Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/hCJiTpNkQOc5nBabvxUw_PYHA5A.roa
File: hCJiTpNkQOc5nBabvxUw_PYHA5A.roa (raw, json)
Hash identifier: E9ZgbzE14hI7ZwRKXKRpHKWsp51tuudesAlPeBWMd1Q=
Subject key identifier: 84:22:62:4E:93:64:40:E7:39:9C:16:9B:BF:15:30:FC:F6:07:03:90
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 01A0CF7A728B5079D057F0C2BD34C372A42A
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/hCJiTpNkQOc5nBabvxUw_PYHA5A.roa
Signing time: Wed 23 Sep 2026 18:15:03 +0000
ROA not before: Wed 23 Sep 2026 18:15:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49972
IP address blocks: 185.192.112.0/24 maxlen: 24
185.192.113.0/24 maxlen: 24
185.192.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:7a:72:8b:50:79:d0:57:f0:c2:bd:34:c3:72:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Sep 23 18:15:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8422624e936440e7399c169bbf1530fcf6070390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:72:b8:b3:b8:a0:38:29:3e:be:5d:4b:57:
54:eb:0c:84:b5:9f:f3:e7:f2:97:7f:99:ab:48:c9:
6b:a8:1f:0d:61:e0:aa:c4:9d:59:3a:86:d2:9c:6e:
57:5f:30:33:a3:83:29:3e:e6:78:09:78:17:a3:0e:
5a:99:92:cc:c1:49:6d:6c:3e:a0:85:7e:8a:d1:c6:
e2:81:95:75:ba:dd:d5:60:cf:83:2f:45:76:23:3f:
ce:20:25:d0:f3:54:bf:74:a5:f4:ca:a4:90:57:3c:
44:8d:06:5d:5d:f9:77:6b:73:55:92:8f:05:e4:2f:
ff:61:a7:cc:3a:8d:d9:3f:31:ce:00:1e:3a:b6:71:
68:4b:d9:7a:ad:e6:7e:f1:06:87:72:b1:9a:86:a7:
1d:b8:94:a1:b3:e2:ba:31:a4:e3:7f:e5:aa:1e:fd:
cb:7b:db:2f:22:61:47:27:f7:64:53:a6:33:c4:bc:
f5:21:b4:05:c4:55:02:b4:2c:81:04:55:07:8d:23:
3e:9e:70:f5:19:61:a6:5c:5e:90:be:4d:3a:82:d6:
7f:94:ec:6d:ab:15:8c:67:94:90:c6:b7:01:dc:ff:
a4:1d:0d:c0:37:65:31:55:05:36:34:bb:9d:88:5b:
9b:b7:6d:93:18:63:64:b4:9c:ad:0b:b3:ee:12:b4:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:62:4E:93:64:40:E7:39:9C:16:9B:BF:15:30:FC:F6:07:03:90
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/hCJiTpNkQOc5nBabvxUw_PYHA5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.112.0-185.192.114.255
Signature Algorithm: sha256WithRSAEncryption
5e:ca:ef:0e:f1:41:d3:9e:fd:76:1c:de:f5:b1:7a:bd:07:58:
4b:4d:5a:cc:fd:b7:e5:de:da:56:b9:ce:55:22:6b:59:06:0f:
b5:3a:b6:b9:53:3b:f6:7e:56:60:c0:0d:65:0b:9c:0f:eb:94:
a4:68:01:58:7d:b6:75:64:5d:72:17:bc:96:41:1f:d6:bd:b7:
47:ad:b2:1a:88:a0:bc:b1:7c:ad:ec:54:b4:62:cf:97:8a:1b:
9f:8f:6a:25:56:e0:92:50:dd:c4:97:e2:d0:ff:ba:da:df:61:
cd:39:e2:9c:9b:31:b6:df:9e:af:fa:1f:51:30:26:ef:ba:1a:
fb:6d:79:c5:9f:e3:49:e9:bd:e6:f2:98:4a:8b:4b:34:e3:15:
8e:e5:e5:24:46:bb:3e:50:47:2a:f5:9e:af:4d:2d:52:8a:45:
e0:d1:78:9b:00:9e:6d:57:92:5f:5d:93:b1:2e:16:a0:39:12:
4d:33:5b:1b:07:a0:f1:5e:d8:8e:7b:82:c4:3c:40:0b:6f:88:
d4:47:0e:9d:1c:42:f0:91:70:60:93:b5:7b:06:9c:d3:33:f5:
60:f2:4e:b1:ff:4b:51:dc:73:ed:b5:a0:ac:51:1e:47:3a:49:
47:db:77:f2:4a:ee:05:6e:1f:a4:e8:3c:33:32:1e:4b:0c:62:
25:c6:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:25:58 2026 by rpki-client