Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Hca9wquhbNlgoDaRA84VW6fSWUg.roa
File: Hca9wquhbNlgoDaRA84VW6fSWUg.roa (raw, json)
Hash identifier: obk8EndTliMtL1VsKPcjv61L/J14z/oq0r3YxDPk57E=
Subject key identifier: 1D:C6:BD:C2:AB:A1:6C:D9:60:A0:36:91:03:CE:15:5B:A7:D2:59:48
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B30ED36A8924A96B3699D2BFAAE49BD5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Hca9wquhbNlgoDaRA84VW6fSWUg.roa
Signing time: Fri 18 Sep 2026 05:48:08 +0000
ROA not before: Fri 18 Sep 2026 05:48:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153347
IP address blocks: 87.82.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:0e:d3:6a:89:24:a9:6b:36:99:d2:bf:aa:e4:9b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 05:48:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dc6bdc2aba16cd960a0369103ce155ba7d25948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:7b:62:aa:b0:0a:4b:10:9c:a5:0f:01:fe:
a0:85:93:68:a9:0d:95:9e:40:ed:3f:a0:62:e0:5d:
13:8e:ac:59:da:02:70:00:29:81:78:d0:e8:43:c4:
36:6f:ab:1d:d5:64:26:4a:4f:5a:80:97:60:2b:36:
bd:2c:02:eb:a6:35:9e:4c:d2:f8:a7:f1:5c:47:73:
72:3e:9a:d1:f2:e6:61:1b:ea:b4:b0:74:1d:b2:e6:
d8:72:39:8c:de:90:0c:71:50:93:94:d6:82:d3:83:
96:01:30:58:fc:5e:5a:29:40:7f:ce:9d:35:0c:d6:
51:d1:9e:a0:f2:d3:83:31:ad:0a:16:10:6f:ac:3c:
e6:00:6a:03:7a:b5:d0:f4:51:06:e0:7a:ce:1e:0d:
60:04:ba:30:58:bc:2a:c8:18:d0:63:be:bc:73:7f:
16:84:0c:a4:a1:05:fb:39:8d:4b:0c:34:2f:bc:5c:
31:ba:ba:04:ee:1e:d9:41:2a:2b:d6:4e:b2:b6:84:
d9:eb:c5:52:d2:d2:23:fc:b4:2d:bd:14:6d:18:99:
d1:29:62:bc:e4:0a:45:cf:ac:b3:2a:fb:25:dc:99:
22:1d:4b:3f:bf:9b:be:06:f6:2e:87:b1:a9:e9:c3:
b9:88:97:c0:be:2a:e2:c4:a1:d5:68:e2:ee:e1:fb:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C6:BD:C2:AB:A1:6C:D9:60:A0:36:91:03:CE:15:5B:A7:D2:59:48
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Hca9wquhbNlgoDaRA84VW6fSWUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9a:58:99:6b:a6:1f:19:8b:bc:f7:c4:74:7f:59:f6:99:33:
2f:6d:c8:f3:c0:2a:60:e1:01:07:29:04:b9:9a:5d:93:4e:be:
fd:dd:cc:e3:f6:bc:f4:74:39:48:4a:da:3e:b2:17:00:8b:c8:
78:45:9b:89:5c:30:46:7b:45:68:cd:c9:5e:b4:fd:5f:62:86:
f2:4e:ec:51:87:7a:fb:1c:c4:41:24:50:7d:fb:d1:10:12:39:
c6:10:7b:12:70:27:2a:51:4c:8d:19:f1:fb:21:8b:1c:a8:c1:
69:6b:7f:e8:8d:54:89:a4:37:60:ba:30:8e:1b:1f:be:0a:0b:
c1:ea:39:b2:a4:1f:41:20:e4:68:6b:90:09:cf:5b:05:fc:1e:
8e:32:02:8b:32:27:5f:ae:7e:98:21:2f:13:1d:53:4b:9b:46:
54:83:69:d9:47:ea:fa:cd:33:0c:d8:68:67:38:d0:d3:45:7b:
df:ee:3d:ce:7d:44:31:5d:05:9c:b2:90:f0:9e:3c:d8:a2:de:
43:35:35:aa:9e:a8:9e:2f:81:be:ee:11:54:10:49:e3:27:a0:
2b:d1:98:c3:fd:0f:48:3b:95:48:cf:3f:b1:40:65:0e:a5:6f:
ec:99:e7:6b:2a:fb:ee:ca:55:93:50:fd:fb:04:ce:12:e3:cb:
62:37:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:55 2026 by rpki-client