Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hRHkkew4RJW-M5MNhUrCKO9r6iI.roa
File: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (raw, json)
Hash identifier: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=
Subject key identifier: 85:11:E4:91:EC:38:44:95:BE:33:93:0D:85:4A:C2:28:EF:6B:EA:22
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F4E988BBA63C964732BE2611F685
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hRHkkew4RJW-M5MNhUrCKO9r6iI.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3180
IP address blocks: 2a04:ac00:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:e9:88:bb:a6:3c:96:47:32:be:26:11:f6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8511e491ec384495be33930d854ac228ef6bea22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:ad:d6:71:74:61:31:2f:ed:7b:5a:8a:fe:
91:2d:cb:11:4f:65:e9:6c:87:46:e6:9a:98:2a:38:
ac:03:60:f6:06:9c:68:b8:4d:01:fa:62:ca:d4:0a:
06:64:98:3d:1d:6f:da:c3:68:85:49:21:4e:74:c9:
da:e1:90:dc:74:69:cf:42:db:c8:44:37:ab:69:fc:
ae:e8:f2:7a:ee:2e:7f:05:9f:5a:53:27:6b:d6:e7:
0d:02:9e:81:7a:a4:96:af:55:94:5f:c3:24:14:25:
28:47:5b:33:e7:96:65:1e:13:6e:ae:1c:ef:c7:83:
0e:06:d0:56:00:ec:02:78:83:d4:4b:1e:2c:67:b6:
88:00:e5:14:7a:70:6a:1e:ad:a7:db:3a:91:a3:3e:
94:eb:e4:66:c2:97:04:6d:0c:62:81:c6:f1:e7:44:
c7:4b:74:41:b6:01:7b:d7:2b:50:13:fe:b4:b8:77:
84:e4:d2:ab:40:3c:4d:72:f3:b9:a5:e5:14:85:5c:
2d:75:50:cf:f0:c3:49:0a:8d:65:bc:21:f0:da:7a:
8b:d8:be:a7:23:f4:52:69:1a:cd:89:1c:dd:03:c7:
1e:f5:35:de:94:f3:1d:e0:8c:be:79:0e:f9:45:c0:
f2:41:57:a8:f6:30:92:71:50:d3:5b:62:7a:37:67:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:E4:91:EC:38:44:95:BE:33:93:0D:85:4A:C2:28:EF:6B:EA:22
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hRHkkew4RJW-M5MNhUrCKO9r6iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:b::/48
Signature Algorithm: sha256WithRSAEncryption
0a:05:bc:dd:7e:f3:d7:30:3b:b4:95:ff:29:a6:64:b4:81:b6:
e5:c7:da:cb:73:1c:94:0f:63:f6:f1:aa:ae:f4:3e:de:ff:85:
be:14:74:34:2b:12:26:f7:4d:78:2f:ce:47:fb:b5:94:e3:3f:
ae:66:44:9c:13:80:25:43:73:83:63:6d:8f:72:17:ff:9b:9f:
22:4c:83:ec:e2:ad:59:7a:72:49:c3:c7:47:1b:f3:cd:3a:83:
5c:45:ad:b2:85:1e:8b:37:6f:a6:ea:5a:6e:17:5b:f9:1f:4c:
e3:24:22:25:b1:96:29:29:cf:64:90:01:f3:3f:48:26:ac:38:
70:fe:85:e1:98:81:fc:85:ae:10:d0:52:3c:17:a6:34:29:58:
d5:f1:a2:d3:e3:85:a6:b3:29:1b:55:1d:d7:7a:73:76:99:7b:
b5:4f:c5:b0:59:66:c0:bb:9f:52:1f:43:05:32:ff:93:ee:3f:
53:80:d4:ec:e8:a9:59:05:c6:65:3c:b0:b4:a5:c5:a4:fd:a9:
e4:65:69:f8:48:6c:96:d6:e9:97:4b:c9:c8:a7:f5:6e:43:f3:
65:e1:34:2a:06:32:a7:df:3a:ff:c7:49:1f:d2:4d:3c:1c:22:
d8:9b:25:58:39:72:07:90:ce:47:94:b4:df:d5:13:04:6a:e8:
85:cd:5b:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaPTpiLumPJZHMr4mEfaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTExZTQ5MWVjMzg0NDk1YmUzMzkzMGQ4NTRhYzIyOGVmNmJlYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE6t1nF0YTEv7Xtaiv6RLcsRT2Xp
bIdG5pqYKjisA2D2BpxouE0B+mLK1AoGZJg9HW/aw2iFSSFOdMna4ZDcdGnPQtvI
RDerafyu6PJ67i5/BZ9aUydr1ucNAp6BeqSWr1WUX8MkFCUoR1sz55ZlHhNurhzv
x4MOBtBWAOwCeIPUSx4sZ7aIAOUUenBqHq2n2zqRoz6U6+RmwpcEbQxigcbx50TH
S3RBtgF71ytQE/60uHeE5NKrQDxNcvO5peUUhVwtdVDP8MNJCo1lvCHw2nqL2L6n
I/RSaRrNiRzdA8ce9TXelPMd4Iy+eQ75RcDyQVeo9jCScVDTW2J6N2dkywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIUR5JHsOESVvjOTDYVKwijva+oiMB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvaFJIa2tldzRSSlctTTVNTmhVckNLTzlyNmlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSsAAAL
MA0GCSqGSIb3DQEBCwUAA4IBAQAKBbzdfvPXMDu0lf8ppmS0gbblx9rLcxyUD2P2
8aqu9D7e/4W+FHQ0KxIm9014L85H+7WU4z+uZkScE4AlQ3ODY22Pchf/m58iTIPs
4q1ZenJJw8dHG/PNOoNcRa2yhR6LN2+m6lpuF1v5H0zjJCIlsZYpKc9kkAHzP0gm
rDhw/oXhmIH8ha4Q0FI8F6Y0KVjV8aLT44WmsykbVR3XenN2mXu1T8WwWWbAu59S
H0MFMv+T7j9TgNTs6KlZBcZlPLC0pcWk/ankZWn4SGyW1umXS8nIp/VuQ/Nl4TQq
BjKn3zr/x0kf0k08HCLYmyVYOXIHkM5HlLTf1RMEauiFzVvq
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:45 2026 by rpki-client