Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hTWKLEktwtOpXgmdF03QD5n3F9g.roa
File: hTWKLEktwtOpXgmdF03QD5n3F9g.roa (raw, json)
Hash identifier: fdzg2UxpeDWhNm3nlqh+rYp0UKRJYuY8AG9dkkAwSlc=
Subject key identifier: 85:35:8A:2C:49:2D:C2:D3:A9:5E:09:9D:17:4D:D0:0F:99:F7:17:D8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A1DE4F2ED2D8E2A873264E072130021BAC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hTWKLEktwtOpXgmdF03QD5n3F9g.roa
Signing time: Sun 15 Nov 2026 08:24:53 +0000
ROA not before: Sun 15 Nov 2026 08:24:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 193.233.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:4f:2e:d2:d8:e2:a8:73:26:4e:07:21:30:02:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 15 08:24:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85358a2c492dc2d3a95e099d174dd00f99f717d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:25:93:e8:08:69:da:8f:da:d2:58:54:50:
d9:a4:af:ff:57:9d:7a:c9:84:89:23:ca:0b:24:95:
02:e4:d9:44:51:27:01:fb:0d:7c:12:06:73:f4:c9:
36:88:1c:08:b2:cf:5c:01:02:5e:3c:c3:e9:7f:a8:
92:1d:ce:06:87:1c:3b:40:15:da:7f:46:73:37:c7:
3b:e7:92:a5:c9:43:45:5a:81:a6:aa:2e:87:62:53:
48:30:cf:aa:7c:05:e8:d7:03:0d:f6:ec:66:58:9f:
03:7f:7e:bc:5a:ba:68:c9:28:24:21:19:c3:f2:db:
84:8c:2d:dc:ad:75:6c:c5:a8:7b:68:6a:fa:cc:f6:
25:9a:9c:ec:49:95:07:65:80:bf:ab:86:98:7f:a8:
ea:35:ab:75:44:69:6e:42:74:42:3b:78:1b:ca:b1:
3f:03:bb:f6:7f:1f:89:40:ee:44:6f:86:28:26:55:
d1:6b:db:b8:42:ac:73:d9:01:7a:5a:28:16:cc:c6:
66:b8:19:67:a5:7b:7f:d5:f0:50:c8:da:fd:27:e5:
1b:ad:1e:09:b1:d2:fb:a3:9e:9a:7c:fe:bb:4f:c4:
ca:28:ba:21:94:f4:b3:3e:1e:67:ba:d1:82:c9:37:
ed:9f:df:25:68:be:28:d8:2b:34:e1:2f:e1:a7:66:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:8A:2C:49:2D:C2:D3:A9:5E:09:9D:17:4D:D0:0F:99:F7:17:D8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hTWKLEktwtOpXgmdF03QD5n3F9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a8:17:17:c4:da:0d:81:21:59:52:c5:76:05:9f:83:ff:46:
e9:bb:74:67:de:ae:7f:a2:09:e8:64:c1:b9:31:1e:45:2e:d6:
48:65:a1:02:29:80:b1:89:9e:eb:0f:d3:ce:63:ce:87:33:04:
ac:49:11:84:57:d8:7a:89:f7:15:5f:c8:ea:8f:18:e1:29:79:
80:ad:c6:08:79:a8:7e:de:68:4a:1b:88:3f:a2:67:7c:78:cb:
86:a2:8d:83:b5:11:4b:b6:09:9f:be:0b:39:76:fb:fd:eb:10:
74:f1:15:42:54:66:a2:f5:25:6c:eb:5e:a0:c8:4c:56:22:05:
e9:1f:f0:ca:e2:17:f2:05:e2:32:47:fb:e8:71:d6:44:ae:11:
2d:6f:a9:5a:90:db:9e:86:72:12:ad:c0:5b:bc:1a:09:d5:6b:
4a:7e:fd:5d:32:24:18:7d:c6:d9:01:27:0d:3c:bb:7e:6a:05:
5f:e3:66:bb:90:bd:ef:38:f7:85:3e:a5:6b:e5:8f:75:eb:da:
7d:6d:18:73:8c:4d:49:2a:93:9f:0b:e1:db:8c:4b:d7:65:21:
09:4c:46:38:5f:de:33:63:6d:15:7f:e7:de:b5:76:3d:6b:e6:
a0:3f:35:05:e7:ac:d1:4f:04:5a:a9:dc:4a:1e:79:6b:ca:15:
56:b2:b0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:38 2026 by rpki-client