Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/hnvqiTRhzx1k1I5Yz-RLdIbMdZo.roa
File: hnvqiTRhzx1k1I5Yz-RLdIbMdZo.roa (raw, json)
Hash identifier: AKpiyiynsGZBYcwDRapdMlbndDnrttHO5UZeZsvk6ck=
Subject key identifier: 86:7B:EA:89:34:61:CF:1D:64:D4:8E:58:CF:E4:4B:74:86:CC:75:9A
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01A110327AE08A823A43A258F7A7F60F030B
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/hnvqiTRhzx1k1I5Yz-RLdIbMdZo.roa
Signing time: Tue 06 Oct 2026 07:51:45 +0000
ROA not before: Tue 06 Oct 2026 07:51:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41047
IP address blocks: 2a0e:a6c0::/32 maxlen: 32
2a0e:a6c1::/32 maxlen: 32
2a0e:a6c2::/32 maxlen: 32
2a0e:a6c3::/32 maxlen: 32
2a0e:a6c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:32:7a:e0:8a:82:3a:43:a2:58:f7:a7:f6:0f:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Oct 6 07:51:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=867bea893461cf1d64d48e58cfe44b7486cc759a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:64:02:b9:2c:97:16:38:11:c5:ff:67:a1:
f3:2a:f3:bf:96:9b:b0:58:12:3d:e3:be:37:0a:c5:
46:03:4d:a3:3b:c7:3a:e6:8f:ce:54:19:b2:fb:9d:
d3:ed:61:92:f9:a6:91:84:ff:de:03:db:60:f5:6d:
d9:a9:10:e4:dc:a6:47:27:84:c5:23:c6:8e:3e:e0:
59:4f:dc:c5:00:95:5c:eb:6b:f2:a3:63:84:d5:7e:
db:5c:8f:a7:1b:a3:33:0a:64:3f:03:1b:ae:51:9d:
f7:a4:5a:fe:a0:c3:d9:95:62:cc:f2:53:6f:05:cb:
aa:cd:f5:4b:c5:04:05:3f:28:cf:f1:fa:e6:93:78:
42:94:42:9a:ba:9d:c9:97:5f:98:5d:0d:ca:96:33:
44:6a:f9:8a:eb:de:32:42:ce:91:f3:22:af:97:11:
d1:9c:f2:6c:89:3d:b7:94:7d:e7:af:8f:38:1b:3a:
3a:ce:d7:e2:5a:a8:6c:57:a6:62:8f:6a:a1:89:04:
f2:85:cb:92:d3:65:97:e2:0b:31:e2:35:db:39:f6:
a7:67:dd:1f:86:2c:27:dd:e6:de:a4:5c:54:03:c2:
b6:50:db:7e:ee:f6:b1:21:23:e4:36:c6:cd:47:e3:
79:9b:95:0f:8e:bd:19:3f:28:a8:c1:a1:d1:da:72:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:EA:89:34:61:CF:1D:64:D4:8E:58:CF:E4:4B:74:86:CC:75:9A
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/hnvqiTRhzx1k1I5Yz-RLdIbMdZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a6c0::-2a0e:a6c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:48:1f:6b:36:2d:42:09:00:ad:a5:71:1c:13:e8:a0:f6:ea:
46:6e:3c:7a:b7:c0:de:ba:ce:88:d1:6f:09:47:96:b6:7d:99:
ad:d6:16:c5:f6:03:c5:b2:a3:64:38:ce:b4:44:7e:9e:07:f1:
ba:91:47:31:b5:47:d2:0b:24:b5:bd:49:21:b4:c4:d6:50:95:
3f:b4:aa:e5:0a:7d:53:47:87:fb:cc:c1:b2:ff:69:2d:d2:45:
52:8a:c1:6e:68:5b:ec:0c:d4:80:33:6f:7d:57:ae:a0:00:b7:
7b:ba:a3:62:d2:b7:a8:37:cd:f4:3a:98:13:fd:97:09:d8:50:
f4:5d:6d:fb:d7:8d:cc:86:1a:b5:29:01:70:55:8b:12:98:80:
cf:ef:81:70:00:ec:1b:bd:eb:2d:c5:6f:ed:93:e8:2f:e7:0b:
a5:e5:3e:ac:a2:29:d1:4a:81:80:01:fc:3b:81:49:08:d6:c3:
31:c3:74:ea:3a:12:96:49:ad:fc:bd:b8:84:02:db:ef:db:01:
63:62:c0:f8:92:9d:0e:a7:e1:cc:e2:96:82:c4:ad:7a:a6:b8:
e7:c6:36:9c:71:df:47:fc:78:17:e8:0c:4b:29:45:7e:98:d2:
58:25:da:ae:3b:a9:97:9f:84:f1:3f:c0:14:0f:bd:f0:bf:9f:
c4:8f:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:22 2026 by rpki-client