Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/hs1beEhuYoBlM_xc47tGTfAWOPc.roa
File: hs1beEhuYoBlM_xc47tGTfAWOPc.roa (raw, json)
Hash identifier: AsM6K9Le1Vf3LcgC0+eBdM/RkUII4fKEVrX2R3UIAF0=
Subject key identifier: 86:CD:5B:78:48:6E:62:80:65:33:FC:5C:E3:BB:46:4D:F0:16:38:F7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F2694584B5AE7BF932FB03838EFB4BDC5
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/hs1beEhuYoBlM_xc47tGTfAWOPc.roa
Signing time: Fri 03 Jul 2026 06:04:43 +0000
ROA not before: Fri 03 Jul 2026 06:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 83.98.192.0/24 maxlen: 24
85.92.140.0/24 maxlen: 24
85.222.198.0/24 maxlen: 24
213.189.16.0/24 maxlen: 24
213.214.100.0/24 maxlen: 24
213.247.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:58:4b:5a:e7:bf:93:2f:b0:38:38:ef:b4:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86cd5b78486e62806533fc5ce3bb464df01638f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:46:34:cd:9c:27:d6:45:f0:1c:28:d7:33:
6c:9a:2c:cb:af:12:df:2a:b0:a2:0a:10:19:68:e0:
e1:f0:52:d6:a9:21:63:7f:5c:4c:dc:35:70:71:6e:
eb:d3:4f:b4:8d:8c:42:d4:80:53:23:27:ad:1d:8d:
12:74:3b:9b:29:f9:8a:1d:13:c8:88:e8:26:8e:9f:
22:cb:ae:80:ad:b0:ec:17:4a:60:0c:24:f5:c1:d3:
5c:db:94:15:ef:9c:f5:d9:ca:8b:3d:da:36:b2:00:
d0:78:26:0b:74:0a:a4:a6:98:0e:f4:af:66:b2:b8:
8f:e2:9e:d1:50:95:c3:b5:6a:77:d3:49:4e:6d:fa:
2e:52:a2:36:b2:a6:d0:ff:2f:eb:ef:c7:8a:c8:ed:
03:d2:88:b6:ab:5f:41:e6:12:61:9e:9f:29:70:9a:
37:f2:43:c5:7d:3e:53:a1:89:ea:b5:92:5a:b4:d6:
d7:b7:8e:37:42:6d:60:45:85:79:91:b4:8e:f7:91:
03:68:e3:e3:78:57:36:17:df:4b:c5:88:fe:c7:5d:
44:09:a1:f6:ee:a6:9f:61:b4:67:dd:a0:c8:d3:82:
73:ab:8c:b9:68:c3:17:af:9d:c5:2b:8e:fd:d8:ba:
c9:a9:73:70:90:40:34:e5:56:9b:fc:13:f8:e5:ac:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:5B:78:48:6E:62:80:65:33:FC:5C:E3:BB:46:4D:F0:16:38:F7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/hs1beEhuYoBlM_xc47tGTfAWOPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.192.0/24
85.92.140.0/24
85.222.198.0/24
213.189.16.0/24
213.214.100.0/24
213.247.45.0/24
Signature Algorithm: sha256WithRSAEncryption
57:46:93:02:84:2c:11:70:41:e4:02:e1:8f:33:7d:0a:ad:d4:
b3:6c:3f:d1:ee:52:19:8e:af:7f:91:aa:6a:7f:cb:de:bc:8c:
a8:7d:c7:c9:56:c9:2b:20:a5:d1:c7:c7:11:0f:a6:ed:ae:fc:
37:5c:ab:ee:a9:5d:e3:66:ee:18:b9:ae:5d:49:79:7a:d5:37:
62:db:03:ec:c1:8c:5c:de:23:8f:db:7d:bb:02:00:f8:1b:ad:
2f:4e:bd:7a:dc:5a:cd:fa:db:37:ee:d4:82:d8:2b:29:61:9a:
9c:87:72:76:2b:01:e8:7f:1d:7c:7b:31:2c:56:4b:cf:58:5d:
8b:0c:b2:cf:bb:df:46:07:c6:bb:a4:56:2a:f9:d2:00:38:1f:
ec:6c:c3:16:85:40:75:ec:39:04:77:e5:b6:07:09:47:14:cf:
dd:02:22:68:59:39:89:5a:a2:89:d8:74:3f:98:99:de:08:f9:
11:b4:45:fc:b0:59:d8:eb:db:12:c8:63:ab:4e:a2:a7:30:ff:
b9:f2:04:a0:56:f2:03:71:71:ae:cf:39:cf:57:b8:7a:7a:c4:
fb:b2:d6:20:c1:f0:a4:57:cf:49:f5:1d:1d:a5:6d:03:40:0d:
83:cb:42:03:0c:c8:79:70:83:88:5c:a4:ea:bb:75:6b:47:75:
3c:dd:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:27 2026 by rpki-client