Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hnv647O1-KJ8QV2SREEDaX6aqlM.roa
File: hnv647O1-KJ8QV2SREEDaX6aqlM.roa (raw, json)
Hash identifier: 08TFHjXapymw/0frRzQSSWgmtyjmyC+hnqjOkWGHAMg=
Subject key identifier: 86:7B:FA:E3:B3:B5:F8:A2:7C:41:5D:92:44:41:03:69:7E:9A:AA:53
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A177353DC946F25BA6FEC1BC589B8283E5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hnv647O1-KJ8QV2SREEDaX6aqlM.roa
Signing time: Mon 26 Oct 2026 07:55:40 +0000
ROA not before: Mon 26 Oct 2026 07:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402671
IP address blocks: 87.84.16.0/24 maxlen: 24
212.135.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:35:3d:c9:46:f2:5b:a6:fe:c1:bc:58:9b:82:83:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 26 07:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=867bfae3b3b5f8a27c415d92444103697e9aaa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:f7:6f:01:49:e4:30:4d:ea:86:52:c4:94:
fb:a8:8a:d6:f3:12:95:62:ab:fa:13:65:6a:04:e9:
2e:bd:4c:68:44:a2:c6:a8:e0:a2:37:cb:4c:f3:3d:
7d:50:2c:50:39:b8:8b:21:37:42:ba:95:4d:0e:e1:
3e:0d:94:be:19:b7:48:6b:38:a6:e5:d7:5f:b7:59:
65:56:7b:15:a2:31:81:0d:c2:ea:55:0f:74:ca:7f:
a7:88:1b:7a:bf:b7:8c:e3:4c:67:93:3c:be:e6:40:
32:1b:d3:cf:13:77:54:10:81:2d:15:12:34:da:1d:
74:f8:2f:41:bd:f0:ec:bf:6c:13:e6:f9:92:93:46:
99:2a:87:43:14:e1:a3:f6:b0:17:be:38:83:82:51:
bf:a8:99:27:d4:68:d4:47:8b:16:98:7c:c7:cd:50:
bc:5d:2d:eb:62:f7:3c:36:ef:4b:d8:62:b8:eb:14:
2f:bc:5c:a6:1d:2a:e4:45:86:94:3b:d8:6a:a8:d5:
e1:af:1a:98:48:fb:35:36:8c:7d:74:55:cc:22:ef:
e1:52:0f:0a:2d:fe:b8:77:a2:c7:f7:ef:7f:41:dd:
3d:08:38:a5:01:a9:3a:d4:d9:7d:88:bf:50:52:ae:
bb:4a:7e:87:b9:83:e4:ae:c8:77:5b:0f:39:0b:4d:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:FA:E3:B3:B5:F8:A2:7C:41:5D:92:44:41:03:69:7E:9A:AA:53
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hnv647O1-KJ8QV2SREEDaX6aqlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.16.0/24
212.135.194.0/24
Signature Algorithm: sha256WithRSAEncryption
96:60:b0:60:af:e7:62:4e:4f:a8:50:d6:88:db:f3:66:3e:3b:
50:92:af:7b:79:4f:ff:bb:0a:c3:d8:05:09:44:e9:0e:21:c6:
ed:da:76:44:38:11:c3:40:de:8e:b5:e2:e8:7f:33:7e:ca:45:
69:f3:92:50:72:e1:3d:ae:c7:3f:53:d4:ad:fb:bd:87:17:c3:
5a:59:df:9b:0b:7c:7a:b4:cf:26:a7:42:77:72:ab:ed:10:be:
d0:50:b6:d8:78:7a:61:c7:ab:a5:6a:77:cf:a4:28:95:c0:d8:
0e:0d:18:b6:5a:62:6b:37:d3:17:59:1b:5b:d6:43:47:9f:84:
68:89:0e:f1:71:45:cc:dc:de:67:fc:4d:c7:59:ae:6f:97:83:
ba:ad:19:b0:59:be:70:6b:a8:ba:5a:6d:3d:61:f0:ec:0a:10:
8f:65:16:ab:c2:8b:e1:78:30:8f:39:80:b0:4a:a4:d6:d2:2c:
30:da:95:89:73:27:58:64:6c:ba:2a:4b:23:87:1c:db:13:ca:
3c:ab:26:6b:bd:a1:55:53:4d:66:e0:72:3b:30:9c:a0:7f:ec:
2c:22:95:06:f4:a9:98:e8:8e:53:c5:cf:f3:9d:32:49:d3:58:
c2:cd:86:21:68:83:da:67:88:2b:76:24:f2:d9:54:aa:1e:fd:
47:e7:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:31:28 2026 by rpki-client