Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hQX07SP7eh74fJ29yRaHRrbAuMs.roa
File: hQX07SP7eh74fJ29yRaHRrbAuMs.roa (raw, json)
Hash identifier: 6MG5dcUBQhwE6U7nf4nAalx6Ih5Ikrj4OD6B09NVDNM=
Subject key identifier: 85:05:F4:ED:23:FB:7A:1E:F8:7C:9D:BD:C9:16:87:46:B6:C0:B8:CB
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019C633AA2E5080591854E044A872AED5380
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hQX07SP7eh74fJ29yRaHRrbAuMs.roa
Signing time: Sun 15 Feb 2026 21:35:13 +0000
ROA not before: Sun 15 Feb 2026 21:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209537
IP address blocks: 45.67.18.0/24 maxlen: 32
185.207.176.0/24 maxlen: 32
185.240.216.0/24 maxlen: 32
2a06:82c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:63:3a:a2:e5:08:05:91:85:4e:04:4a:87:2a:ed:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 15 21:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8505f4ed23fb7a1ef87c9dbdc9168746b6c0b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:1f:da:c3:22:af:4c:56:01:20:a3:54:e8:
f2:0b:64:4e:3d:c3:1a:a3:b3:dc:2c:8c:3d:f2:d3:
38:e3:1c:01:67:5f:28:2b:d6:79:01:8a:16:20:5e:
7f:18:12:76:ee:e9:fb:2a:d6:ce:48:89:1e:67:25:
6a:88:7d:d0:7d:b0:2f:e2:cf:fa:f0:70:be:c3:7e:
22:c6:85:a5:67:2a:8f:9a:3c:94:67:7b:b7:7e:a7:
b1:35:9e:06:ef:fb:e6:59:72:8b:45:b9:e2:6c:d1:
e9:06:33:25:ea:ac:51:51:93:b6:5c:0f:8e:38:f9:
c7:90:b2:6d:cc:fd:cb:43:26:bd:c0:bd:d7:e9:29:
f7:87:13:7b:05:d9:90:4f:9c:ff:0c:88:c6:9c:26:
d8:df:61:8e:af:96:0e:c7:8a:cb:78:9c:90:67:00:
f6:f6:b5:47:f4:52:fc:46:28:21:4b:95:3f:e5:ec:
bd:28:d3:9f:17:88:de:13:f5:46:31:49:85:f4:1e:
ab:83:97:ad:de:e3:9c:cd:b3:96:da:11:60:35:84:
0f:3c:31:8d:97:2a:16:bb:9c:fc:c7:7b:85:ae:ea:
f9:35:24:c6:a4:4a:35:2c:3f:28:eb:f5:4c:10:92:
df:c6:12:9c:47:51:6d:7f:0b:fc:b4:07:11:19:77:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:05:F4:ED:23:FB:7A:1E:F8:7C:9D:BD:C9:16:87:46:B6:C0:B8:CB
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hQX07SP7eh74fJ29yRaHRrbAuMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.18.0/24
185.207.176.0/24
185.240.216.0/24
IPv6:
2a06:82c5::/48
Signature Algorithm: sha256WithRSAEncryption
46:db:82:37:74:b7:79:f5:c0:ce:dc:e3:0e:fe:eb:a3:89:f1:
10:15:31:ea:a1:13:24:c6:6c:07:26:a2:25:13:85:cb:fe:04:
fc:38:ce:e9:5d:2d:5a:8e:c3:9d:15:35:b7:26:a6:20:e2:3d:
31:67:33:17:4b:66:e5:51:9d:b8:4b:b2:f4:1c:37:7e:53:59:
32:e5:ca:3d:58:b4:fa:35:13:5c:74:1d:fc:25:0d:8a:ef:5a:
21:b8:30:f7:34:be:21:30:4d:d1:5f:fb:e3:a6:06:b2:d5:83:
5a:75:55:73:c5:0e:11:95:44:25:28:a2:e2:f8:4b:60:02:8f:
7c:18:ad:e2:54:13:8f:ff:89:f9:88:41:04:49:2f:ab:5e:55:
e2:f3:fb:98:fe:6b:56:63:e6:b7:29:bf:3b:22:52:b8:6d:8c:
74:04:de:de:5f:1c:be:de:23:ac:90:8f:50:32:70:30:04:18:
f2:0a:91:62:ce:69:ad:94:c9:9b:8a:e8:3f:08:f1:19:a1:66:
16:d2:21:0e:d0:fa:aa:ea:33:0b:e5:aa:cf:b7:22:5a:b0:32:
d0:25:13:42:b6:f7:9d:82:d0:ba:4f:41:c6:2e:6b:d2:1c:ae:
e8:10:a0:05:a8:c2:80:ae:84:1c:d1:6d:a2:b4:8f:66:46:da:
0b:fa:0b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:52 2026 by rpki-client