Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/9b55b1-57fb-45c0-9328-d48cb96e29f2/1/hQLMxYO5YdtmQVobfI5WjLTCn8o.roa
File: hQLMxYO5YdtmQVobfI5WjLTCn8o.roa (raw, json)
Hash identifier: m/W7L4Rot02X8hm27bJevoWvvPCaeF98ncPDzKuHbeU=
Subject key identifier: 85:02:CC:C5:83:B9:61:DB:66:41:5A:1B:7C:8E:56:8C:B4:C2:9F:CA
Certificate issuer: /CN=e826c04259b4a315cf4387a9cb63c23b421499f3
Certificate serial: 01A07603441B725D3B5CB48547A5A9215C1A
Authority key identifier: E8:26:C0:42:59:B4:A3:15:CF:43:87:A9:CB:63:C2:3B:42:14:99:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CbAQlm0oxXPQ4epy2PCO0IUmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b55b1-57fb-45c0-9328-d48cb96e29f2/1/hQLMxYO5YdtmQVobfI5WjLTCn8o.roa
Signing time: Sun 06 Sep 2026 09:18:40 +0000
ROA not before: Sun 06 Sep 2026 09:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218845
IP address blocks: 2a05:e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b55b1-57fb-45c0-9328-d48cb96e29f2/1/6CbAQlm0oxXPQ4epy2PCO0IUmfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b55b1-57fb-45c0-9328-d48cb96e29f2/1/6CbAQlm0oxXPQ4epy2PCO0IUmfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CbAQlm0oxXPQ4epy2PCO0IUmfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:03:44:1b:72:5d:3b:5c:b4:85:47:a5:a9:21:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e826c04259b4a315cf4387a9cb63c23b421499f3
Validity
Not Before: Sep 6 09:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8502ccc583b961db66415a1b7c8e568cb4c29fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:9a:fb:68:e2:8a:bb:29:fe:7d:82:71:4a:
57:65:4c:6e:e3:07:60:12:41:b0:5a:a1:af:8b:86:
5e:7b:89:c1:19:58:76:67:f9:d5:2e:36:ef:73:41:
1e:c2:30:e4:56:b3:12:c6:ec:f1:d6:42:59:5c:81:
75:e8:d4:95:ed:74:8f:83:ab:dd:dd:fb:7c:35:d7:
b9:7d:a4:6b:f6:c6:64:12:5b:15:67:fb:53:49:95:
ae:46:96:62:42:4f:78:1e:91:b2:8d:51:4e:52:64:
85:cb:17:23:4a:6e:b4:d3:8d:d3:2c:d3:aa:0e:06:
d6:c0:35:72:c2:ea:10:bf:ed:16:d2:a8:8d:ea:e8:
29:75:1d:92:43:e8:be:c5:d0:85:ef:00:c2:0f:f5:
85:c3:30:8f:f5:ed:f2:ec:8a:6e:51:32:04:95:be:
12:44:2c:9c:89:87:08:85:ed:53:af:53:d8:f3:8a:
ba:2c:2b:f5:85:e2:86:5d:6b:b7:09:62:3e:97:48:
9d:37:81:25:42:96:52:34:57:73:93:16:4c:2e:ff:
e1:70:d0:ff:8d:ae:00:3e:a9:0b:a7:e4:fa:50:89:
74:96:f3:4e:a0:f9:d1:7e:b0:d6:66:f8:b7:a6:e5:
e4:82:f5:a6:66:f4:dd:60:c5:b8:2b:8f:5f:1e:d0:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:CC:C5:83:B9:61:DB:66:41:5A:1B:7C:8E:56:8C:B4:C2:9F:CA
X509v3 Authority Key Identifier:
keyid:E8:26:C0:42:59:B4:A3:15:CF:43:87:A9:CB:63:C2:3B:42:14:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CbAQlm0oxXPQ4epy2PCO0IUmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b55b1-57fb-45c0-9328-d48cb96e29f2/1/hQLMxYO5YdtmQVobfI5WjLTCn8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b55b1-57fb-45c0-9328-d48cb96e29f2/1/6CbAQlm0oxXPQ4epy2PCO0IUmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e00::/32
Signature Algorithm: sha256WithRSAEncryption
84:ea:72:6b:ff:6d:59:4b:e6:0b:93:69:6f:7e:03:01:bf:cb:
eb:03:ed:7a:71:68:d2:e3:d7:f9:be:d5:ca:08:00:ac:e8:c1:
2e:0a:b6:ed:a2:2b:c2:86:6d:f5:80:59:5d:3f:9b:7f:7e:d3:
7a:45:39:f8:3f:f4:d5:b9:e9:3e:b3:88:65:35:fa:c6:41:5a:
b9:fd:ec:f1:5c:27:06:c8:43:da:de:62:78:ce:a9:07:36:35:
09:49:4d:aa:45:94:c6:d6:ff:0d:d3:b6:14:14:97:be:c4:ed:
de:db:97:57:72:03:87:ce:a5:e9:6a:d5:fa:84:da:1c:ba:41:
18:19:2a:7e:2c:ea:38:7e:84:7b:9c:81:f1:8b:b6:ec:c6:78:
0e:18:a9:fa:8b:d2:92:5c:00:a0:8f:4c:6a:b1:ba:b8:8d:3b:
64:5b:1b:19:28:bb:38:47:0d:1b:8b:7a:39:17:03:5d:2f:43:
87:48:a7:d5:a5:d0:b2:60:4e:66:a3:30:d6:a1:f7:72:9a:43:
aa:f1:b8:0e:03:a7:40:52:55:87:7d:d4:3d:06:f8:e7:bc:ce:
f3:65:cd:bd:66:19:aa:48:f4:bb:f6:6f:e4:03:d0:54:0b:f6:
81:8c:d3:5f:9c:79:43:35:05:bc:db:f3:63:dd:b8:41:0e:b3:
0f:a3:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:45:49 2026 by rpki-client