Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/hqEA9Qo_WR0t0REBXM7emNlm3G4.roa
File: hqEA9Qo_WR0t0REBXM7emNlm3G4.roa (raw, json)
Hash identifier: VMkkkwfnSlYm+rTnOGrHA34ST1v3Lq1NtC99mXy9b8s=
Subject key identifier: 86:A1:00:F5:0A:3F:59:1D:2D:D1:11:01:5C:CE:DE:98:D9:66:DC:6E
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A01E274EF4903DEA5E295A66379CBC8495
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/hqEA9Qo_WR0t0REBXM7emNlm3G4.roa
Signing time: Thu 20 Aug 2026 07:51:27 +0000
ROA not before: Thu 20 Aug 2026 07:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 185.198.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:27:4e:f4:90:3d:ea:5e:29:5a:66:37:9c:bc:84:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Aug 20 07:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86a100f50a3f591d2dd111015ccede98d966dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:a3:ce:48:2a:58:8c:e3:da:2f:2f:d8:54:
88:be:dc:32:06:7a:3d:cb:dc:54:e3:ed:e3:f8:eb:
05:98:79:26:e2:b6:58:72:52:b2:fa:fc:bd:19:c2:
6d:eb:7a:49:31:f0:3f:46:3e:c0:dd:79:97:6c:62:
74:8a:7f:45:c6:24:db:7e:bf:a5:eb:d0:23:03:45:
a5:dd:ad:b3:d2:d2:cc:1f:2d:a3:ad:c9:43:8b:1b:
c7:f4:e4:54:0b:dc:2f:02:be:be:13:87:6a:2f:8a:
50:c0:06:d8:6a:33:aa:11:8e:9c:a9:00:fe:90:46:
c2:6e:da:bc:9d:94:78:c3:c4:87:1a:56:c0:87:d0:
37:ab:91:2d:f5:92:b5:9f:0b:05:f5:a0:78:26:c6:
cb:6e:1c:d5:90:a6:41:ff:15:2e:a2:cf:84:ae:14:
32:5f:e4:86:b7:97:63:87:64:23:35:87:01:31:01:
3b:9e:41:ac:30:c3:06:52:5c:71:7d:a5:bb:1c:68:
0e:43:69:a0:9a:a0:53:ef:30:04:f2:f5:25:dd:f8:
c3:a0:9e:69:27:a1:0c:d1:91:be:47:e9:44:81:07:
b2:ae:e9:ad:3c:00:e5:83:6d:04:65:67:ae:a3:ab:
6e:bf:37:8c:4a:f7:e1:c1:2f:fa:a8:24:94:3b:81:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:00:F5:0A:3F:59:1D:2D:D1:11:01:5C:CE:DE:98:D9:66:DC:6E
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/hqEA9Qo_WR0t0REBXM7emNlm3G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0a:82:4c:6b:2f:5e:47:b8:8a:6f:01:7c:7b:d6:5c:9b:6e:
ae:f6:b6:4e:f6:0c:6a:8f:08:db:d1:4d:a5:e1:4e:6a:57:f3:
2c:f8:81:63:64:16:41:94:80:dd:55:b5:97:d8:31:96:c0:96:
8e:c2:4b:7c:b2:84:fa:28:d7:99:ad:8f:5d:91:e3:19:0e:6e:
ed:04:70:f1:c2:6b:a0:4a:2d:95:15:be:0f:18:3a:bc:3c:b0:
a6:69:84:f5:93:b2:00:df:9c:ae:02:6b:9e:e9:33:ff:32:a9:
51:65:20:74:cd:4e:95:39:5f:44:b4:8c:6b:06:96:79:68:f1:
60:80:b7:47:a3:2a:7c:c8:56:66:1d:33:17:67:db:21:ac:b0:
c1:be:11:62:d9:1f:8f:ea:84:01:ee:9b:27:f8:69:22:e5:4b:
bd:b4:4a:b8:73:4d:38:42:07:73:f7:e3:4f:81:57:50:b5:b7:
83:f4:fe:c9:c6:28:39:34:38:54:e7:d7:8c:c9:2f:18:47:51:
9a:92:88:59:f3:c3:77:e2:cd:95:c8:9c:eb:19:bd:72:77:ac:
a4:b6:18:8b:38:91:bb:5e:45:f2:02:45:e4:b2:23:17:90:33:
4d:72:ac:76:38:7c:6c:36:90:61:ef:cc:d2:41:74:58:23:e5:
ed:91:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:19 2026 by rpki-client