Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/hATMJU8bHmx-K2k2EKF6wHzgYJg.roa
File: hATMJU8bHmx-K2k2EKF6wHzgYJg.roa (raw, json)
Hash identifier: xMvcViy2yfcgksu4DdP1xsEHftCpjl4csjaVjibAeTc=
Subject key identifier: 84:04:CC:25:4F:1B:1E:6C:7E:2B:69:36:10:A1:7A:C0:7C:E0:60:98
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01A06C40C9D15E37C77CFA0C6FFFD6486003
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/hATMJU8bHmx-K2k2EKF6wHzgYJg.roa
Signing time: Fri 04 Sep 2026 11:49:40 +0000
ROA not before: Fri 04 Sep 2026 11:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 89.249.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:40:c9:d1:5e:37:c7:7c:fa:0c:6f:ff:d6:48:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 4 11:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8404cc254f1b1e6c7e2b693610a17ac07ce06098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:58:87:6d:8b:62:bd:50:01:ec:61:cc:f0:
2c:1d:69:1c:4a:84:8f:a0:94:9a:0a:35:05:dd:24:
c8:4a:7b:e0:99:33:1f:22:f9:9c:83:98:f0:3a:37:
69:d6:0e:1b:ae:d8:c8:4e:6c:ca:11:44:2d:46:84:
83:30:c0:5c:45:b7:c3:52:62:22:c3:25:ca:f1:9f:
ad:51:6c:d7:fe:e1:17:b6:bd:9e:32:e0:f5:e7:1a:
af:58:4e:6e:ef:b4:bf:7a:49:2e:a8:53:e9:f2:48:
19:37:f4:14:93:e5:ad:9c:4f:7f:02:fb:ac:4e:3d:
16:1c:00:87:90:16:09:35:8e:cb:c5:88:e3:65:4a:
58:9f:ef:ac:7b:15:8d:e0:cf:59:20:29:f2:57:6d:
6b:aa:19:a7:b4:2b:93:ca:c9:7a:a2:df:ce:42:5f:
e4:59:db:a3:1d:f9:9b:0f:35:5a:e6:63:0a:07:e4:
0e:67:91:9f:96:ab:ff:77:4c:9b:09:5a:cf:df:a7:
54:8e:4f:bd:a3:dd:df:4f:4e:4f:94:13:b4:25:69:
4c:6b:4a:4f:5d:87:15:78:a3:07:3a:47:50:c1:06:
12:3e:7e:93:9b:57:3c:4c:eb:03:0f:87:9c:6f:78:
a6:c4:5f:4b:f5:e8:69:39:2b:3e:a1:49:9f:23:31:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:CC:25:4F:1B:1E:6C:7E:2B:69:36:10:A1:7A:C0:7C:E0:60:98
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/hATMJU8bHmx-K2k2EKF6wHzgYJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:bb:0a:62:5b:8d:df:33:bd:3d:4c:13:02:c7:0b:35:0d:04:
f0:c1:ea:97:95:0c:6c:bb:27:5c:d0:d2:51:bc:f7:6d:2d:c9:
41:b6:b8:22:f8:54:05:8a:0a:bc:0a:34:73:6c:53:49:b7:7e:
6e:86:48:99:f3:4a:69:91:29:cd:e8:d4:9c:47:3c:d8:25:80:
af:05:ca:e4:fb:4f:82:4c:75:88:8b:de:7b:38:d0:06:6b:70:
d2:c6:4f:2f:5f:bb:70:3b:ce:5a:da:c4:f4:18:ee:cb:ec:9b:
59:36:e9:11:0b:61:87:9c:ca:82:bb:6f:5e:95:a8:ec:61:b9:
8d:4e:9c:b5:00:5e:92:5b:4e:37:be:c2:b5:5a:82:84:e5:08:
71:86:22:f7:21:5e:cf:95:2d:51:57:93:d1:f2:61:83:19:7c:
a2:97:83:11:44:1d:c4:f9:f1:ae:81:95:3b:24:33:e9:1b:1e:
1e:73:a7:37:1d:ea:12:46:d3:b0:72:78:14:8e:d5:21:be:12:
30:1a:8e:af:af:d4:5c:16:7c:f9:84:6a:3e:6d:56:5c:21:d7:
d2:ff:d7:fe:b7:27:da:80:25:92:f0:ad:aa:8b:31:6c:38:98:
04:5c:35:44:1d:ec:c9:45:5a:9d:0f:18:9b:a0:9c:60:4e:a1:
d6:12:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:47 2026 by rpki-client