Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hMD0eUqqMrN5VAwN2B-Lp6AilCo.roa
File: hMD0eUqqMrN5VAwN2B-Lp6AilCo.roa (raw, json)
Hash identifier: phdFsjUyvjCBV5iar2Uh1D7ph4cNZ1ZECxpJr+7oXM0=
Subject key identifier: 84:C0:F4:79:4A:AA:32:B3:79:54:0C:0D:D8:1F:8B:A7:A0:22:94:2A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A048EE9EF69E5BEDA64EAA5BAF56253109
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hMD0eUqqMrN5VAwN2B-Lp6AilCo.roa
Signing time: Fri 28 Aug 2026 15:13:12 +0000
ROA not before: Fri 28 Aug 2026 15:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a0e:4001:8000::/38 maxlen: 38
2a0e:4001:9000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:ee:9e:f6:9e:5b:ed:a6:4e:aa:5b:af:56:25:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 28 15:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84c0f4794aaa32b379540c0dd81f8ba7a022942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:e1:1a:7e:2b:70:bf:d6:f3:97:1c:af:cc:
ee:4d:42:52:25:bd:5b:83:91:74:40:dd:b0:63:b1:
60:85:6b:1f:57:f2:95:2b:62:50:4e:75:f4:7e:85:
3c:6c:ea:40:84:b2:9c:11:47:d2:61:7f:83:ac:30:
8a:3d:94:77:23:ba:1d:d2:6d:0b:3a:c9:e5:87:93:
0d:34:16:13:89:c2:0b:b9:1a:6e:a9:e7:1f:05:7c:
37:cb:5c:f5:4c:3e:b1:d1:bb:f5:c7:46:c6:96:dd:
16:fe:92:7c:33:79:84:f3:00:fa:65:91:28:9a:b6:
50:7c:d3:b0:96:1b:78:1b:c2:85:fd:73:8e:dc:e4:
d3:06:e7:b3:ac:7b:59:84:86:a1:cf:11:65:0d:72:
55:2f:d9:0f:4b:66:5c:57:04:94:f6:8f:14:80:a9:
dd:56:3f:d3:5c:bd:0b:a4:98:83:ee:30:96:82:58:
0a:85:eb:92:13:e0:0e:82:3d:fa:90:eb:48:f6:80:
7b:23:1d:75:95:a4:d4:eb:78:3e:b8:dd:0e:3d:15:
bd:ef:87:95:b6:30:2e:ed:62:23:e5:5f:72:19:e1:
85:39:13:69:c5:27:62:8c:15:a7:6f:f4:93:0a:9e:
3e:c3:96:0d:56:4d:c1:fe:9e:f3:5f:d9:a2:8b:9d:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:F4:79:4A:AA:32:B3:79:54:0C:0D:D8:1F:8B:A7:A0:22:94:2A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hMD0eUqqMrN5VAwN2B-Lp6AilCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:8000::/38
2a0e:4001:9000::/37
Signature Algorithm: sha256WithRSAEncryption
30:40:79:c9:1e:e5:8c:93:78:f0:90:4e:4e:59:2b:11:b1:0b:
9f:2f:ca:16:ee:22:67:01:d0:62:ad:91:07:60:89:38:30:af:
b6:78:d7:dc:f5:3d:92:80:0d:9c:84:ed:a3:b3:6c:f6:07:fb:
2b:65:0d:26:88:83:04:6e:ef:69:e9:8a:73:28:78:73:b4:10:
3e:97:f1:34:55:23:72:40:86:87:8b:7c:1f:d5:08:2b:f8:4f:
af:38:e8:0e:59:20:bc:27:8d:9a:e8:26:3e:a4:42:d5:d6:44:
b4:90:33:e2:48:e8:27:4c:8d:e6:66:01:a6:10:b3:b3:c3:14:
9e:d1:38:45:2e:b7:46:6e:3c:78:e4:ed:07:ff:b9:09:32:64:
b4:34:9e:c8:00:a8:5a:50:8e:43:8d:98:33:18:ad:4b:a1:96:
0a:da:6a:54:17:aa:ee:47:76:95:d3:07:69:30:e2:48:58:dd:
ff:8a:4f:12:ef:60:15:f3:58:b8:25:29:67:b7:cf:d0:ef:6a:
93:66:1b:d8:0e:98:cf:fc:b5:5e:04:62:ab:f2:92:db:2f:65:
ba:3f:29:af:e7:49:e7:4d:a3:4f:3c:5b:04:6a:a9:1a:5b:ae:
f2:da:ac:e3:42:47:66:39:9d:67:f4:82:33:5f:57:5f:cc:93:
67:db:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:23 2026 by rpki-client