Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hHvFKf3UEliXLrzRUbs13yawE4A.roa
File: hHvFKf3UEliXLrzRUbs13yawE4A.roa (raw, json)
Hash identifier: Q3Gmi2loXZm6ge76d5D+t7CjgzW4cTfuBMzje/cwPIU=
Subject key identifier: 84:7B:C5:29:FD:D4:12:58:97:2E:BC:D1:51:BB:35:DF:26:B0:13:80
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F4794D5402715FBFA25E2F40C9103EE9A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hHvFKf3UEliXLrzRUbs13yawE4A.roa
Signing time: Thu 09 Jul 2026 15:52:43 +0000
ROA not before: Thu 09 Jul 2026 15:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219359
IP address blocks: 45.86.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:94:d5:40:27:15:fb:fa:25:e2:f4:0c:91:03:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 9 15:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=847bc529fdd41258972ebcd151bb35df26b01380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:e5:ac:a5:e4:36:8b:b7:04:33:d1:10:b7:
c1:58:8d:cc:5a:80:22:cf:ed:a1:2f:3d:bd:61:5a:
04:5b:38:f5:83:df:80:bf:40:d0:b9:04:c2:32:c3:
89:a8:e9:7e:a7:3a:3b:49:29:30:ac:57:d3:17:e2:
1b:f6:4b:4a:d0:bf:ae:f2:cf:d6:e5:4b:b0:f6:a3:
86:bc:6f:4a:8d:53:b0:91:8d:53:f2:dd:6a:3c:5e:
52:13:0e:f2:17:d0:9b:45:bd:9e:48:31:28:65:e9:
7b:ae:96:71:51:a5:ff:91:16:f8:55:12:1b:e4:07:
eb:32:9b:7f:61:05:c9:6d:47:3e:2a:94:64:d2:e9:
aa:21:50:97:d3:0b:9f:b7:09:6b:8a:49:51:48:30:
9b:f8:2a:61:82:cb:dc:31:2d:27:1b:d0:a5:b9:ae:
f8:7d:36:31:f8:91:cf:8f:aa:a6:3c:c8:be:57:84:
1a:49:6f:0a:6e:3d:9a:7a:12:d9:76:01:fa:ca:c1:
b9:fb:a5:53:66:43:7a:d6:86:86:d8:ea:b6:f6:20:
e3:34:ef:8f:1d:c6:4b:4b:b0:45:81:4b:2b:d7:41:
9a:6c:73:05:f7:f5:4b:eb:6c:f8:4c:f3:ee:82:49:
43:36:53:f7:07:59:49:3c:8b:91:69:e0:7c:77:a0:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:C5:29:FD:D4:12:58:97:2E:BC:D1:51:BB:35:DF:26:B0:13:80
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hHvFKf3UEliXLrzRUbs13yawE4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.60.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8f:5a:75:97:9f:8a:75:52:b1:c0:a3:3c:1c:dc:c1:4a:b2:
70:f4:d1:b5:93:bd:67:b7:c3:ab:eb:34:4e:e5:d9:a1:06:06:
ba:48:69:e6:3c:89:23:e9:46:9f:ea:80:75:d5:94:52:94:36:
e2:13:ed:40:df:4a:c0:65:86:4d:e4:b3:99:ee:53:2a:2b:a2:
78:ab:e7:ae:42:ce:27:3b:17:0e:8f:c7:54:49:ba:6e:e6:82:
09:43:62:f3:e2:b3:bb:33:27:26:30:26:16:a0:5a:30:4c:d7:
e4:c6:21:48:b8:ae:b5:1c:b2:de:65:4e:5d:81:58:32:bb:ef:
bf:bd:ab:70:a3:2d:ff:ac:04:57:23:b4:84:40:18:5d:71:0b:
8b:9c:c0:d2:b8:f5:fe:80:8b:1f:9a:5f:1c:ca:6f:38:85:79:
82:0e:a8:9a:f0:7a:9c:ef:d1:97:36:94:b8:6a:10:a8:d4:29:
f6:ef:af:bc:72:0d:e0:a0:5f:ab:76:54:15:f2:aa:b1:4d:80:
18:23:25:be:30:7f:8b:ba:d1:bc:99:19:e6:d7:05:e7:df:f8:
05:92:59:69:1b:39:10:6d:4e:da:1f:64:5b:81:d7:98:60:5e:
2c:29:4b:4e:dc:e4:7a:d1:1b:ec:62:fb:7b:f6:74:e2:1f:53:
07:03:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:38 2026 by rpki-client