Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hrKQk8S9GiG42BHkba_0lz9WsDs.roa
File: hrKQk8S9GiG42BHkba_0lz9WsDs.roa (raw, json)
Hash identifier: OQCsqQw6CcQx26SWXLj0loNJ4hKx+OfgZi4HoUmGcV8=
Subject key identifier: 86:B2:90:93:C4:BD:1A:21:B8:D8:11:E4:6D:AF:F4:97:3F:56:B0:3B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01A013C5891FB02AC6BCA6DF3790F4E620D1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hrKQk8S9GiG42BHkba_0lz9WsDs.roa
Signing time: Tue 18 Aug 2026 07:28:27 +0000
ROA not before: Tue 18 Aug 2026 07:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 176.57.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 07:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:c5:89:1f:b0:2a:c6:bc:a6:df:37:90:f4:e6:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 18 07:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86b29093c4bd1a21b8d811e46daff4973f56b03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:ca:a0:3f:3d:7e:f9:52:dd:bc:32:1b:a4:
94:9f:55:de:22:09:30:02:5d:54:45:fc:e5:6c:5e:
10:8e:22:00:2a:a9:8d:e9:19:dc:0a:d7:61:42:10:
c6:f4:24:f1:21:2b:c5:68:94:31:37:c9:55:de:d0:
ea:2b:a7:3d:7f:1b:6a:cd:1c:3a:85:47:0c:97:66:
d9:6d:03:4a:a1:12:0c:9f:3a:ce:3f:68:96:25:da:
84:57:0a:1b:77:98:05:08:36:b2:d4:98:fa:9a:20:
1d:c4:f9:9b:86:60:b0:95:74:dc:f6:4b:43:46:20:
80:55:38:b7:c9:be:e9:e4:f4:ca:cd:88:15:be:65:
e4:70:b4:2b:8d:37:32:11:b4:5e:e1:9c:e0:83:39:
61:b4:15:5b:eb:ba:29:44:c3:e3:c3:27:d0:9b:e9:
7d:96:ad:55:b9:9e:5f:4a:ad:c0:87:92:10:81:d4:
10:d9:7a:7c:d4:b6:ad:7f:d4:9a:09:3c:e2:d9:33:
58:b0:07:7c:ac:5b:2d:d0:65:7b:07:af:78:5c:6b:
2c:6a:ed:ad:a3:4b:55:f3:dd:70:3b:dd:43:d3:6e:
87:d3:e3:05:f4:90:60:7b:d4:5d:67:fa:8e:74:e0:
2a:7a:86:b1:19:df:a8:70:29:9e:70:8f:bd:84:a9:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:90:93:C4:BD:1A:21:B8:D8:11:E4:6D:AF:F4:97:3F:56:B0:3B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hrKQk8S9GiG42BHkba_0lz9WsDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.54.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cd:f5:82:67:a7:b1:d7:f4:8f:1f:95:7f:86:cf:64:44:5a:
d4:04:01:45:96:7b:40:86:44:54:2a:31:1e:92:05:95:f9:b5:
b5:a7:9c:d1:da:22:dc:71:e0:06:46:a0:e2:d1:4a:a0:dd:cc:
61:66:4f:8c:5c:52:5a:67:58:9a:17:d0:8c:a4:0e:6a:06:86:
a6:64:6d:1f:e0:87:cd:a4:ac:df:6c:d7:84:2c:50:a3:ad:2b:
ad:b0:d3:18:5f:66:d2:d0:8b:4e:69:f9:19:f9:aa:31:46:69:
c1:29:5d:16:76:29:50:25:9a:7a:ac:57:a8:f4:e8:2c:aa:19:
8d:b6:47:08:f5:50:80:54:9c:a7:12:89:4b:7e:8a:9a:f4:b1:
eb:df:11:04:6c:17:c9:22:a8:8c:d0:d0:ee:17:a1:bd:e8:9b:
17:76:5f:1b:31:a0:60:1a:f5:9e:f4:e6:f1:a0:d2:71:3c:d7:
a3:be:d3:db:f7:3b:ec:8f:80:f3:0b:0d:04:9c:67:52:c5:5e:
3f:0b:04:6e:c0:0a:ef:3b:2f:99:9d:9f:91:ad:9b:0a:fa:5a:
14:49:0f:b9:bc:76:f8:43:d4:c2:1f:95:cb:3b:0e:f2:f3:03:
0f:5a:e5:dc:d9:d8:64:8b:1e:70:48:f0:ef:04:70:7d:6c:e9:
b5:79:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 12:26:22 2026 by rpki-client