Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/hVE0-LBCE_tncgEsqz7BMTazayw.roa
File: hVE0-LBCE_tncgEsqz7BMTazayw.roa (raw, json)
Hash identifier: wVNCRt/H0Wqed1L+d4bjTNofNjKPKn3Yt16DdTXaykc=
Subject key identifier: 85:51:34:F8:B0:42:13:FB:67:72:01:2C:AB:3E:C1:31:36:B3:6B:2C
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C880765A1153152DA10C6A6314FEC7D3
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/hVE0-LBCE_tncgEsqz7BMTazayw.roa
Signing time: Tue 22 Sep 2026 09:44:17 +0000
ROA not before: Tue 22 Sep 2026 09:44:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132337
IP address blocks: 2a11:1100::/29 maxlen: 32
2a11:ea40::/29 maxlen: 32
2a12:7b00::/29 maxlen: 32
2a12:c780::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:80:76:5a:11:53:15:2d:a1:0c:6a:63:14:fe:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 09:44:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=855134f8b04213fb6772012cab3ec13136b36b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:28:e1:e9:57:84:f9:18:f2:df:9d:02:e1:
7e:91:ab:90:67:18:f1:1b:ec:59:b2:3b:f3:81:49:
a3:d0:3a:98:65:ff:8a:ac:ef:64:d7:fc:63:7e:47:
a4:91:5d:d1:3b:d7:5c:2f:e0:4a:2f:34:22:90:f6:
37:81:14:e1:23:60:77:3f:d9:6b:f3:12:05:13:77:
47:64:c9:11:07:c9:ed:b9:21:4a:d3:cc:4b:c8:13:
3d:54:ff:26:1a:95:2f:51:24:40:b1:3e:7f:2d:75:
ae:e2:26:ff:97:47:95:c9:49:9c:48:05:a2:5c:37:
4f:dd:04:35:8c:0c:8d:55:7e:85:32:74:f6:b0:e0:
8f:a9:47:61:4c:59:96:31:72:df:13:50:58:bc:3a:
0e:ab:fb:85:13:02:a5:40:ba:ad:e1:5c:a5:75:a2:
40:10:5b:a6:3a:94:d5:3d:9e:b0:66:39:9d:be:6b:
9d:3a:8c:45:33:fe:3e:a4:6f:df:ff:4b:cd:2b:f0:
a1:98:fa:de:e5:f9:74:46:b2:c5:8a:1e:27:3a:5b:
cc:d8:46:ff:f6:01:05:45:ca:75:e6:7e:76:7b:d9:
7e:a7:d7:19:79:1c:8e:37:fc:7f:93:8d:c7:28:7f:
29:18:48:1d:04:25:65:8e:3b:8d:40:d8:d7:db:08:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:34:F8:B0:42:13:FB:67:72:01:2C:AB:3E:C1:31:36:B3:6B:2C
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/hVE0-LBCE_tncgEsqz7BMTazayw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1100::/29
2a11:ea40::/29
2a12:7b00::/29
2a12:c780::/29
Signature Algorithm: sha256WithRSAEncryption
b1:5e:2c:ed:4b:3d:ee:66:04:d2:b1:90:d8:e8:9b:b0:ae:33:
a3:71:a9:f0:91:2f:7e:2e:11:88:7b:53:78:d8:cd:23:bd:59:
81:6f:e8:bc:c7:44:f7:28:53:ea:06:32:40:e0:9d:40:c0:2b:
f9:49:a6:88:00:aa:50:4a:e2:52:83:28:df:41:e6:cc:c6:7b:
5d:d9:cb:0c:e0:2a:15:f3:50:5d:58:aa:91:bc:95:d8:b1:5b:
06:4f:cc:ad:6d:4f:8c:db:e9:74:76:0f:f6:51:08:2e:8b:41:
ad:b7:01:bf:79:f0:f0:96:b5:73:d8:58:1d:8d:38:0a:0a:c0:
5b:6b:30:13:60:5f:6e:42:1b:18:a2:6d:53:5b:3c:d0:b6:f9:
f4:6b:a0:33:0b:ab:67:ee:07:1a:55:bf:c6:61:33:12:71:b1:
2f:11:4e:b5:10:b6:77:23:65:9e:13:0a:68:ae:bc:42:7d:0e:
fc:42:9a:b8:03:89:f1:42:5d:7e:8e:87:7f:8e:a5:28:73:cf:
8c:dd:b5:4c:07:e5:a8:fa:f6:b6:9f:89:f6:77:8c:f0:61:6e:
44:cd:ba:5f:92:63:7a:c9:d9:ff:98:06:c4:ab:99:e1:99:f4:
db:fe:68:39:a5:59:8c:1d:c1:0e:07:54:82:e1:fb:54:9e:90:
7f:b0:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:27:36 2026 by rpki-client