Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/hbgfiJBaVSYKQ0S_sYqJOBF3AEk.roa
File: hbgfiJBaVSYKQ0S_sYqJOBF3AEk.roa (raw, json)
Hash identifier: dH6bucTcs9O7fwkolp86gFjkkQEdVYKkbDap/CA/wYI=
Subject key identifier: 85:B8:1F:88:90:5A:55:26:0A:43:44:BF:B1:8A:89:38:11:77:00:49
Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial: 019F8DD06B4A4D15377D5FE6572F5514A9C7
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/hbgfiJBaVSYKQ0S_sYqJOBF3AEk.roa
Signing time: Thu 23 Jul 2026 07:11:14 +0000
ROA not before: Thu 23 Jul 2026 07:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206224
IP address blocks: 64.28.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:d0:6b:4a:4d:15:37:7d:5f:e6:57:2f:55:14:a9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Validity
Not Before: Jul 23 07:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85b81f88905a55260a4344bfb18a893811770049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:11:83:12:c6:ab:3b:ac:8e:ba:8f:30:18:
44:09:71:bb:10:5a:ab:64:7a:d1:e3:c6:34:a2:6f:
55:bc:9c:5c:c0:17:97:61:8b:c6:6f:99:85:fb:cf:
e9:86:e1:b7:ec:47:ab:3d:a7:c7:17:c3:e3:ab:e8:
f1:32:d6:0e:c5:61:7e:79:de:7e:a3:c2:12:af:46:
88:7b:b1:c6:24:90:56:16:66:41:ee:f1:dc:78:64:
ec:34:cf:cc:df:8e:f8:4a:bb:ff:ba:5a:0d:6f:cd:
7e:fc:f3:0e:43:65:a7:7b:c1:1b:0d:aa:ef:bc:dc:
6b:15:e5:17:6c:b7:85:5a:e7:03:d8:ab:f4:f1:f9:
fe:8d:9c:d3:f7:06:2e:1b:bd:46:0a:59:03:f1:39:
8d:96:eb:9f:70:d5:c9:b7:db:81:bf:5d:02:94:51:
92:e6:0d:4f:1d:11:89:e2:07:da:b2:09:2b:62:07:
03:0a:e6:22:a7:11:bf:0d:bf:31:71:be:29:71:49:
44:0f:0a:e5:e4:7c:bd:b5:d8:45:aa:ec:b7:72:44:
7e:5e:73:40:15:d1:7b:14:2e:39:a3:ed:46:33:5b:
64:dd:5c:c5:cd:62:1c:33:39:49:29:27:96:fb:27:
95:40:c0:90:d6:e7:57:a3:ea:13:77:6a:54:fa:37:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:1F:88:90:5A:55:26:0A:43:44:BF:B1:8A:89:38:11:77:00:49
X509v3 Authority Key Identifier:
keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/hbgfiJBaVSYKQ0S_sYqJOBF3AEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b9:b4:d4:10:ac:97:c2:30:43:58:b0:bf:f0:78:75:f2:fa:
f2:ad:4c:81:8b:57:02:a3:f0:53:d6:1e:a9:ca:1f:8f:6c:53:
bb:a6:da:30:e0:57:12:0c:44:88:ba:f9:6c:1e:ee:8b:e1:fe:
6e:66:97:03:03:75:88:38:49:2b:8c:66:ff:9b:41:b2:e5:0a:
77:bd:1a:29:92:0a:0f:dd:e5:f8:3f:c4:70:b4:90:ca:f6:6b:
64:1f:4d:76:00:54:4b:c2:30:6f:f4:1c:6e:09:86:84:08:e0:
37:cd:f8:0f:7e:b2:89:ca:c6:7f:13:32:93:72:1f:4c:6b:07:
1b:f9:1a:df:1e:7d:e5:a4:36:87:f5:66:5f:51:ff:86:e9:f1:
58:5f:26:2b:5c:97:30:1b:a6:c4:be:64:f2:d8:08:96:ca:56:
d7:a9:7b:55:84:62:5b:d3:fe:be:a2:c7:07:39:46:13:36:74:
c7:60:40:13:8f:84:bf:ee:23:ea:b5:35:65:75:e0:61:aa:f9:
e4:6e:b6:26:fc:7c:ed:03:2c:aa:8c:89:62:8d:3c:bb:33:84:
26:f3:bd:ec:94:02:fe:55:14:bb:12:8f:ba:ab:8a:62:9b:03:
b8:15:04:a3:bb:e7:35:20:20:2a:fb:b6:61:0f:ee:e6:6c:e2:
60:3f:16:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:35 2026 by rpki-client