Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Hr9qx05tlhT1ttqDnOh2FtD-Fto.roa
File: Hr9qx05tlhT1ttqDnOh2FtD-Fto.roa (raw, json)
Hash identifier: tica5EfaNyvX51PEF6He7AIEyTKbGIQiOJUY30P9/60=
Subject key identifier: 1E:BF:6A:C7:4E:6D:96:14:F5:B6:DA:83:9C:E8:76:16:D0:FE:16:DA
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825DD8A133FAF97D1A171E51D998F5
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Hr9qx05tlhT1ttqDnOh2FtD-Fto.roa
Signing time: Tue 25 Aug 2026 15:20:40 +0000
ROA not before: Tue 25 Aug 2026 15:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393942
IP address blocks: 213.139.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5d:d8:a1:33:fa:f9:7d:1a:17:1e:51:d9:98:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ebf6ac74e6d9614f5b6da839ce87616d0fe16da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:a6:8e:9a:76:4d:c4:ee:83:5a:ad:00:c8:
24:63:e7:13:bd:f5:1a:71:aa:71:a0:be:10:04:5c:
ff:70:9d:ae:8e:01:9a:06:94:5c:5d:1c:c3:53:2c:
c7:c6:ed:94:d6:5b:83:e0:6a:0e:8d:97:9b:4f:b5:
0d:42:82:4c:0e:b9:fa:ff:4e:77:ac:6c:9e:ad:3e:
53:d1:43:26:50:76:1a:07:26:9b:e1:cf:38:0c:41:
dc:48:5b:fb:9b:c8:9e:40:0b:66:86:20:78:27:77:
c6:4e:0b:19:e9:81:43:e0:24:4b:a9:17:bc:bc:ab:
36:5a:46:1b:9e:a2:dd:d1:f7:a8:91:e7:3c:4c:92:
e4:0a:f8:ac:b6:0f:11:52:b5:68:d5:2d:98:ec:67:
97:9c:02:4d:5a:1e:52:b0:16:e2:73:d3:3e:cf:ed:
f5:78:c8:fe:1b:ea:21:0a:76:d7:c0:1b:95:b1:e3:
5f:a6:eb:e2:ec:e2:6b:a9:de:dc:be:26:8a:21:31:
66:12:90:2b:eb:76:bf:55:03:cb:5b:5b:02:e7:a4:
c1:bc:40:6d:ad:9f:66:05:ae:9d:0d:a5:f7:93:f9:
6f:b0:2d:07:d4:8c:12:f1:a3:6f:b7:1b:20:7a:ea:
7a:b2:f6:de:f9:2f:85:e7:85:76:05:6e:a9:6d:97:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BF:6A:C7:4E:6D:96:14:F5:B6:DA:83:9C:E8:76:16:D0:FE:16:DA
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Hr9qx05tlhT1ttqDnOh2FtD-Fto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:64:42:ff:cd:fd:c8:bd:3e:6d:9f:fb:d4:2f:af:d2:f5:2c:
f3:18:f0:79:ec:6a:47:ae:d6:bf:a1:53:5f:1d:63:95:5a:9b:
5a:93:62:8f:b9:53:12:b2:c2:26:f3:85:d9:94:d7:c0:bd:c3:
54:68:02:8f:3e:04:5a:06:58:e6:a8:94:8d:b2:85:10:e5:5d:
d0:2e:d4:97:cf:45:97:ac:5d:49:5a:d1:a5:14:db:b1:81:8a:
66:be:c9:6c:95:33:d6:f2:0a:c0:97:a3:45:31:68:bd:00:f9:
f4:cd:e0:f8:c4:14:56:1a:e8:93:86:9e:17:b4:ac:9a:a4:78:
19:18:e8:75:ce:58:0b:bc:71:60:1b:30:a3:0f:57:9d:a8:81:
86:bc:39:36:7e:45:b6:d9:8e:5a:00:5b:50:1d:a5:aa:55:04:
54:45:8a:4e:03:22:fe:c7:a2:46:86:5f:3e:0c:1f:37:6b:80:
81:93:34:92:ed:29:41:da:91:cd:29:6f:f9:45:4f:0e:c0:f0:
0f:7d:a0:71:1d:7c:ad:aa:42:ea:78:22:fd:2e:78:69:51:b2:
ce:ab:11:83:a0:16:3a:0d:60:65:86:b3:cf:8c:87:24:2f:cb:
8e:3e:e5:07:f4:6b:b8:5f:78:7a:fb:91:b8:f5:f9:07:60:d6:
7a:7a:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:02 2026 by rpki-client