Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/huBq3kw5bYGAXM6SwBHhdtrpnMg.roa
File: huBq3kw5bYGAXM6SwBHhdtrpnMg.roa (raw, json)
Hash identifier: 28JrvoF8mrFJs/+jg0TiRdcnBJBHzsFBj6k1ocqL4ws=
Subject key identifier: 86:E0:6A:DE:4C:39:6D:81:80:5C:CE:92:C0:11:E1:76:DA:E9:9C:C8
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01A19AC0721D700B4E4F1529565DB5FF6C0F
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/huBq3kw5bYGAXM6SwBHhdtrpnMg.roa
Signing time: Mon 02 Nov 2026 05:34:25 +0000
ROA not before: Mon 02 Nov 2026 05:34:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208427
IP address blocks: 185.231.244.0/24 maxlen: 24
185.231.245.0/24 maxlen: 24
185.231.246.0/23 maxlen: 23
194.147.114.0/24 maxlen: 24
2a0c:9300::/48 maxlen: 48
2a0c:9301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:c0:72:1d:70:0b:4e:4f:15:29:56:5d:b5:ff:6c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Nov 2 05:34:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e06ade4c396d81805cce92c011e176dae99cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:71:7a:51:b1:af:2d:9d:ce:b5:3c:7f:68:
e4:53:4a:01:66:da:a6:d4:e3:47:e3:fb:37:45:76:
2e:a9:6e:9a:fa:09:f5:bf:a8:e4:9c:dd:60:b6:c5:
60:58:a0:71:6a:62:3c:9b:32:6c:bb:5d:70:e9:18:
86:4e:fa:d2:da:ee:45:29:54:ec:57:ac:1e:0f:49:
52:8d:9c:d3:09:22:a4:63:72:4c:14:69:72:b2:02:
ed:10:ae:17:8d:7f:49:71:1a:e6:b9:f4:a2:39:fd:
b6:c9:8c:c4:43:3b:f3:70:c1:2a:ff:c0:9b:af:06:
16:b8:de:e8:1d:7d:c5:59:32:fe:f3:5f:19:92:b7:
af:e9:ee:4a:47:cf:85:be:cd:b2:1b:45:69:fa:ac:
88:71:ce:b2:1c:dc:5d:83:ad:58:cb:85:c3:1a:dd:
05:47:bd:b7:ba:f8:51:bd:b3:d3:53:ca:0d:9d:6e:
c0:76:02:d9:2b:4e:d1:72:f3:7f:3c:1a:c6:22:86:
81:16:a7:a4:94:2f:28:69:a4:b9:4f:27:2c:ca:fd:
dc:56:52:e7:69:8d:62:b6:31:68:7b:cd:f5:cd:34:
ff:78:a1:4d:81:ff:92:af:a8:3c:f5:9d:49:57:82:
67:bd:62:9a:0f:ed:87:d0:d1:d0:41:92:8c:d4:f3:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:6A:DE:4C:39:6D:81:80:5C:CE:92:C0:11:E1:76:DA:E9:9C:C8
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/huBq3kw5bYGAXM6SwBHhdtrpnMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/24
IPv6:
2a0c:9300::/48
2a0c:9301::/48
Signature Algorithm: sha256WithRSAEncryption
8b:11:85:a2:b1:d4:14:c6:8f:78:d5:12:b8:aa:1a:03:c5:39:
bf:46:34:47:b7:cd:29:9b:7f:e9:12:41:1a:fb:e0:10:ca:d2:
bc:fd:91:42:88:1c:67:1f:e4:f3:d5:ae:0a:16:30:a1:59:1e:
7c:f3:11:3f:c3:e2:63:46:12:66:6f:92:80:12:4b:7b:93:f2:
53:79:82:47:64:30:e2:25:1d:17:34:d8:c1:04:4f:10:6f:b9:
0b:56:3e:a4:c6:e8:69:dc:c8:b6:83:b6:21:b0:90:bc:f9:3f:
09:1c:d5:47:3b:93:38:24:20:12:b2:2a:68:04:7e:6c:d9:12:
49:b7:0b:17:10:1d:72:96:2f:ec:0e:ea:99:31:93:69:c9:ce:
88:30:81:0c:19:4a:6c:75:d3:12:c3:b9:e6:6c:6b:5a:5f:85:
38:86:78:48:fc:a7:be:0b:dd:a0:13:1d:2a:08:e1:ac:0e:b0:
5c:bc:dd:c9:ee:e1:5b:54:15:52:06:57:eb:52:8e:2c:e3:a1:
fe:47:35:03:46:11:10:44:fd:49:b1:23:c5:75:9d:50:55:9a:
32:f2:b6:63:e5:d5:33:db:f1:3f:93:91:db:ed:20:b7:a1:e3:
39:d8:72:9a:4c:2b:e0:d4:9d:5b:c8:ca:41:48:ad:fc:9c:a9:
2c:bc:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:59 2026 by rpki-client