Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/huN3XZd8-ep6VLaPFRDTnPf5qiI.roa
File: huN3XZd8-ep6VLaPFRDTnPf5qiI.roa (raw, json)
Hash identifier: 2Atc+VaWjnlqejGp7Ofwmu5aav4aN04SS5XeGreQ09E=
Subject key identifier: 86:E3:77:5D:97:7C:F9:EA:7A:54:B6:8F:15:10:D3:9C:F7:F9:AA:22
Certificate issuer: /CN=b5ceffa4416572c95beb81a00fd6a09a90a55808
Certificate serial: 01A12278A903A8A988083606413AB373D83D
Authority key identifier: B5:CE:FF:A4:41:65:72:C9:5B:EB:81:A0:0F:D6:A0:9A:90:A5:58:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tc7_pEFlcslb64GgD9agmpClWAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/huN3XZd8-ep6VLaPFRDTnPf5qiI.roa
Signing time: Fri 09 Oct 2026 21:01:35 +0000
ROA not before: Fri 09 Oct 2026 21:01:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55256
IP address blocks: 24.206.96.0/24 maxlen: 24
163.116.163.0/24 maxlen: 24
163.116.176.0/24 maxlen: 24
163.116.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tc7_pEFlcslb64GgD9agmpClWAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:78:a9:03:a8:a9:88:08:36:06:41:3a:b3:73:d8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ceffa4416572c95beb81a00fd6a09a90a55808
Validity
Not Before: Oct 9 21:01:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e3775d977cf9ea7a54b68f1510d39cf7f9aa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:1c:b8:94:d3:e5:c0:ee:85:35:0f:6a:58:
bb:e9:33:22:ed:fa:fd:31:7e:4a:ef:ed:7f:ab:12:
0d:c2:20:66:72:c8:8c:0d:04:1a:5f:fc:41:3d:3e:
7e:95:33:59:97:3c:e7:2e:21:81:04:01:97:6d:3a:
3e:94:57:d6:9f:ad:98:2a:97:1c:fe:7f:de:7b:65:
df:8f:99:25:d1:f8:56:53:83:1e:9b:fd:83:bd:39:
3b:71:53:df:3b:eb:24:9e:33:b2:27:11:f0:7f:5d:
ac:99:fc:f6:9a:d2:28:96:9b:8b:9e:e8:ef:09:17:
ba:d2:dd:45:43:f5:95:57:c7:60:b8:e5:01:5a:e2:
0a:81:bb:76:37:ed:14:b3:63:3d:e9:09:01:96:31:
f3:98:90:b4:3d:ff:95:9b:ee:bd:0f:ec:8f:3b:4a:
c8:59:86:78:df:2d:c9:e6:c5:18:07:a3:03:0e:b1:
1d:aa:3c:28:ac:75:12:a4:b6:13:88:5f:b7:83:a5:
21:58:ba:33:84:82:9f:65:78:01:ca:de:70:b4:07:
45:2e:84:ab:89:c4:40:4e:ec:8c:eb:12:3b:81:bc:
45:f6:88:02:6a:63:27:9f:69:ae:6f:c4:17:12:98:
3f:83:3a:15:2e:d1:1b:9b:9a:95:7b:de:85:a6:1d:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:77:5D:97:7C:F9:EA:7A:54:B6:8F:15:10:D3:9C:F7:F9:AA:22
X509v3 Authority Key Identifier:
keyid:B5:CE:FF:A4:41:65:72:C9:5B:EB:81:A0:0F:D6:A0:9A:90:A5:58:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tc7_pEFlcslb64GgD9agmpClWAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/huN3XZd8-ep6VLaPFRDTnPf5qiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e1653-b9ee-41dd-b89a-0cb760d06893/1/tc7_pEFlcslb64GgD9agmpClWAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.206.96.0/24
163.116.163.0/24
163.116.176.0/24
163.116.199.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5f:22:d8:d9:71:58:2a:60:81:93:e9:a9:31:e0:f9:ab:ab:
27:b1:43:3e:ef:c8:5f:4c:cf:fa:59:70:e7:49:23:99:e9:ce:
b9:0c:55:a5:88:6a:ca:cd:48:3f:9e:65:1c:05:33:98:18:26:
c0:56:eb:4a:de:81:d5:91:cd:6c:34:2b:bb:86:db:c1:0c:93:
7b:44:31:31:a2:e5:ab:03:6a:e6:54:9e:c8:0b:59:11:35:5c:
77:e4:02:7e:57:e6:c5:e4:5e:b2:2a:df:7a:5e:93:87:19:04:
60:44:38:49:6a:b3:53:64:68:6b:32:ae:06:1a:1f:d1:b3:0b:
c6:9c:cd:9d:90:cb:ce:82:1b:53:9b:d8:9c:44:0d:90:9f:4c:
50:ce:be:38:6e:b0:3c:65:d4:8a:d2:18:51:89:32:04:6c:a7:
93:ec:86:fa:8f:92:98:b5:45:3c:65:2d:62:09:ea:da:02:92:
64:ec:44:f2:89:01:36:91:ce:8f:4c:8c:40:5c:de:a9:7a:7c:
29:02:f1:35:b3:07:ca:55:7d:ae:67:35:ee:d3:4c:94:25:3a:
3a:dd:23:2a:1f:34:89:97:24:39:e6:11:d0:ef:c0:50:89:bd:
a1:50:f3:66:d8:28:79:76:1e:99:38:8e:a7:5a:6f:54:06:11:
3f:9c:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:31:14 2026 by rpki-client