Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa
File: hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa (raw, json)
Hash identifier: 026nSWMHgQU56Hi3MyG9cbKQuQzStIRUijp25hynlD4=
Subject key identifier: 85:7F:2D:9F:93:D0:0F:54:37:C6:73:78:CC:15:03:83:64:DF:F2:53
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019EFF205596D9056A1BDAE5A60750E05ECB
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa
Signing time: Thu 25 Jun 2026 14:12:49 +0000
ROA not before: Thu 25 Jun 2026 14:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a0e:4005:ff10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:20:55:96:d9:05:6a:1b:da:e5:a6:07:50:e0:5e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 25 14:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=857f2d9f93d00f5437c67378cc15038364dff253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:b6:69:a7:15:10:39:c9:a6:09:c6:df:05:
e2:9e:20:dc:97:43:6c:b7:a9:72:3c:f5:94:f6:df:
25:25:1d:9a:cb:f9:56:b7:48:5f:95:8e:14:2a:5d:
aa:3c:66:15:30:9f:da:c5:84:c8:d1:13:82:9b:cb:
fb:ec:1a:fc:57:0c:75:88:02:60:92:24:f8:56:c9:
05:2b:34:8f:1b:60:d4:44:2c:62:98:09:13:5f:7d:
5c:6c:00:51:de:ce:73:38:93:32:70:ef:08:90:c3:
18:61:39:14:69:04:e7:75:4f:fe:59:74:76:b3:1b:
ad:03:d4:1b:4c:4d:66:b6:fb:29:14:3c:d8:95:e1:
e8:7a:c6:6e:22:55:6f:a3:be:7e:0b:a5:9e:b9:ca:
bc:4a:32:65:8a:63:d3:76:96:97:44:d9:37:60:71:
ae:77:71:2f:c7:21:a1:cc:b0:a5:0b:1d:a0:91:d4:
2d:4e:fb:10:3b:8c:eb:d1:a1:4d:2e:92:33:f4:9e:
74:65:ef:b5:61:a2:30:15:c6:56:8e:55:50:66:7e:
30:7e:7f:de:31:51:d8:24:c5:5e:8e:5d:bd:af:e9:
40:a0:9b:40:e6:d9:e0:cf:81:a1:04:3c:8b:3e:93:
5a:8a:f1:e3:69:7e:51:2e:42:02:f1:4a:be:60:f6:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7F:2D:9F:93:D0:0F:54:37:C6:73:78:CC:15:03:83:64:DF:F2:53
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff10::/48
Signature Algorithm: sha256WithRSAEncryption
cd:e9:75:71:8e:52:bf:b7:d0:55:0a:b5:e4:cb:8b:18:9e:bb:
fe:3e:30:62:59:92:44:21:6c:88:24:54:1a:41:0a:ee:91:f1:
94:db:43:ae:2a:5e:5c:a9:b8:06:0f:13:a1:83:94:4b:d8:57:
93:da:00:f8:19:d4:25:59:3d:8f:3a:b3:24:97:75:a2:70:7c:
ac:bd:6d:8a:f6:6f:66:43:66:6c:b7:8e:3b:97:94:14:c7:26:
75:c9:3d:24:b5:52:98:ec:7a:5d:01:66:82:9f:34:ee:53:9b:
bd:b7:03:fb:82:08:40:d0:86:1d:0f:b2:d2:58:16:24:2f:12:
04:48:92:02:c8:e9:6f:2a:2f:75:25:ff:7b:6d:2c:bd:bc:66:
7e:ae:f6:27:2b:1c:08:e2:35:aa:07:bf:fb:04:2a:81:20:d5:
c0:00:d5:bf:aa:d6:b3:e1:ab:b4:ad:23:64:b1:b1:48:1e:a5:
5a:3d:7a:4b:37:84:7b:e1:62:b5:27:af:85:d9:a1:80:f7:bd:
16:fa:f9:fc:c6:fd:5e:3d:28:05:1b:03:28:07:38:f8:39:d8:
d8:de:48:c4:60:c2:f8:ef:4b:46:49:93:ad:86:b7:3d:16:5b:
c2:48:b0:3b:18:2e:00:96:42:86:d4:ce:58:56:69:4f:d1:68:
64:c5:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:40 2026 by rpki-client