Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/hQpPRm4erIDWbIY8XQoz9UytcaA.roa
File: hQpPRm4erIDWbIY8XQoz9UytcaA.roa (raw, json)
Hash identifier: P89VvvMHkJtBVyELR1I2+jkquZR5SiLofVkP3TLWjJE=
Subject key identifier: 85:0A:4F:46:6E:1E:AC:80:D6:6C:86:3C:5D:0A:33:F5:4C:AD:71:A0
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 01A0ECD503DD2465ED87ABE3A43B2FD25A02
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/hQpPRm4erIDWbIY8XQoz9UytcaA.roa
Signing time: Tue 29 Sep 2026 11:02:58 +0000
ROA not before: Tue 29 Sep 2026 11:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38965
IP address blocks: 157.173.78.0/24 maxlen: 24
185.231.57.0/24 maxlen: 24
2a10:b880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d5:03:dd:24:65:ed:87:ab:e3:a4:3b:2f:d2:5a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Sep 29 11:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=850a4f466e1eac80d66c863c5d0a33f54cad71a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:76:1b:23:bc:62:37:64:ba:34:d8:a4:02:
fe:04:8f:37:db:9f:aa:72:27:36:82:35:9a:63:d5:
7a:cf:2e:4d:2c:28:d4:d2:f3:c7:b5:f6:0a:b7:ef:
64:dc:c1:f4:43:24:d7:71:b2:82:65:a0:dc:fc:eb:
19:e9:29:fc:b6:02:fc:fc:b4:a8:c9:c3:98:ad:f8:
29:32:f7:f8:b4:a4:63:2d:f6:a4:41:1a:61:87:4c:
72:68:71:36:fb:8f:98:1a:2f:d3:30:e3:fb:63:aa:
eb:27:f1:11:b3:b8:87:c1:fe:bd:d0:24:17:6a:cf:
14:c1:46:fd:d1:90:d0:ed:73:38:e8:4e:9b:d5:13:
b4:64:99:35:cf:15:5b:94:5a:b2:0d:fe:69:8d:bd:
9d:ed:e8:a0:fb:e8:2f:cd:f7:83:fd:c2:56:5f:aa:
a1:11:0c:ab:b2:fa:21:63:6b:d9:e9:48:0d:db:16:
6b:59:94:c4:28:0c:cb:09:e3:31:fb:76:67:e3:e9:
4b:53:e9:4d:3e:b4:23:46:92:a2:8a:48:ea:cf:4c:
38:80:9c:e6:00:2e:f2:ed:fd:da:93:ca:51:4e:c5:
da:25:05:8c:cd:31:3c:e7:dd:ff:6c:63:e9:9a:7b:
7d:9f:d9:41:d3:61:52:8e:d3:c7:38:cb:c7:91:29:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:4F:46:6E:1E:AC:80:D6:6C:86:3C:5D:0A:33:F5:4C:AD:71:A0
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/hQpPRm4erIDWbIY8XQoz9UytcaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.78.0/24
185.231.57.0/24
IPv6:
2a10:b880::/32
Signature Algorithm: sha256WithRSAEncryption
19:b7:95:e6:c5:68:91:74:4d:52:66:00:dd:1d:4c:55:e5:03:
97:af:3d:13:4a:d0:cd:18:6b:99:54:13:6e:61:f1:b0:61:31:
68:f4:c5:c9:52:32:df:19:8a:45:46:8c:57:c9:67:aa:09:81:
e3:a8:e6:72:6f:e5:10:c1:63:da:7f:5c:06:4b:71:3c:1e:a1:
e2:ff:8f:4f:b1:5c:76:28:0d:0e:3a:01:52:cd:00:12:44:6f:
54:bc:eb:f3:2a:e6:c3:9d:87:94:fa:00:49:72:56:65:34:a2:
27:cb:8e:e3:0e:cc:64:9c:8e:c0:73:d4:f7:99:13:9f:96:1d:
09:4f:10:75:fc:eb:7a:46:01:6f:dd:dd:23:90:77:44:c9:c6:
7f:14:ea:4c:00:32:31:b2:06:9e:bd:75:7c:51:32:9a:4d:78:
6f:ef:b4:00:b4:55:c8:e7:a3:fd:36:b6:87:ea:a3:8c:c5:ac:
3c:d6:25:c8:1e:9d:23:b2:13:01:34:e3:2b:a4:f8:58:08:fe:
dc:3c:fd:c3:76:b9:01:ba:a9:9c:97:6d:7a:a7:d1:b5:f8:11:
05:41:9d:c4:0d:ac:ec:43:18:9d:14:9e:f2:3e:a9:23:eb:06:
71:6a:8d:1d:58:dc:78:bd:25:e5:76:e5:86:b3:7e:c1:6e:c5:
1f:36:07:e9
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaDs1QPdJGXth6vjpDsv0loCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTUxZmJiNzFlNDFiMmQxMDYzZDNiMTExNDFhZGExYTg0
NGM3ZjcwHhcNMjYwOTI5MTEwMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTBhNGY0NjZlMWVhYzgwZDY2Yzg2M2M1ZDBhMzNmNTRjYWQ3MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeF2GyO8YjdkujTYpAL+BI8325+q
cic2gjWaY9V6zy5NLCjU0vPHtfYKt+9k3MH0QyTXcbKCZaDc/OsZ6Sn8tgL8/LSo
ycOYrfgpMvf4tKRjLfakQRphh0xyaHE2+4+YGi/TMOP7Y6rrJ/ERs7iHwf690CQX
as8UwUb90ZDQ7XM46E6b1RO0ZJk1zxVblFqyDf5pjb2d7eig++gvzfeD/cJWX6qh
EQyrsvohY2vZ6UgN2xZrWZTEKAzLCeMx+3Zn4+lLU+lNPrQjRpKiikjqz0w4gJzm
AC7y7f3ak8pRTsXaJQWMzTE8593/bGPpmnt9n9lB02FSjtPHOMvHkSmWfQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIUKT0ZuHqyA1myGPF0KM/VMrXGgMB8GA1UdIwQY
MBaAFJUVH7tx5BstEGPTsRFBraGoRMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYt
OWZkODM2ZThiMzY2LzEvaFFwUFJtNGVySURXYklZOFhRb3o5VXl0Y2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYtOWZkODM2ZThiMzY2
LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAna1OAwQA
uec5MA0EAgACMAcDBQAqELiAMA0GCSqGSIb3DQEBCwUAA4IBAQAZt5XmxWiRdE1S
ZgDdHUxV5QOXrz0TStDNGGuZVBNuYfGwYTFo9MXJUjLfGYpFRoxXyWeqCYHjqOZy
b+UQwWPaf1wGS3E8HqHi/49PsVx2KA0OOgFSzQASRG9UvOvzKubDnYeU+gBJclZl
NKIny47jDsxknI7Ac9T3mROflh0JTxB1/Ot6RgFv3d0jkHdEycZ/FOpMADIxsgae
vXV8UTKaTXhv77QAtFXI56P9NraH6qOMxaw81iXIHp0jshMBNOMrpPhYCP7cPP3D
drkBuqmcl216p9G1+BEFQZ3EDazsQxidFJ7yPqkj6wZxao0dWNx4vSXlduWGs37B
bsUfNgfp
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:55:34 2026 by rpki-client