Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H8K3MEV9fpnqdzjolC4PtEsmwuM.roa
File: H8K3MEV9fpnqdzjolC4PtEsmwuM.roa (raw, json)
Hash identifier: RqAGlvqRUPooydkHaRGgGEJtmJRHg7rtkC/n0gEtCjw=
Subject key identifier: 1F:C2:B7:30:45:7D:7E:99:EA:77:38:E8:94:2E:0F:B4:4B:26:C2:E3
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0A5AF0DB9604F11CD8DF2CB549C505A5C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H8K3MEV9fpnqdzjolC4PtEsmwuM.roa
Signing time: Tue 15 Sep 2026 15:28:27 +0000
ROA not before: Tue 15 Sep 2026 15:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275039
IP address blocks: 45.150.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:af:0d:b9:60:4f:11:cd:8d:f2:cb:54:9c:50:5a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 15 15:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fc2b730457d7e99ea7738e8942e0fb44b26c2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:68:d9:8d:c6:83:ee:7e:f0:be:6b:72:cb:
06:f6:48:d2:0e:3f:a2:45:99:e7:b9:15:f0:53:a7:
15:2b:43:c9:dd:72:0e:35:0e:87:51:0a:6a:26:c6:
e3:5c:a1:8e:2d:71:36:0d:8e:40:7e:ae:22:61:f6:
33:d1:06:61:25:a9:8e:4b:88:e3:29:42:6a:6a:be:
d8:71:fa:7d:74:8e:54:c2:40:89:0d:51:4b:43:0d:
5a:57:5c:8c:8d:23:62:7a:16:90:4c:4b:4a:33:4e:
cd:97:a4:58:68:f1:39:e3:c9:97:67:fd:3d:32:96:
b9:1a:52:37:24:1f:52:be:eb:37:7d:92:5c:90:24:
29:3f:44:5c:85:77:4b:27:a2:9f:f2:5f:ac:77:de:
ca:bf:0c:50:4c:bb:fc:71:95:35:50:a5:c4:86:de:
05:bd:4d:87:7f:80:4e:0f:b8:3f:37:9c:25:ca:8a:
9c:b2:37:ae:11:c9:4e:95:9d:97:73:86:88:92:2f:
51:8b:18:b3:e1:17:26:67:34:c4:c5:82:5f:d2:2d:
eb:a3:33:b5:be:19:02:f9:1e:31:60:40:71:d8:95:
52:32:0f:a6:da:8a:23:85:26:52:ab:30:90:5b:72:
34:8d:9f:d7:f5:91:89:e1:de:cf:3f:c9:e0:da:e7:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:B7:30:45:7D:7E:99:EA:77:38:E8:94:2E:0F:B4:4B:26:C2:E3
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/H8K3MEV9fpnqdzjolC4PtEsmwuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:18:71:8e:68:ed:92:af:ae:1f:d9:b1:69:49:5a:fe:c2:79:
dd:5a:55:df:62:6e:80:44:87:e6:63:d0:2b:a5:a1:d5:d0:bb:
3a:25:e2:10:72:ec:87:ee:fa:33:78:f4:99:89:10:c5:21:e2:
79:0c:ae:27:58:e9:14:fd:84:3e:64:bf:19:5e:bc:a5:9f:48:
f4:ad:ca:85:ec:a5:15:d9:10:51:b9:34:12:56:05:f2:63:f6:
b4:d3:95:fe:1e:84:73:d3:08:93:db:02:9f:df:1c:be:67:44:
f7:9a:16:1f:6a:03:18:2e:bd:4a:3e:69:ea:00:a5:2d:42:d4:
7f:99:5f:c9:17:d5:de:47:9d:38:54:b6:8d:8b:5b:03:50:29:
9a:03:2d:d9:5d:41:a4:9d:75:0c:bc:87:30:f1:72:a4:9f:1f:
5a:d8:0d:90:16:50:aa:44:19:1a:56:a2:a0:31:26:a6:af:93:
f8:12:27:08:c2:5a:93:fb:85:56:3a:9a:c2:97:ff:ef:af:d3:
98:5b:22:7f:d2:98:ce:48:85:2e:86:c7:36:ba:a3:74:36:45:
94:80:5d:d3:8f:42:43:b1:78:4a:3c:dc:7d:53:81:21:88:6d:
27:e5:ad:11:4c:d3:aa:58:c7:40:6c:e2:61:f6:4f:7a:76:85:
31:40:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:18 2026 by rpki-client