Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HSp4p0hhP_4r-_sossVtjIUcf0g.roa
File: HSp4p0hhP_4r-_sossVtjIUcf0g.roa (raw, json)
Hash identifier: inPgaXQCzCcHTbdwoR3FIR7wKE0yMkN/OI3TGWq1B1E=
Subject key identifier: 1D:2A:78:A7:48:61:3F:FE:2B:FB:FB:28:B2:C5:6D:8C:85:1C:7F:48
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A106C7F769F1DA6D19A83ED1C738493E52
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HSp4p0hhP_4r-_sossVtjIUcf0g.roa
Signing time: Sun 04 Oct 2026 11:58:50 +0000
ROA not before: Sun 04 Oct 2026 11:58:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.240.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:c7:f7:69:f1:da:6d:19:a8:3e:d1:c7:38:49:3e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 4 11:58:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d2a78a748613ffe2bfbfb28b2c56d8c851c7f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:25:65:09:4c:f2:c5:19:f5:49:fd:c2:14:
4f:c6:75:b4:fd:1e:70:0a:9a:71:3f:b8:75:0c:0d:
00:86:e6:00:ba:74:cd:c7:cf:81:b8:09:1a:64:d8:
a0:00:ba:b7:ea:b8:b5:1a:2b:59:8f:a8:7a:a1:b7:
11:a8:ca:72:22:ce:2f:d5:d9:2a:41:97:0d:ed:3a:
f7:3f:04:b5:54:12:5e:a1:c4:6d:e6:c0:88:01:7d:
09:9c:66:38:11:d7:f3:04:ac:e4:0a:dc:6f:be:3e:
16:a5:76:b7:96:c3:c8:c8:c3:5d:cc:2f:31:eb:c3:
4f:f5:05:3c:ba:1f:7e:e9:5f:fe:d1:5a:9c:6e:c1:
40:84:97:86:21:44:fb:49:ad:ed:bc:9a:ba:1c:04:
6c:b7:4e:22:48:66:bd:92:ab:b2:0e:72:77:b7:6c:
3d:a3:9f:b0:e9:12:64:a4:1d:42:2a:9a:3d:76:be:
98:84:d7:01:3a:66:5b:ed:ff:14:f6:e0:2e:8a:c4:
0f:e4:5d:3f:25:4f:cb:96:d1:f9:0b:0f:c7:b0:ac:
b5:d2:c0:93:05:aa:59:71:d3:e2:2a:66:4a:65:93:
97:c6:5b:e6:74:ca:14:47:14:27:d3:3c:ce:15:7f:
9b:9b:6c:96:bc:1f:46:03:0f:ab:e4:ff:ca:98:9b:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:78:A7:48:61:3F:FE:2B:FB:FB:28:B2:C5:6D:8C:85:1C:7F:48
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/HSp4p0hhP_4r-_sossVtjIUcf0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.85.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b5:d8:01:2d:9a:5f:3e:45:ce:f9:bf:5b:dd:83:17:85:47:
33:ae:73:bb:23:8d:30:ad:38:c6:f9:13:3e:03:a1:21:77:50:
f9:34:00:25:42:b8:ba:4a:e4:09:40:7c:e8:50:3a:69:d0:91:
f3:a4:6b:0d:ce:6c:6b:cf:1c:02:58:45:4f:8d:0b:33:69:88:
45:01:ce:a1:93:ae:9b:71:d4:ba:cf:0c:c7:df:3b:80:e0:3a:
e7:ab:42:e8:db:4d:d8:aa:dd:28:3b:d7:49:a6:37:f4:67:81:
fc:4e:63:3d:08:78:42:44:bd:ae:e6:dd:b6:77:35:0b:4a:3d:
82:bc:72:31:04:92:b9:00:01:05:95:26:83:75:64:b8:46:3b:
19:ed:cd:17:17:53:57:fe:35:45:f9:13:0b:d4:e7:82:22:17:
0f:65:8d:f7:35:3c:7e:fc:6b:46:a4:dd:63:47:9a:a5:8f:e8:
28:8c:e7:ff:61:8a:41:80:88:a2:26:d4:b3:b7:ca:0b:e7:69:
87:d7:b7:45:8a:33:e9:47:91:cb:8f:20:f5:8f:ca:37:fe:f6:
f6:c4:ea:f6:1b:18:18:df:e3:a6:9a:19:1c:d1:e3:70:d6:ac:
e0:4b:de:9c:36:82:41:7a:68:d7:0d:0d:ef:87:34:8a:53:38:
bc:53:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:36 2026 by rpki-client