Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/hbkKGOmlNKzbILfpeWpPIHdJCTQ.roa
File: hbkKGOmlNKzbILfpeWpPIHdJCTQ.roa (raw, json)
Hash identifier: mNEyedYDwIVhHS/x0StiG/QXHh5+8dpoT+4E3IT1LVw=
Subject key identifier: 85:B9:0A:18:E9:A5:34:AC:DB:20:B7:E9:79:6A:4F:20:77:49:09:34
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019E17C5734215E8714BF7D6105ED824FE09
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/hbkKGOmlNKzbILfpeWpPIHdJCTQ.roa
Signing time: Mon 11 May 2026 16:01:16 +0000
ROA not before: Mon 11 May 2026 16:01:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214354
IP address blocks: 2a14:c380:160::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:c5:73:42:15:e8:71:4b:f7:d6:10:5e:d8:24:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: May 11 16:01:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85b90a18e9a534acdb20b7e9796a4f2077490934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:d2:40:8a:df:e8:cf:46:f1:87:3c:a5:23:
d6:a5:44:f8:06:d2:d3:6a:6d:92:cc:bf:26:f6:da:
51:e2:9c:ce:f7:d8:2f:85:10:66:8f:d1:4b:9c:89:
d8:69:6a:15:8d:f3:7f:bc:7e:87:d8:96:fb:1a:b4:
d9:bb:de:57:8c:df:d6:d3:33:07:a2:4a:65:d4:df:
74:76:93:4b:fb:f3:94:f4:24:7e:cf:f8:57:53:02:
60:a9:97:7b:2b:cb:47:9e:09:82:27:11:77:f8:7b:
95:51:0e:06:65:70:28:0f:ab:b9:4d:21:75:b9:4a:
cf:b2:e0:15:3d:43:93:97:66:bd:77:ad:75:e2:c8:
c9:25:ed:a6:5b:4d:31:cf:be:c3:31:4b:84:7a:85:
52:8b:d9:2c:b5:32:47:2f:78:e6:42:df:2b:e0:74:
e7:7e:41:6f:b4:e7:8c:b2:b5:be:e3:d8:3a:54:c1:
79:cb:1d:f7:7f:a4:d4:05:a9:e8:a6:55:9f:02:a4:
bf:04:c4:a8:8a:28:79:93:cd:0a:b7:59:a1:aa:70:
d5:19:ff:30:29:d8:65:7c:ed:c0:88:b5:3a:9d:99:
92:bd:a6:ec:29:36:ac:5a:2e:ff:31:39:40:33:84:
2d:51:3f:e3:ca:20:8d:30:5c:a2:bf:37:bf:ff:36:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:0A:18:E9:A5:34:AC:DB:20:B7:E9:79:6A:4F:20:77:49:09:34
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/hbkKGOmlNKzbILfpeWpPIHdJCTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:160::/44
Signature Algorithm: sha256WithRSAEncryption
48:98:77:a1:0d:92:ea:64:72:59:44:aa:4d:c4:46:c2:a3:36:
08:5b:46:26:16:c5:f9:b1:1c:8d:40:f1:e7:1d:32:b2:b7:0c:
35:86:76:17:1c:7b:ad:0f:85:03:8e:58:ca:63:dc:f9:ee:1a:
73:ee:bc:a2:64:7a:d5:97:4a:72:fa:27:48:bd:a9:d5:e0:b1:
bb:1a:46:59:8b:03:cb:89:a9:d0:bb:69:95:c4:19:46:6a:75:
47:7b:d7:3d:5b:5c:b6:d4:d5:4b:15:81:27:18:b5:82:b5:dd:
37:ea:40:eb:4a:69:ac:c7:ba:e3:59:2d:0b:dc:e8:cf:dc:e4:
93:20:8a:63:8d:7f:1e:24:d6:b0:7b:b0:41:b0:9a:19:47:1c:
d6:2e:95:c0:aa:32:b6:9f:c2:bf:15:08:47:14:0d:60:ea:c4:
f9:05:65:34:5e:84:a6:6b:71:b4:e8:b0:6e:57:7f:91:ca:0a:
33:b1:cb:ca:65:8b:78:ab:21:53:e7:6e:b0:5a:5e:00:7d:84:
97:09:56:ed:06:7e:58:a1:bb:ee:f3:25:8c:1d:af:69:47:9f:
a8:ea:61:ea:e9:df:ef:2a:19:8d:88:6d:8a:ac:4e:e1:d6:12:
db:77:02:61:ed:63:0a:45:4d:37:d7:4c:df:52:9f:ff:bf:5c:
ef:e1:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:01 2026 by rpki-client