Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/hCqXIkjbw87o9qfRLbkk1mdWapc.roa
File: hCqXIkjbw87o9qfRLbkk1mdWapc.roa (raw, json)
Hash identifier: ZY4JgYleWv7cv0Tm1hwdUrWJ73gQ3ixshl4F9GJhYqI=
Subject key identifier: 84:2A:97:22:48:DB:C3:CE:E8:F6:A7:D1:2D:B9:24:D6:67:56:6A:97
Certificate issuer: /CN=689701deeaf1660144f2b79bd08172884f1a213d
Certificate serial: 01A0F32232B85E4C6AABECF8153070BC2FD8
Authority key identifier: 68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/hCqXIkjbw87o9qfRLbkk1mdWapc.roa
Signing time: Wed 30 Sep 2026 16:24:59 +0000
ROA not before: Wed 30 Sep 2026 16:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 194.0.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:22:32:b8:5e:4c:6a:ab:ec:f8:15:30:70:bc:2f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689701deeaf1660144f2b79bd08172884f1a213d
Validity
Not Before: Sep 30 16:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=842a972248dbc3cee8f6a7d12db924d667566a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:36:9f:c0:91:6a:a7:67:a2:be:f1:96:17:
c5:5b:c3:a7:22:6a:7c:81:70:1f:5a:40:97:22:25:
a6:1c:f0:a6:f0:dd:67:61:1f:5a:cf:68:59:79:d0:
df:71:56:db:63:d5:1c:88:ec:69:8e:12:38:60:a7:
fa:f1:2a:3d:d6:7c:80:de:d2:4d:5d:bf:d5:72:dd:
ba:d7:41:25:c2:d3:6d:39:1b:0d:d6:f7:ee:e6:b2:
41:55:bb:5b:c8:a2:ef:08:94:a4:9a:9d:62:79:de:
9a:c2:f5:00:7f:96:9f:7b:3f:66:76:bb:ae:07:f8:
95:45:11:7a:b3:11:5e:4c:25:9f:e8:fd:e4:f4:2d:
8c:40:70:17:f6:61:dd:0d:5a:34:33:49:15:6c:46:
b6:f8:c7:2f:ae:0f:b3:9d:f0:e5:0d:0c:c8:ac:0c:
74:9d:b4:a9:03:a9:c5:97:c6:b2:6e:ca:e7:21:20:
25:a1:fa:cd:ec:a8:1a:e9:52:0f:79:7a:98:ab:20:
ba:00:8c:fb:1d:07:c1:75:76:94:4f:0a:95:e7:3a:
eb:a4:be:4a:cb:95:6a:11:3a:0c:5c:41:5c:b4:74:
c5:06:53:1b:10:37:b0:1e:04:0a:f5:82:76:c2:cf:
00:da:79:61:15:7b:b9:cd:cd:b3:6e:42:5b:3f:5b:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:97:22:48:DB:C3:CE:E8:F6:A7:D1:2D:B9:24:D6:67:56:6A:97
X509v3 Authority Key Identifier:
keyid:68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/hCqXIkjbw87o9qfRLbkk1mdWapc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.177.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a1:f1:1a:f8:2b:81:79:a9:17:52:9b:61:52:44:4b:db:9f:
6c:20:f8:89:24:8d:6c:3a:ed:8c:ed:59:9b:dd:a9:ac:33:ff:
ee:55:fe:18:80:d2:15:88:86:bb:e1:56:7f:b1:e7:85:4d:39:
fd:0c:08:26:7a:c9:44:fb:5e:10:00:06:ab:f8:bb:f1:75:3d:
85:4f:98:56:fb:0a:70:9c:d6:f5:1a:a1:53:8f:64:53:2a:fe:
e9:a1:65:44:de:4d:9f:d2:71:65:51:11:19:5b:15:b3:f4:91:
17:a2:4e:e6:2c:e7:f5:06:6a:65:b7:4e:24:c8:81:f8:0b:c1:
3f:92:0a:4d:f5:0d:83:69:61:64:aa:02:88:6e:f3:89:65:72:
55:a5:03:23:e0:d2:c5:20:67:c1:a1:ed:a4:4f:fd:24:0d:1c:
b1:78:33:00:31:af:98:87:8a:32:14:33:25:0c:df:de:da:63:
bd:4b:a3:20:6d:8e:46:bd:16:dd:2e:7b:e1:bc:a7:e9:10:22:
a1:61:c6:18:13:e3:b3:98:74:01:98:0a:01:17:cd:91:4e:b6:
1d:6c:de:d9:28:cb:41:6b:44:6c:a1:9f:ee:1c:ac:86:53:ea:
c5:3f:34:ef:54:22:8f:c2:d6:0a:65:ff:8f:e4:1a:ea:fa:55:
5b:8c:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:22:21 2026 by rpki-client