Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/hecGp9bE3OXegmm6EKqTc_xVRwE.roa
File: hecGp9bE3OXegmm6EKqTc_xVRwE.roa (raw, json)
Hash identifier: FvoYAy9wfae0X9IPccg5UIg9vsAupKwy6zzSGKk3tIY=
Subject key identifier: 85:E7:06:A7:D6:C4:DC:E5:DE:82:69:BA:10:AA:93:73:FC:55:47:01
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019E2B101DA55BBC9E3266CE2F6AD9ED1AE8
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/hecGp9bE3OXegmm6EKqTc_xVRwE.roa
Signing time: Fri 15 May 2026 09:55:36 +0000
ROA not before: Fri 15 May 2026 09:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.232.97.0/24 maxlen: 24
87.232.110.0/24 maxlen: 24
109.122.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:10:1d:a5:5b:bc:9e:32:66:ce:2f:6a:d9:ed:1a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: May 15 09:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85e706a7d6c4dce5de8269ba10aa9373fc554701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:8e:14:ad:9c:e1:83:34:1a:90:08:73:c3:
1e:e8:1a:80:84:b5:6e:8f:68:67:31:d9:16:08:02:
e8:35:c6:42:a9:44:cd:7b:1e:23:b2:8c:f9:14:24:
ef:a9:a2:ea:67:bf:e4:ba:e0:b7:ac:5e:c8:ff:ee:
2c:0f:6f:5f:15:72:d2:aa:44:98:c8:da:e9:87:f1:
38:54:81:b3:70:81:81:28:e4:bc:d3:3d:9f:f7:68:
20:f0:1a:bd:ff:07:59:3e:3e:1e:28:cf:12:41:e1:
41:ff:0a:c2:1d:09:6a:f7:b0:fb:e8:6c:96:2e:35:
c0:1f:19:44:49:a5:17:af:ce:89:ab:58:1e:59:bc:
d6:76:57:7d:53:90:2a:be:d5:b1:0f:1d:18:45:47:
0a:b9:24:a6:3a:fd:f9:09:4f:f5:35:c5:ed:f3:13:
9e:b6:05:56:8b:e9:f0:bf:a7:40:74:f8:bc:bd:19:
00:aa:52:2f:2d:07:98:21:28:7b:2f:0c:69:66:f9:
cf:8b:5b:d0:6f:c8:7f:cc:12:f1:53:c2:8f:c0:a3:
0f:a1:f6:73:12:47:63:96:3d:35:4d:82:3e:d9:02:
9b:28:ea:37:07:86:d0:78:69:fb:b9:cc:01:1c:d9:
00:83:b6:66:37:9d:10:4e:96:90:d6:b5:9e:1f:6d:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:06:A7:D6:C4:DC:E5:DE:82:69:BA:10:AA:93:73:FC:55:47:01
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/hecGp9bE3OXegmm6EKqTc_xVRwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.97.0/24
87.232.110.0/24
109.122.10.0/24
Signature Algorithm: sha256WithRSAEncryption
99:21:84:3a:29:de:49:ad:31:bd:98:0b:d5:c3:0f:74:ec:aa:
95:85:07:d3:56:37:06:7a:23:0c:4a:ff:e9:f2:94:df:9f:6a:
98:d9:9f:45:17:cc:78:c5:5c:c0:02:2b:37:51:18:a1:a8:58:
b5:37:15:1e:e3:f9:55:50:1d:1a:82:04:c1:48:11:d0:64:4f:
cb:aa:3c:cb:9c:c9:04:73:d2:92:69:42:4f:f5:60:51:f2:31:
54:3d:c6:92:f2:1d:8e:8f:27:06:10:69:3a:06:8c:9c:3d:85:
4f:27:58:97:e4:67:64:ee:b3:17:3a:cc:53:02:d9:76:33:95:
01:33:de:41:ff:27:7b:9c:5d:fd:85:a9:ff:3c:46:7e:bc:6c:
2d:f7:d3:03:ae:7e:7b:d3:c1:af:1b:92:6a:8b:35:52:c7:da:
64:e2:1b:c5:63:e8:56:ef:b8:23:0d:e8:78:35:d2:ec:0d:33:
38:2e:3b:a1:0f:e1:a7:3a:ff:a2:6b:e7:78:d5:88:be:95:b2:
18:d9:3c:26:27:67:45:4f:2a:1d:e8:cd:25:e7:44:63:0a:bb:
35:00:aa:75:bd:5f:f2:4b:33:0c:f8:fa:2f:35:30:68:2f:8e:
ed:fc:0e:e9:2d:cb:f5:a9:08:72:8b:72:e2:6d:00:c8:61:3d:
7f:7d:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 06:27:48 2026 by rpki-client