Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/hQnBy_6egLfetHW1ozt4dQakaY8.roa
File: hQnBy_6egLfetHW1ozt4dQakaY8.roa (raw, json)
Hash identifier: oHXJ6uY5ErSPlPxKJt5Zf3IdrvYB2gzRr6x3O8uDssg=
Subject key identifier: 85:09:C1:CB:FE:9E:80:B7:DE:B4:75:B5:A3:3B:78:75:06:A4:69:8F
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687A535CC9795D8A4C38A74DD983AD
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/hQnBy_6egLfetHW1ozt4dQakaY8.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60528
IP address blocks: 194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:53:5c:c9:79:5d:8a:4c:38:a7:4d:d9:83:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8509c1cbfe9e80b7deb475b5a33b787506a4698f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:0c:36:fd:63:de:28:b7:f8:fb:f9:c3:d8:
21:a6:7e:97:2e:30:90:62:4b:43:be:d4:ce:87:9f:
67:48:47:35:a1:b7:fb:47:ca:cd:66:be:2a:c5:9a:
54:da:1c:93:ed:15:79:38:a3:d5:1e:3b:d4:df:cc:
2d:cb:a1:2e:1d:f2:de:42:0d:89:b4:08:8a:5a:7f:
31:d7:41:86:6f:5a:ea:74:38:cc:d6:0f:d1:39:ae:
51:ec:56:c5:ff:48:71:42:2a:6f:1f:98:9a:5a:e5:
41:8d:a8:7b:be:1c:1f:d7:b1:c0:c9:46:96:28:41:
ee:df:c0:52:c2:58:38:01:c8:f1:bd:4e:92:40:ea:
9f:e7:2e:69:45:32:1c:c6:03:1b:72:a4:a7:6e:47:
a6:83:a9:fa:83:c2:4e:58:e1:38:f9:60:ac:7d:44:
e2:7f:7c:bb:5f:73:56:10:f4:b9:7c:46:dc:de:d8:
70:7f:18:a4:30:65:86:a9:7c:6e:74:fd:6b:ac:51:
6e:85:cf:af:dc:81:84:b5:3b:28:98:98:37:06:27:
6e:c6:53:e4:08:2d:ea:be:2b:99:d8:d6:e3:84:f7:
84:7f:45:24:7e:85:0d:bd:39:52:86:e4:d4:8f:92:
30:f0:77:dd:49:46:66:2d:9f:e4:62:23:dc:cf:fe:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:C1:CB:FE:9E:80:B7:DE:B4:75:B5:A3:3B:78:75:06:A4:69:8F
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/hQnBy_6egLfetHW1ozt4dQakaY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8c:ed:39:74:41:a1:51:dc:1c:a7:0b:5e:8b:28:fd:1d:bd:
ca:4b:c3:26:35:cd:0d:d9:46:29:ce:12:54:bb:42:39:b8:3d:
64:ec:4c:88:9e:7f:e3:97:36:63:39:9e:26:48:ff:ff:5a:b5:
de:be:cf:fb:11:4b:8d:b2:84:2b:2e:6f:3b:e9:f7:94:62:2c:
b9:7e:77:f3:12:26:01:c4:07:88:3c:ad:9c:99:eb:0e:7b:07:
02:38:1e:8f:e6:58:58:95:86:68:0e:54:5e:3c:5a:e3:e3:86:
85:72:97:da:7a:3b:3c:17:95:17:ab:e3:6b:e7:48:00:65:6f:
34:5b:17:b4:a8:af:31:0f:3b:ed:11:48:7c:e1:d9:73:87:dd:
f3:2c:98:e3:e8:9a:4b:11:3e:75:a3:8b:c5:04:86:d3:7a:79:
94:b6:f5:bf:d5:7f:57:f0:52:95:74:86:66:09:1f:eb:82:a2:
fb:dc:15:54:37:44:ab:b8:b4:cd:5a:98:07:58:5b:76:6e:e0:
1c:39:75:2d:f1:a8:a9:b6:24:fd:ab:78:00:8b:47:d7:ae:03:
04:d1:76:ab:3e:9b:07:0e:44:60:a1:83:33:0e:d7:8b:d5:48:
a0:d9:99:e4:62:5f:7f:25:22:73:2f:17:31:5e:9a:e1:5c:66:
c6:94:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:48:11 2026 by rpki-client