Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hQDtWiN_Sr5_Jw_7MSL8KB4GDac.roa
File: hQDtWiN_Sr5_Jw_7MSL8KB4GDac.roa (raw, json)
Hash identifier: 2g6jWruf2KhjwuFceqA/ae0CgjO0uCwl2Bz+nWtkTv8=
Subject key identifier: 85:00:ED:5A:23:7F:4A:BE:7F:27:0F:FB:31:22:FC:28:1E:06:0D:A7
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 01A034B1E0724AE831258EB41547EEB60A11
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hQDtWiN_Sr5_Jw_7MSL8KB4GDac.roa
Signing time: Mon 24 Aug 2026 16:54:27 +0000
ROA not before: Mon 24 Aug 2026 16:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9515
IP address blocks: 2a0b:a500:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:b1:e0:72:4a:e8:31:25:8e:b4:15:47:ee:b6:0a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Aug 24 16:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8500ed5a237f4abe7f270ffb3122fc281e060da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:09:c0:97:eb:9f:82:b3:10:a2:75:1b:c3:
d1:84:37:29:03:31:bd:6e:ec:68:b1:da:4d:ab:3a:
5b:c0:5e:9b:e2:dd:3e:71:2f:26:04:79:7c:cd:db:
ad:5e:c7:89:e7:9c:0d:69:bf:e5:d0:0c:51:fb:2e:
d4:80:f6:44:41:98:2f:a4:3e:dd:fc:a0:85:48:99:
38:b6:33:da:51:2f:65:50:12:a2:12:1d:cd:ec:d2:
0b:cf:97:f8:af:1c:47:ae:5f:1b:9d:3a:11:d1:48:
2b:18:95:57:ae:ea:4a:d9:5c:ad:10:0c:2a:96:cf:
92:cc:25:0d:fc:3b:02:31:1c:26:bd:83:79:6b:1a:
97:ed:ef:c2:e0:f1:00:e8:20:8c:96:51:e3:4d:a7:
9c:a1:50:59:d1:25:9d:af:8e:fd:29:8c:a6:d3:10:
50:6e:4b:83:3c:ee:67:0d:fe:10:7e:e5:00:a7:10:
22:0e:1c:b4:a9:9b:0d:60:0d:a0:ae:82:28:5b:ea:
5a:8f:32:7a:2c:96:15:85:c5:5c:bf:35:75:a4:51:
1b:9f:b9:d3:98:88:e8:47:7a:28:2c:06:78:17:07:
5c:d8:2a:47:10:f2:7b:e3:45:72:6b:d6:61:eb:b4:
f9:1b:8b:99:95:3b:30:2f:67:ac:7d:86:61:a5:ce:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:ED:5A:23:7F:4A:BE:7F:27:0F:FB:31:22:FC:28:1E:06:0D:A7
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hQDtWiN_Sr5_Jw_7MSL8KB4GDac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a500:2000::/40
Signature Algorithm: sha256WithRSAEncryption
59:7a:1a:88:37:91:8d:b2:60:ec:b5:f7:5a:e1:bf:00:f5:4a:
05:e4:35:27:79:cd:bd:14:cb:92:ab:c1:36:5a:47:24:23:4c:
3c:0e:e0:ce:2b:49:93:24:52:de:e7:07:6b:4a:9d:37:d4:20:
89:d8:0f:44:32:73:26:88:73:2a:a7:8f:0b:87:85:74:4e:c6:
3b:85:00:16:81:6a:cc:bc:b0:cf:97:13:ef:53:b5:2c:77:a0:
d2:6a:9f:1b:a4:ea:e8:c3:d3:61:8d:20:5d:ba:2b:34:0b:e2:
2d:62:b8:39:e7:61:0d:7d:2b:98:74:ba:63:b1:34:c3:76:b0:
9e:5a:04:8a:8d:12:e5:12:03:2d:60:f0:58:ec:96:b9:2d:78:
8e:2b:f4:a9:e9:58:d9:94:73:7d:37:69:04:cd:99:91:fa:75:
ed:0b:a4:84:36:b3:1d:22:dc:9f:ac:ce:2c:ec:c5:42:a5:97:
38:09:60:4a:9b:cd:7d:16:01:5a:ed:4f:74:15:4a:21:c8:66:
e9:06:a9:e6:d4:ed:ca:2c:cf:8f:a9:0d:0a:27:30:22:a5:47:
29:ca:ec:17:fb:da:a4:0f:a6:29:5b:73:fa:0c:70:93:cc:7f:
7b:4e:a0:95:bb:e7:be:0e:42:db:77:b0:cb:11:71:78:29:57:
c5:0a:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 13:40:57 2026 by rpki-client