Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/hWXO8_2KJhAsuSjK53w4WoXZ5ho.roa
File: hWXO8_2KJhAsuSjK53w4WoXZ5ho.roa (raw, json)
Hash identifier: BtDfipiMIpPGVjZXVualjLnDPbN3Q7CaWpDWgdXMT9s=
Subject key identifier: 85:65:CE:F3:FD:8A:26:10:2C:B9:28:CA:E7:7C:38:5A:85:D9:E6:1A
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01A09A4941DBF4D05BAA0DDD9241D19CFF7E
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/hWXO8_2KJhAsuSjK53w4WoXZ5ho.roa
Signing time: Sun 13 Sep 2026 10:21:27 +0000
ROA not before: Sun 13 Sep 2026 10:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29386
IP address blocks: 5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
194.58.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:49:41:db:f4:d0:5b:aa:0d:dd:92:41:d1:9c:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Sep 13 10:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8565cef3fd8a26102cb928cae77c385a85d9e61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:ec:eb:2e:e7:6a:b4:ed:4f:33:6a:d8:2f:
f9:90:3a:76:d8:a3:97:14:80:a2:06:dc:73:1d:88:
a3:6d:70:69:4f:8d:ef:1a:51:30:b9:2b:fe:f0:ec:
33:cb:43:04:16:f5:2b:85:b3:36:81:0f:fb:3c:41:
5c:11:56:58:5b:2d:ee:c8:ab:57:e7:d2:12:48:af:
fa:04:31:84:a0:ed:1b:3e:a1:b5:02:1d:93:e5:c7:
b0:61:c1:d9:e4:43:9b:8e:f3:4d:10:65:5e:35:98:
ad:ed:9d:f0:a7:57:34:45:df:d2:1f:14:20:7a:05:
ec:c8:23:f4:e4:71:8e:51:3b:4e:bf:d9:47:51:52:
ee:8a:3c:03:ae:ca:7d:0a:24:45:1d:59:9e:c3:ac:
3d:33:b3:bb:c9:48:6e:59:5c:6f:d4:4d:f4:d0:03:
85:f4:dc:ec:48:43:17:3d:01:a0:35:be:5d:64:d1:
aa:b5:ce:2e:5f:a0:bd:56:5d:1c:bd:12:02:14:9e:
aa:12:50:6b:54:36:f5:63:76:23:dc:dd:03:44:ce:
f2:46:06:10:37:61:9e:52:3a:1e:26:d5:30:62:fc:
29:35:4d:72:a2:50:e5:9a:e1:65:af:80:7f:13:bd:
13:c2:2c:07:46:7f:3b:49:69:21:e2:fb:ec:6a:e9:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:CE:F3:FD:8A:26:10:2C:B9:28:CA:E7:7C:38:5A:85:D9:E6:1A
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/hWXO8_2KJhAsuSjK53w4WoXZ5ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.128.0/18
5.155.128.0-5.155.223.255
178.253.99.0-178.253.101.255
194.58.0.0/21
Signature Algorithm: sha256WithRSAEncryption
20:fb:42:98:02:a1:c8:f0:52:52:17:cb:09:55:06:0b:58:cf:
ea:cc:46:f6:67:cb:b7:43:8a:d3:9d:d8:36:b0:2e:3e:9e:28:
39:a5:09:02:e6:39:a3:21:57:aa:c0:34:57:db:8b:22:fa:29:
a0:be:80:8c:2a:35:e5:db:c3:f0:09:d0:0a:e9:53:06:0f:55:
bb:e0:6a:e4:a2:8a:c7:fd:30:1e:f4:c8:73:eb:2e:4c:05:c6:
36:e6:1d:e5:1a:1d:f7:5e:99:c8:01:e3:f4:45:5a:04:73:05:
24:ee:bb:bc:51:68:f6:15:15:9c:e4:d9:b2:89:e1:2d:33:f6:
22:02:42:b9:11:0d:b5:bc:d7:48:7e:ba:79:f8:b3:7f:b7:cc:
00:c2:84:3f:a2:24:b6:6f:02:58:10:5a:2a:6e:d8:21:0b:4b:
20:31:83:2a:b7:97:bf:95:57:1b:90:46:ee:c7:13:a9:83:2b:
e0:d6:26:54:bc:ab:b6:28:06:ec:2f:9f:86:06:00:47:7f:c6:
87:1f:dd:c4:18:ca:73:eb:c5:f5:0b:f5:08:4e:a4:e1:46:be:
04:ca:1f:45:37:7a:f4:4a:9e:ce:59:91:8f:26:d1:78:8a:0a:
8a:26:e3:8f:76:f4:42:43:f6:fa:c5:2e:7b:b3:7e:0f:10:3f:
fb:04:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:32:20 2026 by rpki-client