Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/hvA8wOMg6slg1O62kR-cUI3JgRM.roa
File: hvA8wOMg6slg1O62kR-cUI3JgRM.roa (raw, json)
Hash identifier: 85n2aJ9deWvCkN2zLGwrlJURVYyeviHKPhDasli3ZH0=
Subject key identifier: 86:F0:3C:C0:E3:20:EA:C9:60:D4:EE:B6:91:1F:9C:50:8D:C9:81:13
Certificate issuer: /CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Certificate serial: 019F2368F0A1F5414DBD7D3060D21917CF34
Authority key identifier: C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/hvA8wOMg6slg1O62kR-cUI3JgRM.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41165
IP address blocks: 94.100.208.0/20 maxlen: 20
195.216.204.0/23 maxlen: 23
195.238.176.0/22 maxlen: 22
2a00:7d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:a1:f5:41:4d:bd:7d:30:60:d2:19:17:cf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d967d5ccb1425b91ef4ed789a83afce4612e
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86f03cc0e320eac960d4eeb6911f9c508dc98113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:d0:7d:ad:4f:15:06:82:b1:e7:6a:2f:93:
f1:50:1f:bf:f8:35:8a:50:b6:a9:fc:68:89:aa:8c:
bb:a4:4e:83:d6:8a:0f:fd:df:97:de:f5:ec:97:b7:
17:51:83:e6:81:38:cb:ad:ec:b6:a2:b1:5f:f0:1a:
6f:cf:27:ad:bb:42:ae:fc:b3:72:37:f5:60:4b:d6:
2e:4f:a3:92:0d:d1:a1:00:f3:27:42:d9:3c:de:8d:
a5:c7:cc:09:fe:34:55:a4:d7:e4:06:b5:b3:e1:80:
e5:bf:21:cd:79:b9:09:8d:67:f9:e6:4d:d5:40:e3:
77:de:96:b7:f4:22:be:f8:00:77:93:89:8c:02:a2:
be:99:31:99:b1:e3:15:c2:fa:2f:58:c5:2f:33:23:
fe:77:18:fc:37:9e:49:c6:9f:b5:cb:3d:33:f3:c9:
d1:66:97:14:51:9f:82:14:ed:8d:8d:df:83:1c:2f:
2c:89:17:44:a5:d3:35:98:66:bc:64:0d:80:c1:68:
fa:51:26:2d:fe:e0:79:5d:3d:71:82:af:a8:86:a5:
15:a8:c9:24:b2:76:40:44:0b:95:5a:2a:94:04:9c:
7e:39:93:af:da:b9:d2:ad:73:20:d9:4e:7f:a9:64:
67:21:65:30:c5:de:c2:a2:38:5d:ff:21:1f:2b:ee:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:3C:C0:E3:20:EA:C9:60:D4:EE:B6:91:1F:9C:50:8D:C9:81:13
X509v3 Authority Key Identifier:
keyid:C1:A4:D9:67:D5:CC:B1:42:5B:91:EF:4E:D7:89:A8:3A:FC:E4:61:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTZZ9XMsUJbke9O14moOvzkYS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/hvA8wOMg6slg1O62kR-cUI3JgRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/waTZZ9XMsUJbke9O14moOvzkYS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.208.0/20
195.216.204.0/23
195.238.176.0/22
IPv6:
2a00:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
a4:48:aa:bc:ea:78:f8:65:68:90:a3:8a:f1:15:36:27:99:c4:
a8:71:88:94:6a:fa:91:38:87:ae:b1:73:83:50:af:64:d9:8d:
7f:17:24:f8:fd:86:18:40:78:fe:3e:1c:82:d3:7b:b8:d7:07:
4c:71:d9:9c:99:78:19:27:0c:13:e3:0a:c1:78:39:b0:02:83:
e9:b3:8d:fe:f9:85:b5:ca:09:6f:bf:cd:2b:8d:20:fb:66:d5:
cc:98:ab:67:4d:3d:11:f3:07:08:3c:98:ce:ec:3a:9f:d8:d9:
f7:9d:32:46:c7:b6:e4:22:a6:db:73:5e:89:8d:dc:fc:79:01:
5a:bb:9f:c0:08:7a:ec:0c:5a:db:7a:ad:9a:77:a7:20:f2:e6:
47:cc:af:b9:60:83:bd:4e:4c:89:db:0f:9c:ad:da:ce:0f:12:
3f:e1:58:25:28:1b:c5:c7:e6:08:66:d3:4d:55:98:24:67:02:
d6:79:3e:35:f9:d0:02:b2:fb:00:b0:7d:d5:6c:4d:5e:96:6d:
19:6c:4e:07:32:f3:06:d3:61:1b:09:a9:4e:d1:02:ef:f5:0d:
7b:c7:2c:1a:51:5a:f3:dc:8b:e0:42:6c:81:bf:25:fd:d9:51:
8e:93:e1:ac:1c:65:f4:41:3a:c3:83:e0:a8:08:9b:d7:41:f1:
1b:fe:78:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 22:29:32 2026 by rpki-client