Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/hxASy4hLGBeWH_MryyaHO1lrPJA.roa
File: hxASy4hLGBeWH_MryyaHO1lrPJA.roa (raw, json)
Hash identifier: C24hogDjQa5JypWfgjKzLJBRFrw8zGfTt/8PL+XGJDY=
Subject key identifier: 87:10:12:CB:88:4B:18:17:96:1F:F3:2B:CB:26:87:3B:59:6B:3C:90
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 019FF63936C92CD732CEDE0F42F06DC6E41D
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/hxASy4hLGBeWH_MryyaHO1lrPJA.roa
Signing time: Wed 12 Aug 2026 13:46:12 +0000
ROA not before: Wed 12 Aug 2026 13:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42011
IP address blocks: 185.209.116.0/22 maxlen: 22
185.209.116.0/23 maxlen: 23
185.209.118.0/23 maxlen: 23
2a0b:4540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:39:36:c9:2c:d7:32:ce:de:0f:42:f0:6d:c6:e4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Aug 12 13:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=871012cb884b1817961ff32bcb26873b596b3c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:fb:5a:2c:3b:4b:eb:a2:8f:a8:64:df:c9:
46:d8:72:7d:4f:70:a8:f3:8b:1f:0d:0c:15:c7:6d:
bd:99:cb:6f:e8:26:92:04:b8:8a:f3:1c:ab:46:7f:
45:2e:91:ac:08:4c:65:6b:3e:0f:c0:28:bb:ef:f6:
13:d0:f8:f5:81:67:0a:61:2b:55:05:e4:13:00:da:
1a:bb:24:d9:04:b7:70:f9:fc:41:50:66:0f:00:56:
13:c4:7e:85:0d:d7:09:b0:03:cb:bd:cc:fa:81:6e:
48:21:5f:0f:29:f2:4a:aa:ec:9d:9b:90:3d:ba:34:
04:5f:5a:25:26:76:f5:64:6b:9a:c1:0d:8a:1e:76:
ca:d0:54:b7:92:f0:c5:10:82:45:37:fe:12:23:9e:
5f:0e:ec:5c:60:eb:61:a2:f3:4d:06:5b:e7:31:14:
ff:ea:9e:99:c5:84:76:4a:c8:54:b4:f6:79:6f:fc:
90:b0:e4:2b:ea:b2:fb:d9:6d:0b:a3:a9:0d:12:75:
3e:0a:38:98:bf:f8:c7:d4:3f:4c:c7:46:85:b2:e3:
96:e0:a9:e3:24:85:af:8d:c6:db:48:3f:ee:9b:81:
03:2c:29:a1:dc:57:fe:65:7e:2c:b8:a8:f6:79:21:
a3:4f:6d:2a:11:e4:20:8e:ae:f0:34:60:8d:73:57:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:12:CB:88:4B:18:17:96:1F:F3:2B:CB:26:87:3B:59:6B:3C:90
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/hxASy4hLGBeWH_MryyaHO1lrPJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.116.0/22
IPv6:
2a0b:4540::/29
Signature Algorithm: sha256WithRSAEncryption
21:6e:f3:43:64:27:48:ed:a0:6c:c5:1f:57:70:c3:3e:dd:30:
c2:6e:08:35:76:73:42:e8:e3:81:a4:e1:b1:73:c6:44:13:1c:
e3:88:11:f7:b4:54:8a:69:dd:da:d9:48:4f:dc:85:bf:05:57:
52:b0:e7:e8:94:7c:92:15:35:00:6b:64:65:63:f3:50:1a:f8:
39:c2:e1:b2:03:b8:6b:20:bd:f7:3b:92:fc:84:24:ca:8b:c6:
a4:b3:39:c8:0e:00:2a:62:8e:00:01:fc:a5:c2:82:32:47:10:
75:ab:7b:3d:4d:46:35:2a:67:91:f4:ef:48:2d:9c:dc:03:74:
e3:f3:59:d6:9b:17:69:9e:d0:4c:bc:1d:5a:a5:d0:33:45:06:
22:50:ab:f3:02:d9:43:1a:55:d9:b8:a6:af:b8:5d:bc:3a:c9:
19:06:35:04:78:c0:a5:78:f2:70:5d:15:ce:6c:0a:64:99:a2:
55:a8:b4:ae:cb:35:e1:5e:15:ee:69:a4:9e:da:a7:92:04:a2:
13:7f:c9:13:55:8a:74:50:c2:8c:ce:d5:04:71:69:f1:8f:42:
ea:4a:6b:cc:cd:06:96:69:36:a9:6e:42:de:c1:b1:fb:b1:d4:
7d:6b:93:36:3f:7f:33:a9:ba:7a:98:03:8f:69:4d:15:3a:10:
ea:41:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:20 2026 by rpki-client