Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa
File: hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa (raw, json)
Hash identifier: SQ1vYGdBYZkb25PtDITYpjzEq+82KcEcQFwySA/C4GA=
Subject key identifier: 86:17:10:E0:BE:1A:02:A0:9F:06:BE:53:48:DD:4E:A2:5E:3C:94:0F
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 01A08145584E96590BC0FB4159E121F2728A
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa
Signing time: Tue 08 Sep 2026 13:46:40 +0000
ROA not before: Tue 08 Sep 2026 13:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21221
IP address blocks: 2.56.224.0/23 maxlen: 24
2.56.226.0/23 maxlen: 24
46.182.176.0/21 maxlen: 24
178.255.192.0/21 maxlen: 24
185.70.208.0/22 maxlen: 24
185.214.148.0/22 maxlen: 24
217.18.64.0/20 maxlen: 24
2a00:19c0::/32 maxlen: 48
2a09:d240::/32 maxlen: 48
2a0b:9cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:45:58:4e:96:59:0b:c0:fb:41:59:e1:21:f2:72:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Sep 8 13:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=861710e0be1a02a09f06be5348dd4ea25e3c940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:04:70:02:c9:22:93:bc:6b:d1:2a:20:5e:
b0:0f:92:4f:5b:84:75:06:14:6f:d9:3c:f2:1d:e5:
6f:06:d8:29:cd:f2:dc:67:fe:26:90:86:40:34:37:
b2:95:0c:43:b2:9e:fd:8d:7d:09:be:00:1b:65:11:
90:db:b9:56:6b:16:f0:86:21:13:5b:18:33:06:89:
80:44:da:62:28:46:a2:2b:93:31:51:ad:c3:a8:bd:
85:f6:f7:e8:75:3c:39:c3:75:12:ab:8f:16:6b:ff:
66:6d:8c:f1:86:f5:35:e9:7e:33:67:c1:54:a6:37:
be:d0:2c:a9:1a:ac:98:de:a3:43:c5:d2:16:50:a7:
25:f5:f0:aa:1b:3d:76:27:e4:73:19:81:9b:7b:c6:
72:b6:8f:91:87:9a:ef:6c:9d:ba:dc:4b:db:5c:e1:
ad:b7:23:2a:77:bb:ce:46:76:92:47:3b:27:2a:1b:
0e:b4:b0:6c:20:24:69:46:56:83:af:e4:86:be:45:
e2:54:0f:86:06:8a:f0:01:88:b1:27:6b:9a:d3:fc:
31:1c:2b:90:df:b5:be:b9:28:0e:90:4c:b4:04:c2:
a8:43:45:de:26:10:17:3a:9c:f7:af:29:ab:bb:27:
34:c8:d8:73:9f:e2:ad:47:5a:0c:cc:18:0c:da:97:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:17:10:E0:BE:1A:02:A0:9F:06:BE:53:48:DD:4E:A2:5E:3C:94:0F
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.224.0/22
46.182.176.0/21
178.255.192.0/21
185.70.208.0/22
185.214.148.0/22
217.18.64.0/20
IPv6:
2a00:19c0::/32
2a09:d240::/32
2a0b:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
72:92:16:51:05:45:a8:89:8f:5b:be:d6:ea:f6:72:fd:4b:5a:
40:a0:3d:c5:73:c0:e0:7a:8f:62:00:61:32:37:f2:a0:0b:48:
af:c0:4c:28:a2:8c:f3:6a:7f:90:20:6b:45:20:3d:d6:56:df:
98:d9:0e:9e:7d:e7:55:d8:e3:1b:5e:e7:9a:85:bb:a5:e1:fd:
4b:c9:eb:19:12:df:23:5b:92:c2:b4:d8:4a:be:ba:12:a5:e8:
20:1e:11:fc:7b:bc:7c:04:f0:eb:f3:a7:bf:cc:b1:3e:af:96:
ee:b0:eb:7e:74:9b:7e:e4:86:84:f1:9a:a5:b7:d4:36:51:b6:
b7:15:ea:88:90:92:73:fb:a0:ea:f2:a1:7f:b6:8b:16:fa:69:
a7:14:fc:bb:d6:69:40:1f:a7:aa:62:af:2c:6b:3d:ea:ae:3c:
ee:bd:69:47:92:b9:95:c3:45:bb:41:e4:f2:9a:6e:87:02:71:
c7:d3:54:cd:85:5c:be:d8:d6:f5:48:57:f7:4e:0a:2f:98:60:
a1:7d:8a:b4:ab:1e:85:6b:ac:40:85:26:dd:03:d6:ba:dd:ac:
71:76:49:62:81:d7:85:7f:e9:59:51:bc:81:d5:fc:0e:98:4b:
b6:ff:2f:cd:0c:c9:3a:16:40:d2:00:d0:35:b8:60:1a:3d:e1:
a9:c4:70:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 01:44:05 2026 by rpki-client