Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/hoZTO9mv6MsZdKUR4WewOWkJHu0.roa
File: hoZTO9mv6MsZdKUR4WewOWkJHu0.roa (raw, json)
Hash identifier: TciugumYbNba/50JkI/u3vPvv8vRYLWuyNSqNmxgJH8=
Subject key identifier: 86:86:53:3B:D9:AF:E8:CB:19:74:A5:11:E1:67:B0:39:69:09:1E:ED
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A076FA74B0C38A0F76A850275278DA2DFC
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/hoZTO9mv6MsZdKUR4WewOWkJHu0.roa
Signing time: Sun 06 Sep 2026 13:48:40 +0000
ROA not before: Sun 06 Sep 2026 13:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 5.252.156.0/24 maxlen: 24
79.98.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:fa:74:b0:c3:8a:0f:76:a8:50:27:52:78:da:2d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Sep 6 13:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8686533bd9afe8cb1974a511e167b03969091eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:41:46:5b:d9:13:7b:09:3f:a6:9a:d3:9a:
80:22:81:e2:1c:72:e2:e0:58:23:8d:a6:db:d7:32:
52:86:06:49:2b:ec:c6:56:2b:c6:d0:e3:65:1f:1c:
fe:10:1d:7c:48:1c:69:85:0e:68:e4:f0:5a:7f:a8:
9a:e5:26:e7:cc:2f:3d:a5:0c:14:5c:2f:db:29:91:
ba:e8:71:d8:c9:de:5a:88:da:36:93:09:bd:d8:b2:
5e:ff:ef:45:05:09:68:60:d4:35:fe:00:28:36:07:
03:a4:4d:9c:c6:1c:51:5a:2d:b3:5e:b9:62:39:b8:
78:1d:88:62:1e:0a:43:46:49:0f:f4:ff:b0:f5:61:
c3:cc:a6:13:11:48:d5:33:89:e3:19:dd:b0:47:a1:
0a:ad:98:24:dc:a5:05:d6:b4:ed:61:5f:6c:d5:97:
95:f8:01:5f:e8:e8:97:58:e7:83:90:9d:6d:bb:a8:
af:60:1b:7c:87:05:5c:90:96:67:5e:90:74:ec:3c:
05:16:79:b6:cd:86:45:da:52:92:4f:f4:ff:9d:70:
60:f7:a6:31:79:8d:c6:31:46:b1:b6:06:c1:ca:56:
e3:99:7d:2e:30:62:b8:a4:e4:27:93:ff:53:97:13:
b7:f7:7a:4b:54:29:e5:7c:85:97:ec:c0:02:b1:6d:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:53:3B:D9:AF:E8:CB:19:74:A5:11:E1:67:B0:39:69:09:1E:ED
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/hoZTO9mv6MsZdKUR4WewOWkJHu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.156.0/24
79.98.39.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6c:a1:ad:0f:c9:7a:58:ed:13:a6:5e:e5:d2:3f:67:f1:a3:
9e:96:89:4c:8d:3f:97:3f:e8:62:b2:f7:f5:43:08:67:44:d9:
a6:87:b3:06:4b:67:72:c2:03:e5:39:b2:c6:4b:2b:51:fb:03:
77:d9:bd:33:d6:50:d9:4e:0e:11:52:87:77:39:cc:dc:f8:3b:
c1:51:60:36:e7:57:62:64:ba:0a:29:b2:59:fa:f6:7a:9d:c5:
7c:c4:4c:cc:bd:41:af:cf:56:08:46:78:5e:53:ea:d6:b7:37:
3e:de:f0:a2:83:fd:35:62:73:49:f2:3f:00:d2:b9:bf:68:dd:
0a:d3:3f:1e:0c:24:25:53:d9:bf:f0:e7:e5:4b:15:3e:27:e6:
a6:9b:d5:60:22:4e:e4:9f:6e:69:22:e8:da:25:d7:30:cf:e6:
70:e9:1f:51:af:41:b1:5e:9d:6b:f6:f6:3a:e7:26:81:fb:33:
8e:7a:83:ae:c8:ea:55:fd:d6:42:07:a4:b3:e8:65:76:5a:7c:
3e:a4:d8:e6:da:52:52:0f:51:76:77:d7:c8:ca:59:13:7f:a5:
85:35:6e:21:ac:cf:1a:e2:c8:42:3c:59:8a:b9:c2:77:2d:03:
59:64:87:05:71:a6:97:7c:7c:60:51:b4:56:1d:82:10:ed:5a:
85:ce:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:12:17 2026 by rpki-client