Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/hUZPNrZM_9jjOFJ8M9g3XrM_dlQ.roa
File: hUZPNrZM_9jjOFJ8M9g3XrM_dlQ.roa (raw, json)
Hash identifier: qfVHrsh37XWbtKi2jegl60I9sTQqtPhRR5+aHwasfEw=
Subject key identifier: 85:46:4F:36:B6:4C:FF:D8:E3:38:52:7C:33:D8:37:5E:B3:3F:76:54
Certificate issuer: /CN=6c30902a9060b3474555c4cdfd00e6fcab81abdc
Certificate serial: 01A0C7E4EFB351B01BFFC5325E5150B40480
Authority key identifier: 6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/hUZPNrZM_9jjOFJ8M9g3XrM_dlQ.roa
Signing time: Tue 22 Sep 2026 06:54:24 +0000
ROA not before: Tue 22 Sep 2026 06:54:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 193.37.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:e4:ef:b3:51:b0:1b:ff:c5:32:5e:51:50:b4:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c30902a9060b3474555c4cdfd00e6fcab81abdc
Validity
Not Before: Sep 22 06:54:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85464f36b64cffd8e338527c33d8375eb33f7654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:ed:1d:f9:40:50:9d:69:d4:a1:e8:bd:20:
3c:a1:1f:66:6c:77:70:25:4e:2d:ed:e8:42:4d:13:
00:5b:eb:7a:07:65:72:51:aa:44:da:95:a2:bb:2a:
da:dd:9a:54:cd:2e:16:c4:86:72:14:fb:23:ee:fd:
e9:82:55:f5:18:dd:58:b9:3e:ba:79:1b:02:3e:2f:
b1:00:5c:f5:ad:c4:44:aa:57:e3:a5:cf:e8:17:73:
75:86:10:b6:ee:2f:71:5c:79:dd:6a:49:1f:87:e4:
cf:6b:02:d2:15:dc:b3:99:63:2d:d4:e0:6c:5c:20:
d3:43:c2:be:f2:0c:22:6b:66:c2:43:82:43:92:c1:
43:d8:b8:92:15:c7:5f:20:a2:79:03:42:ac:e3:44:
29:6f:aa:7a:ff:90:0f:14:87:0c:da:27:f3:0d:84:
98:b3:5c:3f:d1:65:4f:44:da:92:e7:32:09:90:3c:
f4:31:e7:25:a2:ed:a4:13:9f:00:35:66:a3:d7:f8:
c2:d1:a4:d2:4c:3d:54:22:60:8d:36:82:9d:2b:e8:
70:6b:18:98:0c:73:7f:12:41:14:86:6b:2c:8f:13:
0f:12:01:fb:a6:26:bb:dd:92:06:67:fe:b2:84:87:
34:21:99:fb:e4:0c:ec:5f:15:83:14:66:93:3c:b2:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:4F:36:B6:4C:FF:D8:E3:38:52:7C:33:D8:37:5E:B3:3F:76:54
X509v3 Authority Key Identifier:
keyid:6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/hUZPNrZM_9jjOFJ8M9g3XrM_dlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:72:c6:d3:e2:c8:27:47:fb:23:18:9c:88:02:39:61:12:f9:
9b:32:b7:c4:8b:96:82:95:65:ca:36:46:a6:66:c8:b4:d9:09:
16:95:95:e2:5e:e5:8d:dc:a2:77:62:72:41:03:f5:86:72:1f:
dd:b4:49:f0:32:4e:c3:21:6b:1a:a3:18:27:1b:47:39:74:41:
4f:d4:9d:3c:6f:be:37:fd:46:7d:96:6b:e1:56:61:eb:9b:1d:
10:70:c3:be:ff:30:9b:24:d8:ec:ee:d1:07:1e:b8:f0:66:8d:
70:17:0b:f7:cd:53:ea:20:a6:66:2c:a1:6c:da:46:11:ad:2f:
13:b3:25:0f:23:84:c1:3c:a2:e2:5a:34:2b:a3:be:79:aa:ed:
ba:84:44:9d:17:1e:8f:ab:31:ea:8d:db:08:ca:72:c0:06:1e:
04:4e:c0:89:ca:be:2e:43:0f:33:6b:3b:37:99:3b:ff:e8:97:
6b:71:bd:93:5f:65:c9:59:6d:0b:23:e1:ab:72:30:14:b3:85:
44:2c:42:22:15:39:a0:ee:58:d8:96:00:fd:ae:2a:32:1b:2a:
05:28:2e:0f:28:d2:3c:4b:58:40:da:4c:16:fe:62:f5:d2:6f:
ed:f8:e5:ae:2f:c7:6c:65:df:6d:74:22:09:88:16:8d:ec:02:
8f:9f:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:59 2026 by rpki-client