Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hHb0-5eJztinpzqAO5Okf57AMAw.roa
File: hHb0-5eJztinpzqAO5Okf57AMAw.roa (raw, json)
Hash identifier: 8Ig5ookt52nRfFS0NFm7oUCTb6Nq+zYlT9v56LZnErI=
Subject key identifier: 84:76:F4:FB:97:89:CE:D8:A7:A7:3A:80:3B:93:A4:7F:9E:C0:30:0C
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01A10DE3842AF7BB51756F71BD70E9A7E3C4
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hHb0-5eJztinpzqAO5Okf57AMAw.roa
Signing time: Mon 05 Oct 2026 21:06:16 +0000
ROA not before: Mon 05 Oct 2026 21:06:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218878
IP address blocks: 5.182.208.0/22 maxlen: 24
62.68.71.0/24 maxlen: 24
91.217.200.0/24 maxlen: 24
91.226.227.0/24 maxlen: 24
91.230.49.0/24 maxlen: 24
146.19.248.0/24 maxlen: 24
185.46.70.0/24 maxlen: 24
185.244.36.0/22 maxlen: 24
2a0d:2400::/29 maxlen: 39
2a0d:2780::/29 maxlen: 29
2a0e:1740::/29 maxlen: 29
2a0e:2000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:e3:84:2a:f7:bb:51:75:6f:71:bd:70:e9:a7:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Oct 5 21:06:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8476f4fb9789ced8a7a73a803b93a47f9ec0300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:fb:3c:0f:88:fa:56:d5:7c:25:c8:1b:5a:
8b:b9:50:88:a6:0c:3a:d0:64:69:b6:85:1e:d6:9d:
64:5c:57:d4:5b:31:a7:bb:49:c2:c5:6a:f9:da:bc:
1f:22:47:f1:73:29:5e:5f:fd:43:51:81:bb:ff:ae:
57:a2:36:4f:4c:53:2d:78:9b:40:93:b2:4a:0a:b2:
0c:e7:92:0c:af:21:71:e1:41:75:35:68:b0:c6:32:
65:ea:fe:e4:13:48:d3:cb:27:76:31:24:09:c9:52:
ef:8a:6e:66:46:72:f5:49:bb:75:36:8f:c4:f3:a9:
de:c8:65:93:fc:cd:06:cd:a7:36:13:f1:e6:d2:db:
fe:ae:33:c4:af:23:c0:3f:61:82:d0:a1:b4:41:71:
32:b1:a3:f9:35:44:50:fe:e7:65:f7:cb:42:2b:5a:
26:0b:8c:54:36:26:96:56:a6:44:4e:94:fe:a2:e4:
08:34:5f:31:6a:89:e6:6c:32:4e:8a:f8:f4:34:03:
df:fe:92:e3:bb:3d:73:32:e8:72:59:85:a7:aa:39:
a3:bf:70:c1:6d:38:6b:c5:69:d8:c2:e3:1f:aa:9b:
c4:b1:03:df:b6:67:65:c4:3b:b7:90:73:d8:a9:17:
76:44:cf:58:15:c8:0e:2c:6c:b2:c8:3a:8a:1c:fb:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:76:F4:FB:97:89:CE:D8:A7:A7:3A:80:3B:93:A4:7F:9E:C0:30:0C
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hHb0-5eJztinpzqAO5Okf57AMAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
62.68.71.0/24
91.217.200.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.46.70.0/24
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:1740::/29
2a0e:2000::/29
Signature Algorithm: sha256WithRSAEncryption
96:ba:75:3d:6a:89:76:12:c2:dd:89:28:d5:9d:d2:79:de:bf:
ce:e3:8a:d6:f3:e2:4f:30:19:3a:9f:c5:07:94:dd:f0:9d:eb:
68:1e:b9:b4:48:f1:16:1a:8d:76:13:d1:09:ee:c8:04:66:61:
95:f0:b8:4a:4b:54:1d:6e:fa:c3:4c:33:70:0e:67:fd:aa:21:
89:c7:73:bd:33:c2:e1:0b:ad:1e:c9:70:63:a0:3b:ad:f8:b6:
4e:f4:80:dc:71:40:e9:bc:43:cc:26:fb:83:2e:9c:21:54:df:
3b:a9:20:f2:e6:52:78:bd:1d:91:2d:7b:9b:31:5f:89:9b:f6:
3e:d9:26:4c:43:a5:94:3d:66:b2:a5:10:4c:31:12:48:f3:c5:
85:a8:f7:1d:dc:30:80:80:c2:d5:9f:7a:7d:fa:54:7d:9b:2e:
c9:80:a6:9d:05:fa:fe:2b:46:b8:b2:50:c6:9f:06:35:04:2a:
3f:e7:e2:98:85:3a:b2:a5:7f:cd:12:f5:f7:a1:37:ad:03:70:
d2:b1:aa:25:1c:68:6b:a5:19:05:ad:d4:d2:c0:cd:df:a7:b7:
47:ca:83:aa:60:46:7e:c7:c1:35:b0:24:fb:80:53:2c:b7:6a:
99:ee:c2:ce:99:07:0b:de:15:bb:1f:f3:f1:46:62:9a:ef:22:
02:9d:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:24:50 2026 by rpki-client