Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hg-K2bU7dey2Ydbbw29iErOi8P8.roa
File: hg-K2bU7dey2Ydbbw29iErOi8P8.roa (raw, json)
Hash identifier: SAgHdm9kDnEuDhbBRM7qrWMJXoWfxU0OsBc08N80B7E=
Subject key identifier: 86:0F:8A:D9:B5:3B:75:EC:B6:61:D6:DB:C3:6F:62:12:B3:A2:F0:FF
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A13A3683238EFD027758960E5327A2AEAC
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hg-K2bU7dey2Ydbbw29iErOi8P8.roa
Signing time: Wed 14 Oct 2026 11:40:13 +0000
ROA not before: Wed 14 Oct 2026 11:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a0b:9800::/29 maxlen: 48
2a0b:a280::/29 maxlen: 48
2a0f:1180::/29 maxlen: 48
2a0f:2380::/29 maxlen: 48
2a0f:4680::/29 maxlen: 48
2a0f:9fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:36:83:23:8e:fd:02:77:58:96:0e:53:27:a2:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 14 11:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=860f8ad9b53b75ecb661d6dbc36f6212b3a2f0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:03:79:13:a5:69:e8:4b:39:bc:05:2d:4c:
51:d4:5a:15:e5:cb:60:31:76:5d:40:30:28:86:a6:
b3:9a:28:d0:65:d6:69:2d:09:f7:ce:78:7c:98:91:
5b:c4:8f:68:44:9a:aa:4e:0b:a1:e2:7c:26:92:e9:
aa:06:12:3e:2b:ea:8e:c5:0f:41:c7:e1:96:5b:d6:
7e:07:e6:3f:35:b7:4c:ce:11:8c:c8:2a:81:89:15:
5e:15:26:15:6e:e7:af:de:c7:8c:6e:a7:0f:35:68:
13:e9:fa:e2:e4:fa:1e:64:31:23:b2:d7:97:b9:5d:
aa:8e:30:37:08:72:16:fd:39:58:4b:64:7c:8f:7b:
2f:6b:48:a9:ce:13:1d:c6:4d:56:b3:7b:55:33:c8:
4e:f4:bb:fb:e0:ef:59:67:bb:8c:c8:9b:87:fb:75:
bd:8d:0e:d5:41:63:9d:4c:4a:8c:f3:e6:57:5f:23:
7f:e8:4b:05:9e:9a:e3:5a:13:91:e2:0e:7f:5f:ff:
9f:45:d5:d8:b7:45:27:9b:b6:40:a0:54:b8:d6:8e:
fb:47:27:94:31:f6:6c:a7:f3:b1:d5:67:ae:ce:8a:
b8:4c:1f:2b:e4:76:57:cf:fc:b1:4c:f1:fd:65:cd:
9e:ce:23:e7:a3:97:e0:b4:49:be:3c:78:6a:ab:87:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0F:8A:D9:B5:3B:75:EC:B6:61:D6:DB:C3:6F:62:12:B3:A2:F0:FF
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/hg-K2bU7dey2Ydbbw29iErOi8P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
2a0b:a280::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:4680::/29
2a0f:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:8c:be:33:66:a3:95:5e:db:f7:1a:61:1a:7b:ff:72:d2:18:
12:35:90:57:b5:d2:98:b7:7f:9f:0a:b5:2c:6e:69:4e:aa:53:
b1:4d:83:12:06:db:99:94:bf:c8:6c:b9:04:e7:43:c0:22:f8:
c1:fd:5b:3e:fd:74:cf:9f:fa:3a:e0:7a:ad:f1:da:db:da:de:
f5:3c:73:62:0f:ce:64:17:de:d1:fd:f1:76:9e:f8:54:37:2f:
bf:93:ec:3c:26:d2:29:31:78:9e:49:2f:e7:3f:c3:63:fe:1a:
25:27:00:67:80:80:b4:fb:f6:68:c5:71:28:93:d3:28:dc:28:
4c:e3:54:fc:4e:f2:8b:49:4d:12:5f:69:ed:33:d3:36:f9:1f:
78:66:e9:f1:f4:f4:0e:c1:7c:cd:b5:7a:69:0f:1e:2f:d0:b6:
ac:ed:81:63:95:a8:ff:aa:d5:7a:d4:b7:bb:7a:59:1b:51:f2:
f1:2c:de:8d:1e:74:9a:50:cd:76:4a:13:48:ee:2d:6d:eb:4c:
a7:a5:49:1d:7b:a2:5d:7f:62:f5:b1:d5:34:3e:df:36:90:5f:
32:ec:c1:df:af:00:c4:f7:a3:ab:74:58:d7:64:9d:22:b7:8f:
dd:57:ca:d7:ef:38:df:0c:8d:7d:e8:8e:72:74:e5:5f:ef:2a:
49:8a:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:08:29 2026 by rpki-client