Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/hkG-YGBM-MbzznRrpltgpHNZPLM.roa
File: hkG-YGBM-MbzznRrpltgpHNZPLM.roa (raw, json)
Hash identifier: wRqq2PIQvkMZTX1tGRuU+U8jnKVNokqysUNErDHlJPM=
Subject key identifier: 86:41:BE:60:60:4C:F8:C6:F3:CE:74:6B:A6:5B:60:A4:73:59:3C:B3
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 01A088BDAE009B3D3D1DD25E91AE9A4A329B
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/hkG-YGBM-MbzznRrpltgpHNZPLM.roa
Signing time: Thu 10 Sep 2026 00:35:27 +0000
ROA not before: Thu 10 Sep 2026 00:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35614
IP address blocks: 31.128.168.0/23 maxlen: 23
31.128.168.0/24 maxlen: 24
31.128.170.0/23 maxlen: 23
31.128.170.0/24 maxlen: 24
94.124.166.0/24 maxlen: 24
193.105.7.0/24 maxlen: 24
2a0c:29c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:bd:ae:00:9b:3d:3d:1d:d2:5e:91:ae:9a:4a:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Sep 10 00:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8641be60604cf8c6f3ce746ba65b60a473593cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:85:97:58:84:62:a8:1f:a9:4f:5d:ce:26:
27:c0:fc:af:07:4c:a4:f2:30:ed:d6:25:3f:50:18:
82:d3:5f:56:1b:ab:2c:29:5d:8b:80:87:09:f8:04:
75:7c:90:b0:02:81:03:a9:e1:d7:85:b3:eb:f8:63:
a0:77:c4:fd:0a:e3:76:1d:64:d0:aa:95:5a:3c:69:
95:e8:67:ed:44:e0:3e:fa:25:06:d7:66:23:a4:d2:
69:b8:b5:e7:d6:a8:b0:38:b5:e9:01:4d:68:3f:8d:
8d:db:e0:55:62:96:13:da:1d:bf:3e:a1:d7:5f:31:
13:dc:3a:89:7e:a3:3e:ec:5e:11:0c:3d:32:0e:5a:
ac:64:b6:48:fd:1f:e7:ac:07:d2:f9:55:af:24:8d:
15:f2:05:fa:1c:2a:37:3f:b1:27:a9:c0:e4:fe:78:
3c:dd:46:34:ef:da:25:2b:2d:2f:12:e4:32:2d:c3:
64:cd:f1:b0:1c:09:c2:8e:7e:01:b2:00:bc:ae:e2:
7c:f2:48:da:48:fc:e5:6d:ae:4d:9c:8e:22:4b:ff:
56:1d:75:9f:68:b3:f8:e1:5d:e2:a0:24:a2:24:c6:
28:85:ed:db:6e:7e:75:33:33:a9:14:53:c5:35:a4:
65:da:bf:41:5c:2f:bc:43:2e:e6:16:bc:65:55:e0:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:BE:60:60:4C:F8:C6:F3:CE:74:6B:A6:5B:60:A4:73:59:3C:B3
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/hkG-YGBM-MbzznRrpltgpHNZPLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.168.0/22
94.124.166.0/24
193.105.7.0/24
IPv6:
2a0c:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
87:f8:9d:a7:1c:ee:f1:69:7c:5b:7e:6c:6d:3a:81:d1:8b:26:
52:8a:33:de:57:11:90:88:21:5b:35:2f:8f:49:61:f3:77:25:
b6:af:45:45:9e:1e:cc:88:29:f6:0c:9b:56:7f:33:6e:a4:ed:
e7:57:2b:e0:6e:92:b2:c4:ce:bc:6e:ed:2b:41:a1:ef:87:b3:
c0:55:0c:db:e7:f3:a8:9b:37:8f:74:b0:ed:41:a0:74:30:de:
8b:a6:74:f1:3c:fb:c5:8c:ea:02:67:be:29:98:f8:ba:1b:16:
53:94:fa:eb:36:4c:99:0c:b6:6a:8c:5f:b1:08:a5:50:d7:41:
52:ad:f7:4b:64:66:e6:f5:9e:4a:14:07:b8:28:45:9c:cc:d4:
8c:2c:34:09:f3:df:e9:78:32:aa:7d:20:0b:a7:86:e2:6a:fb:
af:53:28:39:e1:1d:d5:76:61:dc:59:0b:f8:83:a8:c8:12:ec:
0c:9b:cc:71:d3:11:20:ff:97:7f:1a:16:78:af:91:dc:d7:dc:
09:95:ad:44:51:5d:ec:dc:57:97:dd:bf:e7:a8:7f:bc:81:d2:
23:4d:2b:ac:1f:6b:bd:70:59:91:6e:3b:97:48:1c:25:40:5a:
37:7f:08:c7:95:2c:74:a7:f3:0f:5c:d7:9b:57:a9:76:50:b7:
d1:4d:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:05:16 2026 by rpki-client