Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/_HnToJJ_WnCfoxePZKb2DLC9rEk.roa
File: _HnToJJ_WnCfoxePZKb2DLC9rEk.roa (raw, json)
Hash identifier: gY9Qs4N6Wl5+8ahJLkrfEry1UH5eqt2duodhen5ixUc=
Subject key identifier: FC:79:D3:A0:92:7F:5A:70:9F:A3:17:8F:64:A6:F6:0C:B0:BD:AC:49
Certificate issuer: /CN=10e5efe934cf377ddf373b366721f1339243f907
Certificate serial: 01A121A35840DA5FEF72F511F3BBB6172072
Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/_HnToJJ_WnCfoxePZKb2DLC9rEk.roa
Signing time: Fri 09 Oct 2026 17:08:35 +0000
ROA not before: Fri 09 Oct 2026 17:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401405
IP address blocks: 160.211.15.0/24 maxlen: 24
160.211.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:a3:58:40:da:5f:ef:72:f5:11:f3:bb:b6:17:20:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907
Validity
Not Before: Oct 9 17:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc79d3a0927f5a709fa3178f64a6f60cb0bdac49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:76:31:fd:41:b1:2c:81:6f:2a:9d:c7:f0:
5b:bc:2f:9a:14:7f:e7:e9:bf:ba:ed:4a:4d:ea:76:
d2:c0:59:1a:7c:c6:67:e9:61:e5:26:4d:26:bb:ae:
13:21:91:f4:58:6b:92:24:21:eb:af:9f:b2:10:f6:
6a:7b:f5:d1:be:3e:1d:78:a7:41:fd:aa:e9:84:3a:
59:41:2c:ed:8e:90:82:02:09:70:0d:ef:e3:8b:4f:
d2:3f:fd:63:12:ae:b2:77:6a:ef:1f:e9:a5:1e:13:
a8:7b:4d:16:d0:a9:bc:b1:bc:1d:3f:52:08:d1:cc:
9f:c5:e8:11:25:d0:51:d7:fa:c1:93:56:6b:94:f2:
b6:6b:34:00:a6:3e:8f:bc:4f:d1:cd:04:af:7b:e9:
fb:61:9d:1c:e8:1b:99:ed:96:2a:eb:a3:36:1a:46:
ac:17:e8:12:ce:87:55:33:b6:44:de:26:c6:28:e2:
47:1d:c6:10:77:56:f0:89:ee:f0:9b:9a:f9:1c:d5:
e6:7e:27:85:91:30:79:02:f4:97:86:5b:b0:fa:5d:
d1:2d:2d:72:83:c4:6a:46:7d:33:84:23:7e:3a:f8:
44:07:cf:56:fd:1c:14:38:f2:3d:44:87:86:bf:a7:
87:fc:57:3b:c6:09:a8:1d:af:cb:49:fd:40:96:0d:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:D3:A0:92:7F:5A:70:9F:A3:17:8F:64:A6:F6:0C:B0:BD:AC:49
X509v3 Authority Key Identifier:
keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/_HnToJJ_WnCfoxePZKb2DLC9rEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.211.15.0-160.211.16.255
Signature Algorithm: sha256WithRSAEncryption
05:d3:70:a6:e9:de:0d:6b:55:36:a7:68:1e:7b:f1:30:ec:46:
9f:5a:9b:8b:95:d7:b5:a6:b5:a4:27:e8:9e:09:5d:27:d3:c8:
9e:2c:5e:5a:67:cd:51:af:c2:4b:fe:dc:a0:d6:1a:60:a6:ad:
2c:54:fa:5a:f7:b5:99:57:1b:fa:c8:15:02:65:34:91:2f:0a:
24:75:96:19:e9:7b:6c:9a:6d:62:b8:ad:62:8f:07:c0:72:50:
1b:58:23:f8:17:7f:e1:2a:cc:b5:f8:e8:ce:d8:7c:8f:fb:7e:
ee:48:c4:e5:bf:5d:88:c9:23:82:7c:8b:6c:79:99:37:24:5b:
20:3c:56:44:42:bf:1b:0c:51:82:95:29:16:4b:8e:9f:2b:68:
b7:a2:74:e1:72:60:20:62:1e:2b:b5:62:ff:a2:b4:df:ec:09:
34:d7:75:76:dc:b5:de:a6:f3:97:85:13:d7:22:e0:f0:91:aa:
d2:3a:f9:50:cd:93:ac:b9:f3:70:ca:8b:cb:bf:80:61:0e:bf:
34:bd:36:68:19:3e:0e:96:d6:1b:fb:80:26:c5:58:ea:db:48:
15:d0:01:b1:0d:e1:66:85:7d:4c:b5:35:33:76:44:7d:95:73:
f2:17:c7:74:d3:56:5a:01:09:56:22:29:a4:5d:84:0c:d1:72:
71:0d:7a:ad
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaEho1hA2l/vcvUR87u2FyByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZTVlZmU5MzRjZjM3N2RkZjM3M2IzNjY3MjFmMTMzOTI0
M2Y5MDcwHhcNMjYxMDA5MTcwODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzc5ZDNhMDkyN2Y1YTcwOWZhMzE3OGY2NGE2ZjYwY2IwYmRhYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29J2Mf1BsSyBbyqdx/BbvC+aFH/n
6b+67UpN6nbSwFkafMZn6WHlJk0mu64TIZH0WGuSJCHrr5+yEPZqe/XRvj4deKdB
/arphDpZQSztjpCCAglwDe/ji0/SP/1jEq6yd2rvH+mlHhOoe00W0Km8sbwdP1II
0cyfxegRJdBR1/rBk1ZrlPK2azQApj6PvE/RzQSve+n7YZ0c6BuZ7ZYq66M2Gkas
F+gSzodVM7ZE3ibGKOJHHcYQd1bwie7wm5r5HNXmfieFkTB5AvSXhluw+l3RLS1y
g8RqRn0zhCN+OvhEB89W/RwUOPI9RIeGv6eH/Fc7xgmoHa/LSf1Alg0LmQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPx506CSf1pwn6MXj2Sm9gywvaxJMB8GA1UdIwQY
MBaAFBDl7+k0zzd93zc7Nmch8TOSQ/kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTIt
OTVjMGEzZDk1Y2Q0LzEvX0huVG9KSl9XbkNmb3hlUFpLYjJETEM5ckVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTItOTVjMGEzZDk1Y2Q0
LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACg0w8D
BACg0xAwDQYJKoZIhvcNAQELBQADggEBAAXTcKbp3g1rVTanaB578TDsRp9am4uV
17WmtaQn6J4JXSfTyJ4sXlpnzVGvwkv+3KDWGmCmrSxU+lr3tZlXG/rIFQJlNJEv
CiR1lhnpe2yabWK4rWKPB8ByUBtYI/gXf+EqzLX46M7YfI/7fu5IxOW/XYjJI4J8
i2x5mTckWyA8VkRCvxsMUYKVKRZLjp8raLeidOFyYCBiHiu1Yv+itN/sCTTXdXbc
td6m85eFE9ci4PCRqtI6+VDNk6y583DKi8u/gGEOvzS9NmgZPg6W1hv7gCbFWOrb
SBXQAbEN4WaFfUy1NTN2RH2Vc/IXx3TTVloBCVYiKaRdhAzRcnENeq0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:24:35 2026 by rpki-client