Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rHvKAwR3zWBovzIJMnhuAXLeiRk.roa
File: rHvKAwR3zWBovzIJMnhuAXLeiRk.roa (raw, json)
Hash identifier: fuVr9v83W4KJWMdIaHzem/XP2wuWUJlxoo22jZjZt7U=
Subject key identifier: AC:7B:CA:03:04:77:CD:60:68:BF:32:09:32:78:6E:01:72:DE:89:19
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0F00D0589ED84F7D46FECBEE16C4C43DE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rHvKAwR3zWBovzIJMnhuAXLeiRk.roa
Signing time: Wed 30 Sep 2026 02:03:00 +0000
ROA not before: Wed 30 Sep 2026 02:03:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218591
IP address blocks: 94.249.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 16:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0d:05:89:ed:84:f7:d4:6f:ec:be:e1:6c:4c:43:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 30 02:03:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac7bca030477cd6068bf320932786e0172de8919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:cd:1b:6e:ea:cd:7a:1c:16:25:ce:4f:12:
0d:aa:01:12:a9:e3:8a:39:f4:84:15:ba:a4:8f:af:
7b:b3:6f:ad:b6:89:05:c4:d6:3c:e5:e3:b3:aa:38:
df:53:0a:60:08:48:8e:89:c7:80:68:80:45:90:69:
a9:f9:7c:a8:bb:b6:15:84:84:f1:fb:99:4f:f1:bc:
98:e8:5a:56:4a:92:1a:32:6c:42:8b:90:2c:da:fe:
97:6a:c0:12:ad:86:29:33:c0:26:5b:2c:aa:0e:bd:
fb:12:73:61:5b:1b:45:06:09:28:9e:52:de:ca:7a:
a2:28:23:a7:58:6a:46:4d:12:34:b1:44:74:d6:dd:
95:fe:95:f0:35:7c:2e:65:51:a3:e4:7c:56:79:89:
3e:d0:2a:1f:fa:af:17:91:70:d8:90:85:8a:20:08:
64:9e:5c:7f:20:83:fd:7a:65:78:99:d8:3b:92:78:
4f:85:65:64:8a:7b:6f:47:e6:24:f5:f1:55:4e:94:
b8:62:0c:71:4a:e9:26:b8:f9:39:fb:2c:a1:4c:e9:
17:82:c8:7d:8c:1e:8b:b9:4c:01:de:3d:e1:52:47:
7d:4f:24:c9:9b:40:a1:27:d2:24:02:86:63:a2:af:
f5:32:6f:98:b7:9b:5a:2b:9c:7a:2d:cd:b8:fe:3a:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7B:CA:03:04:77:CD:60:68:BF:32:09:32:78:6E:01:72:DE:89:19
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rHvKAwR3zWBovzIJMnhuAXLeiRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:6d:9c:3b:a4:aa:24:4f:ff:9c:03:0a:ab:23:fd:52:04:
66:28:0b:27:ab:62:99:2b:6f:93:41:bb:93:5e:44:73:f3:93:
73:a3:26:8f:d7:f5:23:47:b1:9c:88:55:c8:36:3d:60:12:da:
00:4c:0d:c4:ce:b8:10:13:b0:de:52:d5:b2:e8:7d:66:e3:bb:
85:56:1a:b3:9b:b0:9d:a9:69:6d:a6:3b:a2:07:f3:53:01:c0:
ab:45:68:66:79:34:17:d6:6a:d1:cf:f4:5b:e7:f7:80:a3:e0:
02:82:e8:0c:c2:5f:c3:75:e2:5b:45:74:cf:59:45:6a:b5:e6:
2c:76:12:d4:a4:98:6d:01:48:e1:94:a5:50:ee:db:c6:26:fd:
d8:e1:63:84:c9:be:71:65:0a:91:f9:2f:4e:62:09:69:39:d6:
21:71:fb:09:a3:af:9e:c4:cf:2c:fa:ab:8c:84:68:3a:be:8c:
a8:5b:c0:f0:f7:7e:7e:e9:6a:26:de:e3:7d:e3:03:82:5c:2e:
20:5b:89:ad:4c:18:d1:e2:e1:ed:92:0a:20:5f:79:bc:a1:4e:
4e:74:77:28:62:1f:22:93:7a:9c:c9:21:a0:55:a6:dd:73:b2:
22:81:d0:ba:3e:aa:66:c9:22:c7:b9:7a:89:71:59:91:dc:b4:
3c:ef:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:19:55 2026 by rpki-client