Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/h8qBbhSusuq9upRRpmjdAL8J4Ng.roa
File: h8qBbhSusuq9upRRpmjdAL8J4Ng.roa (raw, json)
Hash identifier: LD2zVdPb/QGZotJ+OVpm+7m1ov66z3ukSOwQ1x7dwnY=
Subject key identifier: 87:CA:81:6E:14:AE:B2:EA:BD:BA:94:51:A6:68:DD:00:BF:09:E0:D8
Certificate issuer: /CN=e59305647affefd72c4d7a0e13522ed97e7f78f1
Certificate serial: 019F2368887508CE0E0D7F617D355A912089
Authority key identifier: E5:93:05:64:7A:FF:EF:D7:2C:4D:7A:0E:13:52:2E:D9:7E:7F:78:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/h8qBbhSusuq9upRRpmjdAL8J4Ng.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49788
IP address blocks: 193.0.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:75:08:ce:0e:0d:7f:61:7d:35:5a:91:20:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59305647affefd72c4d7a0e13522ed97e7f78f1
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87ca816e14aeb2eabdba9451a668dd00bf09e0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:42:01:fb:8f:78:00:11:66:3e:96:37:eb:
94:4a:1e:11:de:9c:11:f0:69:fe:fe:29:fc:3d:21:
f3:4b:1d:54:da:7b:03:4c:0e:24:49:7f:88:14:60:
cb:02:ea:e8:c9:02:ab:18:f6:b7:89:de:e6:4f:6e:
b0:4f:b5:f4:10:94:23:db:91:4c:fa:7a:ae:b0:a2:
d4:d2:8b:1e:d3:1a:f7:c3:f1:9c:01:00:93:c7:52:
ed:f1:91:e6:7d:43:fc:55:28:d8:01:6f:72:f4:3d:
39:1c:a3:62:b9:ee:83:01:18:9e:8a:18:df:24:93:
c7:d3:ec:bb:65:b5:8b:59:3f:7e:60:be:56:fa:a1:
1d:3f:63:07:30:a3:7c:fb:19:1f:4c:1d:1c:3a:a1:
a7:1e:e0:86:36:d6:ed:e1:90:9e:a5:44:3f:41:67:
0f:e0:28:55:93:d9:13:3e:6a:0e:0d:f9:8a:77:39:
d5:1f:55:38:1b:c1:d8:8d:e1:4b:0f:34:22:97:c7:
07:87:55:96:ab:4b:c0:c9:6d:d1:77:a9:b9:c8:db:
c3:58:45:ae:4d:80:32:d3:ce:3b:f3:76:a8:3a:88:
f7:84:48:54:16:26:04:2a:3f:49:12:f0:77:15:54:
a6:1a:ce:91:a6:4f:6a:ba:f5:15:f0:20:cd:c9:61:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CA:81:6E:14:AE:B2:EA:BD:BA:94:51:A6:68:DD:00:BF:09:E0:D8
X509v3 Authority Key Identifier:
keyid:E5:93:05:64:7A:FF:EF:D7:2C:4D:7A:0E:13:52:2E:D9:7E:7F:78:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZMFZHr_79csTXoOE1Iu2X5_ePE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/h8qBbhSusuq9upRRpmjdAL8J4Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/5ZMFZHr_79csTXoOE1Iu2X5_ePE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.222.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e1:1a:62:14:76:e4:4b:50:f0:75:02:19:13:21:d3:09:a5:
f6:90:85:3f:67:0d:52:1b:55:51:bf:8c:41:6c:71:1b:e1:02:
01:3f:24:b7:74:41:df:6a:79:5d:15:cb:f1:01:5e:c4:98:4f:
c2:21:08:cd:8f:26:f7:19:ab:86:52:8c:2a:9e:42:f4:d8:d0:
4c:34:9b:4c:13:8c:88:bc:6f:24:34:d9:15:62:44:c9:1a:18:
08:df:6f:d7:07:b3:15:c9:07:8d:4c:d8:27:54:42:4c:06:2c:
f0:a9:64:b6:df:54:70:62:42:00:88:97:bf:6f:d2:9a:04:57:
17:6e:1c:17:79:86:2e:9a:16:83:f8:1b:2d:8f:6e:87:ae:95:
ae:8c:af:9e:f8:59:c8:ae:1d:3e:7a:fa:3d:12:47:a1:44:42:
3c:e7:7f:6c:03:8d:13:c5:c7:e0:a9:61:c1:1d:1c:96:5a:19:
08:ba:0d:c7:d1:dc:ce:13:41:7a:1a:53:a2:89:f8:77:f9:80:
11:8e:9f:f1:ef:b0:86:4b:a1:32:fe:2f:ba:29:e1:02:e7:71:
2b:78:e6:92:07:0e:7e:5f:d5:37:dc:2b:a2:a2:a5:db:d9:c8:
b0:56:38:0d:09:4b:16:a2:30:84:d1:5e:fc:89:d3:e9:2a:99:
b2:f6:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:07:56 2026 by rpki-client