Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hvF6pyZUhsz4yeWjYLBvmQmj8VY.roa
File: hvF6pyZUhsz4yeWjYLBvmQmj8VY.roa (raw, json)
Hash identifier: EF1/iweyMt+lPZ8gnME7soPIicPqPaEWufYcddBsydA=
Subject key identifier: 86:F1:7A:A7:26:54:86:CC:F8:C9:E5:A3:60:B0:6F:99:09:A3:F1:56
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1BFA91C9DBC76A88C816B0FC19A676687
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hvF6pyZUhsz4yeWjYLBvmQmj8VY.roa
Signing time: Mon 09 Nov 2026 09:34:53 +0000
ROA not before: Mon 09 Nov 2026 09:34:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 82.152.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:a9:1c:9d:bc:76:a8:8c:81:6b:0f:c1:9a:67:66:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Nov 9 09:34:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86f17aa7265486ccf8c9e5a360b06f9909a3f156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:ba:16:d7:cb:33:8e:49:cf:89:ad:50:94:
a4:1c:db:ee:eb:e5:88:2e:b8:cf:be:89:eb:02:f2:
1e:79:af:e7:d3:15:b8:83:ff:e2:d2:92:6a:e2:86:
c8:ef:51:8b:84:fe:19:e6:fc:89:7d:91:9b:91:7b:
e8:c0:cc:5f:d9:5c:7a:86:c1:05:0c:e3:f0:5c:1b:
1c:24:11:56:b2:4c:a9:45:dd:46:65:e9:6b:f0:1a:
1f:bc:34:10:1e:d7:b0:3b:fa:aa:27:bf:d9:57:c7:
9b:94:49:ed:25:60:56:8d:f8:ae:fa:2c:d6:4d:8a:
cc:20:9c:ee:0c:ce:b8:e6:c0:88:7e:55:49:cf:2d:
2f:0c:40:30:ea:0a:66:23:64:ae:47:f9:2a:65:c2:
41:61:d2:9b:d6:e7:ec:72:1f:4f:ac:18:a5:61:29:
0b:fd:dc:a8:3b:61:30:cf:1d:2b:2f:80:4f:40:8b:
70:7d:7d:fd:85:49:6c:ba:d6:02:56:e4:db:97:62:
f9:4b:ff:f4:be:f2:cc:c7:3b:2c:1f:60:02:59:93:
f0:ee:0b:58:42:7e:8c:f3:c3:1f:4d:99:2e:65:bd:
b5:a7:41:9f:28:5d:cc:24:a6:b8:d4:0b:4d:0d:3c:
d3:f7:a7:9b:7d:35:0a:14:9f:61:83:21:f5:1d:4c:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:7A:A7:26:54:86:CC:F8:C9:E5:A3:60:B0:6F:99:09:A3:F1:56
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hvF6pyZUhsz4yeWjYLBvmQmj8VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.217.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bb:a1:66:b6:3d:16:23:3f:ad:ba:a6:ae:9c:8d:46:08:3c:
e5:63:14:9c:b0:59:6f:4e:22:d2:ab:50:13:3a:84:85:dc:d9:
d5:8f:fc:0b:1c:57:9d:9e:cd:5f:0f:18:86:19:d2:a4:c9:35:
3a:1b:7b:a3:80:01:52:71:db:ca:d1:18:59:52:d8:13:f0:da:
32:6a:a6:10:a8:b3:e1:51:bb:dc:38:3b:2c:a6:7f:b2:d2:c9:
fb:b8:95:59:34:06:40:58:3b:4a:7d:7a:c0:3b:10:3c:0b:e6:
18:93:60:6c:e5:d8:14:9a:dd:53:33:7d:e6:6f:8e:7f:da:1b:
02:37:38:23:ca:8c:41:41:81:a2:5f:e4:ab:32:f8:9c:28:ce:
f1:d6:04:83:0e:63:57:c5:5d:4e:57:d1:3c:db:cf:81:62:d8:
c0:aa:fd:6e:32:7a:95:60:b4:be:73:17:1a:44:2f:d0:10:25:
6b:82:87:14:01:d5:1f:2c:63:5d:3f:71:e1:18:e4:aa:26:a2:
48:8d:05:5b:10:0a:22:5e:4d:61:dd:fd:69:88:f1:77:f1:c9:
77:44:12:db:aa:13:cd:09:cb:f7:ec:53:03:af:2d:fa:d5:5d:
e1:67:be:cc:0a:01:bc:b6:b2:4a:24:d3:78:9e:bf:f4:1f:05:
9b:41:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:20 2026 by rpki-client