Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/HOKn3zKmtRSjMP4gY95pRGsQ4t8.roa
File: HOKn3zKmtRSjMP4gY95pRGsQ4t8.roa (raw, json)
Hash identifier: gjx4DxQQ6VGBQmKgHHbfJgniL+WNt8A78W7MT9lU+s0=
Subject key identifier: 1C:E2:A7:DF:32:A6:B5:14:A3:30:FE:20:63:DE:69:44:6B:10:E2:DF
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A010427CF17766CA42208D5D287A7118DB
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/HOKn3zKmtRSjMP4gY95pRGsQ4t8.roa
Signing time: Mon 17 Aug 2026 15:06:27 +0000
ROA not before: Mon 17 Aug 2026 15:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 80.86.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:42:7c:f1:77:66:ca:42:20:8d:5d:28:7a:71:18:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 17 15:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ce2a7df32a6b514a330fe2063de69446b10e2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:51:21:ab:48:4b:5c:6e:22:ee:46:7c:c0:
6f:b6:26:b4:36:8c:18:45:3f:f2:04:e9:90:86:d7:
9c:fb:52:1d:3e:c8:d9:0d:11:5b:15:6b:6a:5b:14:
fe:8c:41:2b:d6:81:1c:f8:5c:1d:74:b5:84:e5:59:
97:26:57:26:62:4a:58:cc:0d:60:06:2c:8c:06:37:
67:4a:99:fb:f8:e8:e3:8b:9e:92:58:5b:dc:f2:7c:
02:26:ea:2c:c6:3d:a8:34:2d:65:30:25:b6:c7:fb:
c5:ef:25:6e:8c:1d:76:9c:21:99:2b:67:04:57:4b:
b7:b8:ac:9b:6e:a2:3c:b0:2b:24:a2:83:50:32:4c:
87:cc:f6:ff:c6:b9:9f:9f:9a:ed:c9:81:cf:12:1d:
86:27:05:e6:67:aa:37:68:5b:a4:80:cb:9f:f0:f3:
17:81:be:7e:3e:a6:16:1c:6a:7f:7d:67:98:0e:2f:
15:33:e9:33:99:f6:bd:8a:79:92:b1:4b:fe:7a:ef:
95:c4:a0:fc:de:46:7a:c4:2b:91:ba:c4:63:9e:25:
e8:67:fc:9a:c4:c1:a2:27:e6:a2:ee:dd:6c:e5:84:
81:b1:bd:a9:e6:3e:6c:8c:a0:b3:6b:87:27:a4:e7:
06:3e:fb:63:93:ca:13:ad:59:b3:84:48:41:a8:30:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:A7:DF:32:A6:B5:14:A3:30:FE:20:63:DE:69:44:6B:10:E2:DF
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/HOKn3zKmtRSjMP4gY95pRGsQ4t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.211.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f2:28:29:9e:d5:e2:d8:f3:73:6e:1e:0c:a7:53:5d:e5:99:
84:96:aa:9a:ac:5c:28:4b:ce:bd:2a:53:cd:a5:c7:88:f7:33:
25:c2:6b:26:dd:8a:57:f6:55:77:70:6d:9c:df:12:bf:b0:33:
bf:a2:bf:35:d2:01:0d:39:10:73:a8:b2:3f:83:0d:e3:51:f8:
93:11:84:f8:17:38:1c:7b:d7:ae:ff:bc:4f:2a:fc:dc:ea:a3:
10:52:7d:1d:39:d2:42:e4:d1:d8:86:23:4b:a8:84:5a:7d:cc:
c5:7b:9b:bf:bc:22:45:82:b1:53:0a:26:60:c5:c6:84:d1:7f:
d2:71:59:ef:aa:17:57:bd:e1:8d:da:62:71:13:04:d9:92:17:
6c:9e:66:a8:67:41:1b:e9:80:a8:e2:85:9d:4e:86:1b:3b:a5:
61:f0:51:fd:72:fb:97:fc:d0:ef:2f:71:7f:c8:8d:fe:21:c9:
5d:6b:2c:95:7c:17:82:82:10:66:fc:06:48:bd:05:f4:b5:c8:
bb:0d:f2:a4:f5:8a:01:b6:7c:c5:ab:ed:d5:c0:60:07:16:88:
f2:52:be:ac:02:52:12:99:b1:e9:9d:53:d5:c6:4e:74:0a:e5:
39:b5:f5:5b:f2:f3:b7:92:8a:fd:d1:a0:72:fe:e4:7e:fd:ab:
f0:5f:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:31:02 2026 by rpki-client