Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Hsio2LWODl63fFxuYYmlNpJjNmQ.roa
File: Hsio2LWODl63fFxuYYmlNpJjNmQ.roa (raw, json)
Hash identifier: lXIG85pSdcKUNG1+GmMQI5epWncJJpfAdu5BzVkc/Oc=
Subject key identifier: 1E:C8:A8:D8:B5:8E:0E:5E:B7:7C:5C:6E:61:89:A5:36:92:63:36:64
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01A0579A1BEE6BD57251ED6B11A518C974EC
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Hsio2LWODl63fFxuYYmlNpJjNmQ.roa
Signing time: Mon 31 Aug 2026 11:35:12 +0000
ROA not before: Mon 31 Aug 2026 11:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29549
IP address blocks: 176.88.68.0/24 maxlen: 24
176.88.69.0/24 maxlen: 24
176.88.70.0/24 maxlen: 24
176.88.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:9a:1b:ee:6b:d5:72:51:ed:6b:11:a5:18:c9:74:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Aug 31 11:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ec8a8d8b58e0e5eb77c5c6e6189a53692633664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:06:a2:de:94:05:0c:96:92:11:50:56:b8:
9f:45:3e:10:6d:1c:6b:75:bf:68:ff:79:fa:e9:ee:
be:87:06:ae:2f:6f:e3:53:90:ed:ae:1b:c9:f7:27:
b0:ea:14:bc:9f:79:04:c1:87:61:42:d3:99:ae:f3:
28:97:71:52:ef:95:90:24:60:e2:d9:7c:8b:ad:3c:
d6:f2:4e:1b:03:2e:b4:d7:4f:2a:27:b3:8d:d4:ce:
23:98:5e:75:20:68:8b:4a:77:f5:8f:e9:97:78:32:
c9:07:8c:02:3d:e1:bf:26:b3:09:44:99:14:c9:08:
39:e9:6a:fc:a6:0b:e3:f6:fa:ad:05:97:18:40:1f:
bc:97:35:99:3c:23:b6:f3:5e:21:04:88:4d:7a:5f:
49:40:18:1e:3e:f1:0f:0f:81:db:f1:40:4f:a2:8a:
21:cd:b6:fd:1a:41:07:d4:52:d3:5a:a8:db:ca:be:
02:bd:fd:98:04:4e:a6:e9:21:a3:eb:cd:3a:f9:40:
44:52:0d:db:7b:95:f1:21:3a:0d:8e:c7:64:a4:69:
ae:25:14:9d:23:28:ae:69:2c:e3:62:39:c6:35:15:
e1:1c:7c:1a:91:86:3b:40:cf:61:61:25:c2:f8:18:
4b:20:af:a7:80:9b:e0:4e:e5:50:49:fc:b8:c6:4e:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C8:A8:D8:B5:8E:0E:5E:B7:7C:5C:6E:61:89:A5:36:92:63:36:64
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Hsio2LWODl63fFxuYYmlNpJjNmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.88.68.0/22
Signature Algorithm: sha256WithRSAEncryption
48:72:cd:8c:4f:fb:57:4a:9f:6e:15:44:5d:a2:2f:a4:e7:bc:
26:a0:75:27:42:06:63:6c:69:62:53:74:fb:b1:a8:ef:ab:31:
90:18:fc:4e:15:41:ff:b9:ed:5b:0d:23:ac:5b:ce:93:a9:f6:
e2:76:f0:80:18:44:e0:66:da:fe:be:04:35:3f:e6:ae:9c:02:
ab:fa:5b:d9:cd:a2:91:e5:b7:88:9b:fd:78:99:9f:47:93:04:
f3:80:9d:be:ef:0a:ed:e7:21:1d:9c:b1:6f:8a:d4:f3:1f:80:
eb:c0:7b:3b:78:a1:c7:80:dc:17:be:69:eb:6e:dc:ed:8f:4c:
b5:a3:03:02:af:fe:f1:c5:cf:be:77:1e:ff:9d:d9:ca:a0:24:
e3:52:0e:c2:6e:d6:c2:6f:da:3e:41:2c:93:cb:c0:03:37:8b:
9f:23:4a:47:5a:3a:c6:e5:b6:3b:e0:16:eb:c7:99:b7:8e:ae:
24:61:22:02:61:79:0e:4c:a0:08:29:9e:19:54:52:99:bf:49:
41:a4:e2:cd:1f:7d:d6:c0:34:30:91:b2:70:b0:ff:c2:b2:13:
3e:90:d9:08:00:7c:86:ae:cc:18:cc:ce:6d:56:f9:f0:c7:fb:
a6:bd:4c:c0:70:5e:cd:14:3e:72:3b:cf:49:28:ee:ac:e9:93:
2d:5d:13:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:59 2026 by rpki-client