Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/hZDY_be1kSFwRaJu_bmjRKYZiBY.roa
File: hZDY_be1kSFwRaJu_bmjRKYZiBY.roa (raw, json)
Hash identifier: JlJ0ot3QRiIyV/kyXdKpPq9UPa6seZ6FnRLu6fR1FZw=
Subject key identifier: 85:90:D8:FD:B7:B5:91:21:70:45:A2:6E:FD:B9:A3:44:A6:19:88:16
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 01A110EE2995FF295DD23435C747ABEF8F90
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/hZDY_be1kSFwRaJu_bmjRKYZiBY.roa
Signing time: Tue 06 Oct 2026 11:16:45 +0000
ROA not before: Tue 06 Oct 2026 11:16:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42861
IP address blocks: 2a00:1e68::/32 maxlen: 32
2a00:1e68:100::/47 maxlen: 47
2a00:1e68:100::/48 maxlen: 48
2a00:1e68:101::/48 maxlen: 48
2a00:1e68:112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:ee:29:95:ff:29:5d:d2:34:35:c7:47:ab:ef:8f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Oct 6 11:16:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8590d8fdb7b591217045a26efdb9a344a6198816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:ba:ba:88:b4:ce:0c:a6:96:c8:b5:74:95:
17:28:e3:0b:65:70:5d:06:f9:5b:0c:bc:8d:b2:77:
fb:57:ff:c7:42:14:b3:59:27:c4:65:bd:a4:14:1e:
96:a8:5d:40:cc:5a:48:ea:fc:5e:a6:2e:46:0c:6a:
aa:90:8a:32:42:93:93:96:0b:3b:d5:88:0c:11:24:
d3:c6:a2:0c:9d:83:6a:79:36:d3:77:34:34:47:59:
76:18:a6:2e:63:70:50:03:03:22:c6:12:3d:cd:37:
0e:e4:d2:94:78:df:1c:69:7d:49:14:f9:4b:f3:69:
33:3a:4e:8c:8d:9e:51:45:37:c9:37:6f:1c:2f:12:
22:74:47:fc:be:62:a3:37:7f:d3:1a:7c:18:f6:c6:
13:f0:74:ef:cd:a0:1e:e7:f4:9b:99:e5:6e:68:08:
fb:45:24:8c:96:37:cc:3f:6a:b3:c2:06:e9:f4:56:
dd:7c:db:2e:47:0c:f8:7e:3f:48:54:6a:32:23:1e:
44:58:50:e4:bd:c0:f6:3c:4f:bc:f8:19:f0:f0:55:
38:79:b7:5e:ce:a6:34:0b:5f:62:cb:aa:d2:c8:51:
6b:a2:1c:37:eb:a0:87:c3:ef:70:1d:a9:2c:81:e7:
de:df:26:63:df:ac:f8:c3:32:f8:a2:21:07:21:7b:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:90:D8:FD:B7:B5:91:21:70:45:A2:6E:FD:B9:A3:44:A6:19:88:16
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/hZDY_be1kSFwRaJu_bmjRKYZiBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1e68::/32
Signature Algorithm: sha256WithRSAEncryption
a0:ad:a6:a9:2b:2b:28:74:e9:f1:99:2b:91:e6:00:19:04:cb:
6a:23:3c:82:06:d3:ce:ef:16:b1:b5:7a:0a:7c:a4:e7:b4:48:
7c:1f:3b:82:fc:a0:b8:31:af:81:c3:c3:91:0f:80:ad:2c:fc:
1a:b9:02:1a:02:48:32:0d:c3:c2:54:df:cb:a9:06:70:7d:81:
53:07:a4:44:0e:7e:70:6a:ec:d8:f3:b4:41:43:0c:85:fb:d5:
2b:58:23:54:6c:cf:66:6d:0b:3d:1e:1f:a8:42:2e:1e:23:65:
30:be:04:cd:0e:2f:69:01:d9:ba:c8:73:fc:b6:85:2c:9e:0e:
bd:44:d8:6e:5f:62:cb:0d:0c:17:ef:e3:f0:2d:ee:b7:0b:b8:
c9:ca:ea:fe:99:3b:5b:81:9a:3e:00:95:49:14:93:4b:0f:1a:
63:04:4b:1f:ca:e1:6b:98:9e:e6:5a:fd:d0:30:bb:ab:20:18:
b5:32:a1:67:8a:eb:27:85:04:50:e0:36:1f:35:c4:de:a3:ce:
0b:a3:b4:86:d4:13:33:0b:7d:05:92:8e:31:ad:c7:ec:46:86:
7a:88:ee:d9:ac:c3:37:d7:0e:8a:b8:b2:1b:60:5e:9d:ad:f4:
47:0e:94:8e:ef:b1:6f:a0:8a:8f:46:69:dd:8e:c2:2e:79:4f:
ee:f9:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:52:53 2026 by rpki-client