Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/HoXHFk-P83RLwWt60s4wM0dY3jg.roa
File: HoXHFk-P83RLwWt60s4wM0dY3jg.roa (raw, json)
Hash identifier: tmMsaSFwRizLjwkQzWqg3SmEP5CmLlR6s6dKgnnYRYI=
Subject key identifier: 1E:85:C7:16:4F:8F:F3:74:4B:C1:6B:7A:D2:CE:30:33:47:58:DE:38
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982352810671E0C0309C9B978C0BB5A
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/HoXHFk-P83RLwWt60s4wM0dY3jg.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25098
IP address blocks: 212.107.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:35:28:10:67:1e:0c:03:09:c9:b9:78:c0:bb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e85c7164f8ff3744bc16b7ad2ce30334758de38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:e1:37:34:c9:4d:af:32:63:b0:31:3b:dd:
e9:93:b8:98:af:5b:52:89:1f:71:e0:66:6d:35:28:
3b:47:0a:9c:20:74:c9:5d:7a:11:ca:3d:61:48:2f:
bc:dc:23:c3:92:b2:e0:fe:cb:94:3d:0f:0d:b5:c2:
40:aa:bd:18:74:c8:c9:af:9f:9e:11:ab:e9:19:c7:
61:6e:b4:b1:82:04:cf:9d:c4:ac:f7:fa:b9:88:c5:
66:30:98:c2:cc:70:db:51:92:b6:93:d1:ab:35:08:
8e:6c:ee:e6:6a:79:fa:08:91:59:6b:ef:f5:16:b3:
ac:f7:f2:6d:19:5a:16:04:f4:94:3d:cf:cc:78:9f:
45:ba:32:e9:ca:a7:c8:09:18:c2:9c:07:7e:d3:90:
9e:9a:f2:c7:01:8e:65:e2:e3:d7:2a:ff:d4:4d:0b:
1c:9e:04:4b:29:da:86:17:b6:69:23:0a:80:db:b3:
78:7e:d8:4b:05:63:46:24:f4:1c:3b:c0:ab:d5:48:
cb:f4:61:1f:ef:49:d8:fe:70:9f:41:6e:60:03:e3:
46:b2:96:cf:2b:3c:59:dc:3c:5c:5b:e8:f5:c4:b2:
ce:44:88:2d:3c:59:45:f0:d1:94:d9:3b:28:4b:67:
29:2a:06:fa:15:a0:91:db:eb:4e:e1:bf:b5:83:c8:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:C7:16:4F:8F:F3:74:4B:C1:6B:7A:D2:CE:30:33:47:58:DE:38
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/HoXHFk-P83RLwWt60s4wM0dY3jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
93:4f:f9:30:54:4f:3b:0a:17:35:96:95:22:78:7d:59:e2:55:
4b:b2:d8:f1:e4:05:a9:7a:bd:d3:79:4e:30:85:d1:b8:b0:ba:
84:6a:6c:89:29:ba:69:6f:c6:4e:27:5e:70:f6:26:c5:dc:47:
66:21:27:d3:89:fb:de:99:d5:94:64:dc:37:99:c6:bf:f4:d1:
6f:62:9f:03:fd:a7:eb:e3:4e:e5:f6:16:dd:53:fc:ff:7d:07:
f3:96:e2:d1:69:b4:e8:b1:79:54:86:09:15:67:dc:af:85:d8:
52:9c:2f:25:d2:4d:e7:fd:d3:7a:84:28:c7:83:e8:ef:f2:96:
8d:91:b2:08:d7:2d:87:86:2a:8b:34:f0:67:b6:29:9a:cc:9d:
11:c0:39:ef:bf:f2:79:a3:01:ee:74:7d:06:54:5f:7a:be:3b:
24:2b:18:01:29:25:52:2c:e7:85:ce:49:d6:0d:15:ca:88:cd:
78:34:77:26:42:ef:60:06:8e:a8:08:3a:69:97:f8:cd:a6:73:
78:5c:5f:83:52:1f:50:14:b9:bc:2f:28:43:37:1b:d9:6d:9e:
68:50:ee:36:73:5b:ad:d0:d7:c2:e4:fe:58:1d:c4:3e:d7:ac:
73:48:c9:4f:97:7c:eb:a6:96:0c:58:aa:9b:7b:37:83:e0:ca:
77:08:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:56 2026 by rpki-client