Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/hCw1qjN_O1SaJi8aTamX8ZgP-R4.roa
File: hCw1qjN_O1SaJi8aTamX8ZgP-R4.roa (raw, json)
Hash identifier: U27PAUZJYLFVv1O7LFRzHAbfIJHJM/VIlG2VjywheWM=
Subject key identifier: 84:2C:35:AA:33:7F:3B:54:9A:26:2F:1A:4D:A9:97:F1:98:0F:F9:1E
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 01A0FE0B55D09A6B583AA7A7E20241B658CE
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/hCw1qjN_O1SaJi8aTamX8ZgP-R4.roa
Signing time: Fri 02 Oct 2026 19:15:50 +0000
ROA not before: Fri 02 Oct 2026 19:15:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210070
IP address blocks: 185.242.76.0/23 maxlen: 23
185.242.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:0b:55:d0:9a:6b:58:3a:a7:a7:e2:02:41:b6:58:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Oct 2 19:15:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=842c35aa337f3b549a262f1a4da997f1980ff91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:3b:01:09:cc:c8:4b:af:8f:11:c1:bf:e5:
ef:40:6e:ad:28:13:f9:c9:dc:c3:40:12:37:e9:57:
6e:cd:71:3e:d2:ad:8c:2c:5a:80:ef:e4:99:57:92:
4a:92:04:b1:4c:e8:93:97:3e:dc:04:29:3e:93:72:
19:be:68:01:32:8d:46:dc:7c:d8:7b:08:5c:2e:73:
32:dd:61:5d:25:23:be:66:0c:5b:a6:21:09:cd:14:
e0:f4:63:21:f6:dc:8c:38:ce:b4:60:5d:6c:c9:49:
05:4f:c6:90:90:f0:8f:6b:9d:af:2b:07:e2:b2:0d:
b7:a6:31:35:18:f1:89:55:6e:3c:07:3a:25:42:80:
76:1b:e9:df:30:d4:b5:a4:46:7b:1f:3f:05:a3:87:
db:06:53:7a:12:a6:6e:31:98:13:e0:41:df:09:4f:
33:fc:84:67:93:f3:5b:e9:10:c5:ce:63:57:80:2c:
1b:ca:ea:5e:42:8e:f7:a1:0d:ac:cb:1e:84:a7:0a:
62:89:ff:2b:8d:1b:91:ca:4e:66:0a:a7:6d:24:35:
aa:b8:1a:fb:a8:9a:e7:e7:d0:c5:8e:ad:2b:69:4e:
62:4c:61:59:3b:3d:76:7a:02:84:98:b1:36:2c:b4:
bd:61:f9:73:b5:40:b9:19:32:d0:c9:4d:3a:b6:23:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:35:AA:33:7F:3B:54:9A:26:2F:1A:4D:A9:97:F1:98:0F:F9:1E
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/hCw1qjN_O1SaJi8aTamX8ZgP-R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.76.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f9:2b:5a:8a:77:b7:3d:f5:3c:47:25:63:ce:0c:82:9c:ee:
71:24:8c:ae:a8:ef:e9:c7:0e:fd:4f:c2:07:52:08:de:3a:31:
e8:28:bb:34:c2:ef:c9:11:00:ed:5b:bd:34:d7:07:10:92:e2:
7e:77:da:b5:16:1a:ef:0d:e1:7f:67:7e:c1:4b:69:42:5e:fc:
6f:ab:9a:30:33:a6:26:b7:bf:a2:ba:1e:9b:ef:66:e3:5d:28:
ad:de:78:3c:a0:c5:8f:fc:ce:5d:42:da:72:82:99:f0:72:ca:
c5:cd:6f:07:03:87:cc:b8:79:ea:c2:33:bd:ff:4a:9a:42:cb:
40:f8:ef:96:3c:24:1a:18:dd:3d:43:de:92:05:f3:28:9b:af:
02:20:92:99:2d:c7:6b:83:b5:e0:27:f8:16:33:1f:7b:89:f1:
75:9d:7f:5b:4b:35:28:79:81:58:68:f1:e8:3c:8d:6f:ea:33:
0a:9f:59:68:8d:c7:39:a1:8e:89:22:a3:3e:b6:e1:54:c6:1c:
54:96:ae:7a:99:5c:1c:0a:9a:82:1b:6c:73:0c:9d:7f:a7:a0:
52:7d:da:bd:8a:5f:b2:65:10:ef:4d:c1:c7:4c:99:0a:87:98:
ec:f4:55:28:f0:33:40:40:9a:3d:83:28:6c:f1:48:02:a5:bd:
7f:38:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:01:52 2026 by rpki-client