Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/kHopWsCnh3m7FxnT3tcRkFfqaQM.roa
File: kHopWsCnh3m7FxnT3tcRkFfqaQM.roa (raw, json)
Hash identifier: ocyuk6We8YCU54sXDPg1tErWhvAYC1ikurMBcUfNHcM=
Subject key identifier: 90:7A:29:5A:C0:A7:87:79:BB:17:19:D3:DE:D7:11:90:57:EA:69:03
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 01A0A112EDEFD97915BD2DA9A04CBAD808F5
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/kHopWsCnh3m7FxnT3tcRkFfqaQM.roa
Signing time: Mon 14 Sep 2026 17:59:27 +0000
ROA not before: Mon 14 Sep 2026 17:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 185.222.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:12:ed:ef:d9:79:15:bd:2d:a9:a0:4c:ba:d8:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Sep 14 17:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=907a295ac0a78779bb1719d3ded7119057ea6903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:19:79:b9:12:68:6d:0b:c2:df:77:d6:86:
69:d1:72:e0:38:c0:a1:be:a8:c7:61:2c:c4:d6:57:
aa:08:d1:6a:35:60:c4:a8:01:b8:41:e3:77:0e:e5:
09:4a:f6:a3:1f:4a:9d:39:ba:50:4e:9d:28:5f:c4:
43:da:c9:38:3f:69:31:3d:a9:57:6c:01:f1:0c:87:
f6:5a:b1:89:33:57:41:1a:ae:1f:f2:58:3f:49:36:
50:02:1f:d9:78:7b:a5:ac:3b:38:34:bd:d7:63:2a:
a2:c7:d4:18:47:1e:a1:0b:c1:36:80:7a:4d:1e:32:
ee:87:46:18:d8:59:4f:e5:c3:9b:8e:ee:11:51:a0:
c2:53:82:de:81:9f:dc:ab:be:be:5a:e3:fe:b3:a3:
0e:7c:ad:c7:de:3c:25:9e:ab:2b:53:07:36:8f:25:
f8:9b:1f:41:2e:7f:9e:a4:e8:eb:8d:3d:8b:5a:d3:
5b:a0:da:44:39:6c:70:a7:58:b6:3f:3e:58:56:63:
51:14:56:73:f3:9f:31:45:91:0c:e0:d9:73:56:b2:
2a:5d:a8:15:61:24:c8:a6:f6:99:9d:51:f2:2d:dc:
0e:8a:ef:8f:ee:30:e7:52:6a:93:74:3d:4d:55:e9:
2b:67:2a:a0:86:2e:c0:2e:7f:38:6d:4b:e5:55:29:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:29:5A:C0:A7:87:79:BB:17:19:D3:DE:D7:11:90:57:EA:69:03
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/kHopWsCnh3m7FxnT3tcRkFfqaQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:70:aa:52:ca:dc:89:00:67:4b:b0:3f:e8:e8:3b:35:40:73:
19:f9:1e:4d:c0:cb:4a:c7:fd:6b:54:a7:b3:cb:5c:36:e9:7f:
4c:95:59:4e:62:93:14:34:38:49:be:9d:da:37:d3:b4:b0:76:
53:14:12:44:75:1e:b9:7d:fb:21:43:d2:cd:7f:04:0f:86:3c:
94:12:48:33:29:13:59:3d:80:e8:0a:b5:19:e7:d9:b4:2a:94:
53:bb:62:2d:1d:1f:b7:15:3a:18:b2:82:5d:73:c9:b0:67:7e:
6d:73:c4:b8:61:9a:b8:96:2a:9d:ea:56:d4:3b:f5:56:64:1c:
2f:ec:92:e2:ac:5e:35:f8:9f:ea:ef:64:7f:78:95:19:13:1e:
66:68:39:d1:38:6e:70:a4:66:81:ed:2f:82:45:a9:00:2a:30:
bb:04:69:c5:87:f4:ae:1b:16:d7:6c:ff:0a:5d:70:96:77:17:
e8:95:57:50:ae:f7:8c:80:8f:a3:11:2b:02:a5:81:2a:f1:88:
66:38:6d:68:86:c4:bc:60:3d:f7:13:b4:c8:ed:db:f0:d7:c7:
eb:9d:cb:e0:9a:bf:c8:c4:65:27:9d:22:da:26:e6:cd:8d:41:
ff:5f:e3:9b:8d:00:c3:bf:18:a9:3c:e0:46:50:3d:59:99:bb:
d1:a4:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:11 2026 by rpki-client