Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hodN2h-rSt7j5iY6gbXQ4RunSYA.roa
File: hodN2h-rSt7j5iY6gbXQ4RunSYA.roa (raw, json)
Hash identifier: 5LXwh+woXOIjbpdqDWuyn5CtWCHSxD+2AP9ehhUcyfs=
Subject key identifier: 86:87:4D:DA:1F:AB:4A:DE:E3:E6:26:3A:81:B5:D0:E1:1B:A7:49:80
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C90B58697F4E0B83C254C37D2EBA377B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hodN2h-rSt7j5iY6gbXQ4RunSYA.roa
Signing time: Tue 22 Sep 2026 12:15:59 +0000
ROA not before: Tue 22 Sep 2026 12:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48529
IP address blocks: 195.40.153.0/24 maxlen: 24
195.40.154.0/24 maxlen: 24
195.40.155.0/24 maxlen: 24
195.172.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:0b:58:69:7f:4e:0b:83:c2:54:c3:7d:2e:ba:37:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 12:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86874dda1fab4adee3e6263a81b5d0e11ba74980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:a7:71:aa:20:8b:a3:42:67:b4:8b:e3:f1:
ce:87:f6:a9:07:88:4c:3e:a3:12:eb:2c:60:03:fe:
eb:55:04:4c:e3:92:91:cd:1b:75:9c:9e:cc:50:2b:
7d:87:fc:fa:d6:b3:14:97:82:65:c9:5b:08:13:32:
00:e8:01:37:dd:ea:b6:2b:a5:e2:aa:fe:d3:92:1a:
34:bf:6d:12:32:6c:b8:c6:bf:d0:8f:e8:b9:ce:de:
75:91:c2:8e:0f:a1:a0:df:f4:76:83:b0:6a:ee:1c:
84:e0:ed:d7:55:a9:a4:5d:d6:84:09:de:0d:c7:c8:
f3:8e:d1:6c:32:08:98:0f:77:5c:df:1d:7e:f5:ef:
c8:37:09:4b:2a:56:57:bc:77:1c:62:dc:f4:7b:51:
b1:1c:fb:08:1e:b4:64:da:a9:4b:e8:88:62:9d:05:
f6:35:e4:12:ed:95:e0:f5:22:58:b1:51:a9:c5:84:
da:79:f9:f7:e6:f1:27:f0:11:92:3d:ec:72:81:0f:
ae:9e:a3:fb:d7:6d:a6:9f:df:a8:03:66:0c:ca:d7:
b0:33:3a:d1:22:9c:c7:cb:7b:a5:db:b9:b2:5b:23:
f3:26:de:4b:ab:93:19:26:d9:8b:aa:37:18:9d:d3:
f2:81:c0:a9:5c:c2:e2:8f:5a:3a:de:6d:a6:b8:4f:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:4D:DA:1F:AB:4A:DE:E3:E6:26:3A:81:B5:D0:E1:1B:A7:49:80
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hodN2h-rSt7j5iY6gbXQ4RunSYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.153.0-195.40.155.255
195.172.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:e9:3f:2c:23:30:54:fa:d9:28:f5:13:34:58:85:1a:5d:ca:
08:4b:05:f6:f1:10:8e:8a:f3:9f:63:7b:f2:7d:b3:9e:a7:f3:
fa:a5:31:ae:5e:5a:01:63:ee:3c:b1:ab:05:96:51:e8:55:e8:
22:2a:d7:b4:3e:57:70:7d:a0:fb:f6:36:56:97:98:fd:36:c6:
5a:19:0d:df:4f:35:8c:64:a3:f1:eb:02:ab:16:19:5b:ff:6e:
a8:d8:0b:28:59:43:f3:0f:8e:8c:3c:d9:54:11:6a:2c:d2:47:
01:6f:d9:8c:53:f1:a9:f8:85:ff:db:89:39:19:87:68:4a:0a:
1c:ea:d9:9b:e0:ca:10:c9:6c:12:8f:f1:56:db:3f:e4:cf:a5:
50:10:95:ca:ad:3d:a2:34:12:1d:22:7d:30:50:da:92:50:c4:
76:78:3f:1b:45:b1:0e:f1:08:f8:90:81:62:c4:b3:58:c2:f6:
fb:be:87:40:41:6a:5e:8e:54:ba:56:bc:66:8a:14:f7:06:21:
42:d1:2f:45:0c:8c:1d:a1:98:13:42:f4:4e:a3:2e:c6:fc:bd:
37:6e:a0:f3:ee:81:8b:49:cb:4f:ae:22:4e:c9:b8:11:01:09:
1e:b6:f7:1c:5f:cd:e5:90:3b:46:12:95:f4:35:3c:c0:79:7c:
83:c5:fb:83
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaDJC1hpf04Lg8JUw30uujd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTIyMTIxNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njg3NGRkYTFmYWI0YWRlZTNlNjI2M2E4MWI1ZDBlMTFiYTc0OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cancaogi6NCZ7SL4/HOh/apB4hM
PqMS6yxgA/7rVQRM45KRzRt1nJ7MUCt9h/z61rMUl4JlyVsIEzIA6AE33eq2K6Xi
qv7Tkho0v20SMmy4xr/Qj+i5zt51kcKOD6Gg3/R2g7Bq7hyE4O3XVamkXdaECd4N
x8jzjtFsMgiYD3dc3x1+9e/INwlLKlZXvHccYtz0e1GxHPsIHrRk2qlL6IhinQX2
NeQS7ZXg9SJYsVGpxYTaefn35vEn8BGSPexygQ+unqP7122mn9+oA2YMytewMzrR
IpzHy3ul27myWyPzJt5Lq5MZJtmLqjcYndPygcCpXMLij1o63m2muE8RuwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIaHTdofq0re4+YmOoG10OEbp0mAMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvaG9kTjJoLXJTdDdqNWlZNmdiWFE0UnVuU1lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADDKJkD
BALDKJgDBADDrHgwDQYJKoZIhvcNAQELBQADggEBAMnpPywjMFT62Sj1EzRYhRpd
yghLBfbxEI6K859je/J9s56n8/qlMa5eWgFj7jyxqwWWUehV6CIq17Q+V3B9oPv2
NlaXmP02xloZDd9PNYxko/HrAqsWGVv/bqjYCyhZQ/MPjow82VQRaizSRwFv2YxT
8an4hf/biTkZh2hKChzq2ZvgyhDJbBKP8VbbP+TPpVAQlcqtPaI0Eh0ifTBQ2pJQ
xHZ4PxtFsQ7xCPiQgWLEs1jC9vu+h0BBal6OVLpWvGaKFPcGIULRL0UMjB2hmBNC
9E6jLsb8vTduoPPugYtJy0+uIk7JuBEBCR629xxfzeWQO0YSlfQ1PMB5fIPF+4M=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:17:00 2026 by rpki-client