Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/de9bdd-67e9-4cac-87f1-1ffb2f73830f/1/sHoHMaONdN2MRVfne8eA7Gx4iTk.roa
File: sHoHMaONdN2MRVfne8eA7Gx4iTk.roa (raw, json)
Hash identifier: y9dXHD840ul10w702/0W9oRzh+JWTguvgCM0eC/am2s=
Subject key identifier: B0:7A:07:31:A3:8D:74:DD:8C:45:57:E7:7B:C7:80:EC:6C:78:89:39
Certificate issuer: /CN=8bf11d971e9b7d427942182347240f829acc76fd
Certificate serial: 01A023D43FE32302F27A0E006D10892D05C4
Authority key identifier: 8B:F1:1D:97:1E:9B:7D:42:79:42:18:23:47:24:0F:82:9A:CC:76:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_Edlx6bfUJ5QhgjRyQPgprMdv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/de9bdd-67e9-4cac-87f1-1ffb2f73830f/1/sHoHMaONdN2MRVfne8eA7Gx4iTk.roa
Signing time: Fri 21 Aug 2026 10:18:27 +0000
ROA not before: Fri 21 Aug 2026 10:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 185.17.32.0/23 maxlen: 24
185.17.34.0/23 maxlen: 23
2a03:ce40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/de9bdd-67e9-4cac-87f1-1ffb2f73830f/1/i_Edlx6bfUJ5QhgjRyQPgprMdv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/de9bdd-67e9-4cac-87f1-1ffb2f73830f/1/i_Edlx6bfUJ5QhgjRyQPgprMdv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_Edlx6bfUJ5QhgjRyQPgprMdv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:d4:3f:e3:23:02:f2:7a:0e:00:6d:10:89:2d:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf11d971e9b7d427942182347240f829acc76fd
Validity
Not Before: Aug 21 10:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b07a0731a38d74dd8c4557e77bc780ec6c788939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a9:9f:ad:6e:bd:10:ad:45:a0:86:1a:a3:92:
af:4d:f2:ff:0a:1f:8d:59:c6:8b:b1:54:41:b1:e3:
0c:3f:25:cf:44:80:0b:f2:4f:60:9c:b1:5d:f5:63:
4b:5f:40:6d:6e:76:a6:e1:31:2a:e0:44:be:4a:4b:
bd:65:6f:6d:da:0d:e8:7a:43:68:7a:5b:a2:c2:c3:
fa:ec:26:7e:b1:c1:f8:97:04:6a:0a:4d:f0:e0:46:
c0:e1:32:c1:bd:c5:dd:02:ea:d8:0e:c5:fc:77:ad:
77:77:97:96:ba:1a:f4:77:96:6b:64:ea:87:69:f9:
73:62:60:fc:33:51:66:ae:82:83:09:c3:5e:5f:fb:
69:2a:fc:ad:64:b2:93:9f:44:b1:20:66:25:9b:b9:
43:c4:2b:c5:61:ae:3b:8c:31:df:a7:78:e3:80:ab:
83:8b:4a:85:73:28:e2:20:2e:45:07:f8:5c:14:fe:
57:75:d1:63:2b:24:01:c0:ff:47:18:c9:a8:ec:e3:
2a:00:a8:10:d5:5f:86:db:b8:fd:aa:89:d4:ed:f2:
f1:53:e1:06:52:01:36:50:93:39:13:9e:88:e9:c0:
09:0a:d3:3f:ee:65:84:d8:41:0a:e9:3f:d0:b2:31:
d9:05:f9:e2:94:af:0b:cf:0f:20:ff:38:7c:fb:82:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:07:31:A3:8D:74:DD:8C:45:57:E7:7B:C7:80:EC:6C:78:89:39
X509v3 Authority Key Identifier:
keyid:8B:F1:1D:97:1E:9B:7D:42:79:42:18:23:47:24:0F:82:9A:CC:76:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_Edlx6bfUJ5QhgjRyQPgprMdv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/de9bdd-67e9-4cac-87f1-1ffb2f73830f/1/sHoHMaONdN2MRVfne8eA7Gx4iTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/de9bdd-67e9-4cac-87f1-1ffb2f73830f/1/i_Edlx6bfUJ5QhgjRyQPgprMdv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.32.0/22
IPv6:
2a03:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
04:2e:05:d7:7f:97:3f:6c:b2:7b:9a:9f:5c:02:26:ce:54:39:
9d:1f:6a:5e:28:6c:e9:0f:f0:6d:23:0e:ac:b1:90:d2:bd:4a:
08:3d:1e:56:85:d5:84:f7:c6:e3:53:ae:f1:39:1b:cb:bb:a8:
59:71:72:cb:a4:31:23:e0:d3:4d:96:54:10:e9:0d:7c:d3:90:
31:56:87:16:d9:d6:99:1d:8f:d3:83:01:f8:0e:70:73:f6:19:
97:7e:03:9d:7f:04:32:f9:a9:b6:9d:cf:f7:ab:95:a6:90:8c:
ff:86:e6:45:dd:09:45:e1:df:83:7b:53:c0:05:c8:0c:1c:b0:
b4:94:7e:a8:93:3c:c9:c4:b5:dd:cd:f7:6c:f9:ff:14:d6:70:
86:0a:60:eb:b7:9c:d0:4c:55:7f:dd:f8:ae:d3:21:e9:b1:f5:
64:c0:f6:2f:96:36:7e:ee:c3:d6:79:93:f7:49:2e:cc:4b:35:
54:02:92:53:1d:0c:dc:84:bc:63:e7:81:9d:6b:bd:72:b2:48:
04:46:89:d9:90:b3:8b:26:85:a7:e6:e3:ee:65:fa:e3:9c:53:
e2:bf:9c:72:1f:a1:48:04:ed:be:d5:2e:f4:c0:5d:3d:38:f2:
15:fb:a1:fe:25:0a:3d:9e:d1:0d:44:60:90:05:9e:0b:04:49:
63:06:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:10:55 2026 by rpki-client