:1d:75:
2d:ac:9e:a4:43:39:70:04:87:e2:01:50:12:1b:04:
9f:00:0d:21:1e:fc:b5:1b:88:e3:05:87:06:4c:9a:
a9:72:f9:d4:ed:3d:d9:5c:f9:f5:f9:ec:86:b3:0f:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:45:64:7A:F4:5C:23:83:33:D9:3D:B3:4E:F0:75:33:72:E3:28
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/hXZFZHr0XCODM9k9s07wdTNy4yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0f:72:37:8a:26:9d:e2:17:83:e2:35:25:d4:e0:f8:d2:d7:
6e:52:0a:01:82:e7:79:44:fc:71:e2:e2:49:3b:2d:07:ec:84:
d5:41:8e:74:eb:3f:90:6b:d7:54:2f:67:5e:91:2d:d4:90:ae:
e8:ae:37:c0:7d:67:42:5c:97:67:6c:23:c7:a7:b5:c8:d0:88:
13:0e:98:08:03:5a:25:bf:f8:c6:33:85:dc:e0:1c:36:3f:49:
69:24:d1:d0:d7:38:3f:08:bd:4c:1f:33:58:ff:19:f8:17:1c:
a2:94:93:19:3d:e2:f7:74:ef:af:3f:7c:52:35:15:f3:10:e8:
68:12:bf:69:0b:96:ac:a2:4d:bf:28:70:8d:ec:5d:21:df:dd:
2f:30:71:0f:ed:48:1b:c7:5e:e2:c6:90:32:00:02:bd:62:93:
46:0d:64:49:c7:75:39:73:f1:79:6a:86:51:dc:65:c3:9a:01:
1a:87:41:57:ee:c3:54:49:d8:27:08:e5:03:26:e1:07:3a:1a:
06:e9:21:0f:e9:1d:2f:6c:ee:57:1d:d2:7e:2f:94:96:78:16:
c6:60:3d:3a:dd:d8:6e:fe:20:77:cd:6e:73:d6:82:6f:9e:7b:
c4:9a:d4:84:dc:2b:e5:58:75:60:ea:46:ec:f8:1a:b2:f5:1c:
ff:8c:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:03 2026 by rpki-client