Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/hIqaiOfCzEuXfyoBoPXaNZBAmIw.roa
File: hIqaiOfCzEuXfyoBoPXaNZBAmIw.roa (raw, json)
Hash identifier: N4vg7wjfDW7RaNgDgkEg1fBaeHhbzyqHR6RmAbyMqac=
Subject key identifier: 84:8A:9A:88:E7:C2:CC:4B:97:7F:2A:01:A0:F5:DA:35:90:40:98:8C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01A111CACD98F568501A819E2BE1003C4852
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/hIqaiOfCzEuXfyoBoPXaNZBAmIw.roa
Signing time: Tue 06 Oct 2026 15:17:45 +0000
ROA not before: Tue 06 Oct 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 185.211.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:ca:cd:98:f5:68:50:1a:81:9e:2b:e1:00:3c:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Oct 6 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=848a9a88e7c2cc4b977f2a01a0f5da359040988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:2d:9e:83:78:97:29:7d:1f:06:e1:ce:0b:
96:e3:42:d4:a4:21:f4:17:16:64:64:81:33:d5:89:
98:b4:40:51:79:95:57:51:c7:75:c7:78:70:36:d7:
92:76:1d:df:fc:38:10:26:76:d8:d0:e3:89:c3:03:
43:09:f0:d6:3a:48:fc:17:f2:5a:ed:81:4d:63:73:
20:a5:26:97:96:b8:26:0a:5d:62:4d:e8:5c:65:06:
a9:20:00:f0:e7:cf:56:5b:86:ee:3d:1f:e9:23:d5:
6d:8b:f3:96:63:3c:74:c2:52:56:3c:36:af:30:71:
14:d9:d3:b5:5e:93:af:59:f8:3a:bf:6d:7d:bd:8a:
6d:f9:52:d8:b8:a4:25:67:21:cf:b8:19:4b:b9:6f:
29:c3:59:c2:7e:b1:9a:5b:10:9c:45:40:33:76:60:
3b:79:9b:5e:25:4e:02:af:17:38:14:c1:df:9a:26:
92:f4:92:a0:86:94:e5:3e:95:19:26:fc:03:9f:39:
ff:65:aa:ec:d7:e2:f6:a6:aa:ba:f7:c9:55:ab:88:
b7:0f:16:b9:eb:b6:8b:65:0f:36:cc:17:12:54:20:
d4:10:5e:83:08:2b:58:a1:8b:83:92:18:a0:bb:47:
56:81:84:ab:92:59:c8:69:c3:40:00:78:d9:b9:74:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:9A:88:E7:C2:CC:4B:97:7F:2A:01:A0:F5:DA:35:90:40:98:8C
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/hIqaiOfCzEuXfyoBoPXaNZBAmIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.13.0/24
Signature Algorithm: sha256WithRSAEncryption
73:42:d9:1a:0f:13:0e:98:20:70:af:4c:cc:ed:e5:ed:dc:63:
9c:cd:b7:ec:9b:10:30:19:8d:c7:14:6a:2d:e0:74:0f:00:7a:
00:9f:d6:f6:99:71:0a:d3:12:9f:e3:8f:26:bd:df:e3:e8:f9:
07:6a:45:1b:b4:42:ed:09:a5:2b:ad:ef:bb:7f:0c:db:aa:99:
bc:d2:83:3e:5d:dc:13:49:1f:34:af:95:fd:13:a4:d7:f4:be:
69:15:ab:cc:f6:20:7d:a7:fa:ba:05:bc:c4:25:07:06:c4:4f:
23:01:6f:1b:dd:8a:e8:db:ca:f3:25:65:91:03:3f:d0:f1:91:
17:0b:e9:e9:a1:70:41:fe:a9:ab:c1:aa:16:fa:50:69:39:8b:
f2:bc:60:a2:d9:e6:47:c1:bb:2b:a0:4c:29:9c:99:0a:c5:1b:
b2:d6:90:a8:c6:9b:18:06:61:be:25:58:da:84:0f:cb:41:8b:
c8:24:0f:43:40:54:b8:7f:7e:9d:04:eb:2d:a0:f1:36:13:0e:
c3:49:e6:d5:db:d2:a3:bc:4b:35:0b:77:6f:a7:8a:c6:92:24:
b2:ca:2f:06:2e:08:aa:03:70:9a:2b:ec:96:a5:77:03:00:54:
3f:d1:19:55:de:82:25:3d:b0:e1:5a:0e:a6:4f:b6:b2:ed:0b:
d3:4e:c8:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaERys2Y9WhQGoGeK+EAPEhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz
ZmRlNWMwHhcNMjYxMDA2MTUxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDhhOWE4OGU3YzJjYzRiOTc3ZjJhMDFhMGY1ZGEzNTkwNDA5ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRctnoN4lyl9HwbhzguW40LUpCH0
FxZkZIEz1YmYtEBReZVXUcd1x3hwNteSdh3f/DgQJnbY0OOJwwNDCfDWOkj8F/Ja
7YFNY3MgpSaXlrgmCl1iTehcZQapIADw589WW4buPR/pI9Vti/OWYzx0wlJWPDav
MHEU2dO1XpOvWfg6v219vYpt+VLYuKQlZyHPuBlLuW8pw1nCfrGaWxCcRUAzdmA7
eZteJU4Crxc4FMHfmiaS9JKghpTlPpUZJvwDnzn/Zars1+L2pqq698lVq4i3Dxa5
67aLZQ82zBcSVCDUEF6DCCtYoYuDkhigu0dWgYSrklnIacNAAHjZuXRRLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISKmojnwsxLl38qAaD12jWQQJiMMB8GA1UdIwQY
MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt
NWJhNDNiMTE4Zjc1LzEvaElxYWlPZkN6RXVYZnlvQm9QWGFOWkJBbUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1
LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudMNMA0G
CSqGSIb3DQEBCwUAA4IBAQBzQtkaDxMOmCBwr0zM7eXt3GOczbfsmxAwGY3HFGot
4HQPAHoAn9b2mXEK0xKf448mvd/j6PkHakUbtELtCaUrre+7fwzbqpm80oM+XdwT
SR80r5X9E6TX9L5pFavM9iB9p/q6BbzEJQcGxE8jAW8b3Yro28rzJWWRAz/Q8ZEX
C+npoXBB/qmrwaoW+lBpOYvyvGCi2eZHwbsroEwpnJkKxRuy1pCoxpsYBmG+JVja
hA/LQYvIJA9DQFS4f36dBOstoPE2Ew7DSebV29KjvEs1C3dvp4rGkiSyyi8GLgiq
A3CaK+yWpXcDAFQ/0RlV3oIlPbDhWg6mT7ay7QvTTshH
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:14 2026 by rpki-client