Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/u0WEwYM28nVJWjjYbM_J1vAHVxo.roa
File: u0WEwYM28nVJWjjYbM_J1vAHVxo.roa (raw, json)
Hash identifier: ipopkQY+H/Upmbbpfts+dH7hizt7AcAZwXiPE0WuDhc=
Subject key identifier: BB:45:84:C1:83:36:F2:75:49:5A:38:D8:6C:CF:C9:D6:F0:07:57:1A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019F0FEB739DA1B3E7A511E399785E6781DA
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/u0WEwYM28nVJWjjYbM_J1vAHVxo.roa
Signing time: Sun 28 Jun 2026 20:28:36 +0000
ROA not before: Sun 28 Jun 2026 20:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 86.104.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:eb:73:9d:a1:b3:e7:a5:11:e3:99:78:5e:67:81:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jun 28 20:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb4584c18336f275495a38d86ccfc9d6f007571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:18:56:15:96:57:72:68:b5:14:53:6f:47:
59:2a:cd:74:7a:6b:71:29:92:77:ab:f1:48:3d:12:
ad:8d:a9:4d:9b:74:e2:2c:48:50:3e:ac:a7:da:03:
b0:6f:1b:62:c3:6f:9d:a6:13:e2:33:0f:a2:a1:7a:
c3:0c:7f:7c:d3:a6:f6:4a:c5:bf:c1:b1:60:48:a1:
af:90:9e:4d:14:ee:6e:9c:0c:44:b4:fc:23:52:ee:
bd:7b:3b:b7:69:46:e7:f7:24:a3:9d:38:44:33:54:
51:fc:94:66:1e:20:a6:74:3c:4c:20:89:6a:4f:ee:
a8:ee:a3:cd:d2:a4:93:58:90:79:a2:23:9e:6d:81:
5d:f6:71:81:5f:13:b6:64:8c:f1:8e:88:fc:26:87:
52:a6:5f:d6:d7:36:da:73:60:4b:92:e3:be:3b:81:
79:1f:12:17:e4:e5:e5:ce:11:ab:86:d7:f5:59:51:
a1:f7:22:ed:59:6f:62:41:ae:27:bb:5f:cb:de:07:
8a:e0:b5:37:a1:be:a3:c1:70:91:88:6b:5d:ae:78:
a7:40:b4:7d:b7:14:8d:60:6f:c5:63:a8:37:33:35:
dc:0e:d5:0e:ec:b5:77:a4:11:30:ac:6d:e5:8e:04:
44:c8:61:02:0d:12:c5:97:14:df:e9:fc:cb:88:42:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:84:C1:83:36:F2:75:49:5A:38:D8:6C:CF:C9:D6:F0:07:57:1A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/u0WEwYM28nVJWjjYbM_J1vAHVxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:a1:61:02:9f:3e:d8:08:fb:20:cc:47:86:21:cd:f6:53:fd:
32:20:7b:a2:43:ce:bc:78:7e:3d:7d:56:74:62:6c:c9:37:de:
1a:0b:e3:8e:25:9a:ef:ed:c5:77:5f:ee:e9:4b:ea:dc:27:25:
b6:f5:fc:03:ea:43:48:ee:5d:d5:02:5f:0f:3f:87:9d:4b:ba:
96:f1:ae:40:ed:c1:cb:dc:4c:d8:fd:a8:29:76:73:4f:e2:8b:
a3:0d:f4:95:88:09:db:4c:4f:fb:d1:b6:77:24:18:01:9d:5a:
e7:0e:2f:bd:0a:98:b3:94:68:fe:95:81:1d:d6:15:ae:55:d1:
e3:a6:13:22:68:24:7b:33:54:85:af:29:aa:b5:f2:fb:4f:42:
ca:e6:7b:1d:d6:3b:42:b8:26:0f:e8:34:1c:4d:e1:52:28:44:
41:48:cd:77:a0:d6:b4:e6:63:6b:b3:5a:16:73:73:fc:75:02:
ec:60:3e:54:23:36:34:fc:25:b8:44:5c:6f:82:1c:f9:e4:7f:
a4:8b:0a:50:5a:dd:49:84:46:55:6d:3b:6f:d2:7b:98:92:b5:
dc:95:c1:76:8d:71:5a:77:35:87:0a:0f:39:b5:6b:32:33:c4:
76:48:ed:07:ba:12:52:cd:46:38:ba:e1:56:f3:26:a5:d1:1a:
2c:0b:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:00:09 2026 by rpki-client