Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/hV7Z0JhJca_rWuDdDUA83cMzh04.roa
File: hV7Z0JhJca_rWuDdDUA83cMzh04.roa (raw, json)
Hash identifier: Ct6cWsZQb45qDLl7df2Fdqz2HkJDXNrfKay24y0voBQ=
Subject key identifier: 85:5E:D9:D0:98:49:71:AF:EB:5A:E0:DD:0D:40:3C:DD:C3:33:87:4E
Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Certificate serial: 01A12FCEB7ABF0FA1CB5E0E9D6F98D0F931C
Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/hV7Z0JhJca_rWuDdDUA83cMzh04.roa
Signing time: Mon 12 Oct 2026 11:10:38 +0000
ROA not before: Mon 12 Oct 2026 11:10:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44398
IP address blocks: 92.43.120.0/21 maxlen: 24
178.23.240.0/21 maxlen: 24
185.16.16.0/22 maxlen: 24
185.87.80.0/22 maxlen: 24
193.201.39.0/24 maxlen: 24
195.74.32.0/22 maxlen: 24
195.90.100.0/23 maxlen: 24
213.174.64.0/19 maxlen: 24
213.179.80.0/20 maxlen: 24
2a00:1e58::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:ce:b7:ab:f0:fa:1c:b5:e0:e9:d6:f9:8d:0f:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Validity
Not Before: Oct 12 11:10:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=855ed9d0984971afeb5ae0dd0d403cddc333874e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:e5:8a:b0:35:8c:61:ba:42:ce:57:7f:f1:
82:96:22:6e:59:68:19:24:32:b1:b0:da:68:1b:09:
4a:75:ac:ba:1c:f7:6c:82:ab:08:ba:c1:25:70:19:
bc:25:b7:72:3c:98:c1:79:2a:f6:2c:f1:7e:d2:a0:
ae:4f:f8:3e:5f:cc:d9:6c:7c:b6:ee:82:03:fb:3d:
2a:0e:ec:12:2f:e4:df:08:3b:10:4e:44:0b:67:84:
23:eb:36:12:07:aa:e6:30:24:97:8f:82:f6:3d:89:
ac:2d:8e:d3:d3:ed:2b:ce:e5:5c:bf:93:7f:dd:ad:
a3:37:07:39:86:83:2c:61:ae:90:12:fd:68:9f:2f:
91:56:77:21:16:ba:3d:3e:3d:c8:51:8e:09:7c:d8:
f3:ef:a3:d0:55:fb:53:20:57:e2:4f:f5:c5:1e:90:
1c:68:d5:80:a3:d4:98:fb:da:e2:a9:ad:18:d3:90:
17:e4:7c:c3:c2:53:ff:74:37:3a:d4:23:c6:2c:6b:
be:55:a1:98:a3:38:68:ea:d7:60:e5:99:fb:eb:d0:
2a:f5:2d:2f:db:bd:2f:4f:68:fa:16:c1:04:c6:61:
49:5a:0f:c2:24:a1:7b:d9:ba:43:c3:ee:03:85:77:
e4:cb:9f:c1:23:37:12:74:61:79:20:f1:89:22:4d:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:D9:D0:98:49:71:AF:EB:5A:E0:DD:0D:40:3C:DD:C3:33:87:4E
X509v3 Authority Key Identifier:
keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/hV7Z0JhJca_rWuDdDUA83cMzh04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.120.0/21
178.23.240.0/21
185.16.16.0/22
185.87.80.0/22
193.201.39.0/24
195.74.32.0/22
195.90.100.0/23
213.174.64.0/19
213.179.80.0/20
IPv6:
2a00:1e58::/32
Signature Algorithm: sha256WithRSAEncryption
53:4f:41:86:cb:c5:92:ed:23:42:48:eb:53:a8:77:69:19:70:
e5:bc:93:22:3b:f5:41:27:bb:6d:21:97:34:28:58:3e:33:b9:
34:96:66:96:1a:2a:05:aa:1f:81:04:74:36:fe:ae:0f:29:ea:
ea:3e:76:27:95:d6:0d:13:2b:0d:fa:fc:8e:ab:c6:93:c7:4f:
93:0e:72:1a:33:f1:60:a8:71:bd:fb:ac:04:43:99:c2:30:25:
cb:ed:7d:f0:0d:7e:38:7f:cd:2a:83:19:2e:e3:f2:49:33:a5:
02:63:36:bf:4b:ee:a1:40:7d:db:68:3d:fa:07:5b:a8:04:2f:
ea:b8:27:86:cc:94:cd:0b:3d:7d:37:f0:21:cb:73:fe:17:fb:
6f:3d:5a:35:60:7a:b1:9f:18:fa:e1:63:0b:67:24:5a:a5:73:
d0:e4:bb:82:91:66:3c:8c:18:ca:28:db:cb:74:43:60:90:fa:
3c:ed:3e:a6:56:b0:f6:0f:cf:28:23:7d:73:93:0b:c1:91:5a:
01:44:3c:53:d7:59:6f:ea:26:47:a7:4a:10:4b:af:8a:4a:f5:
83:8e:23:c9:4f:42:56:eb:0d:76:b1:be:59:26:e7:59:8d:f6:
df:0c:ed:69:57:e9:4b:b1:24:37:9b:a8:27:a0:dc:bf:19:26:
be:7e:e0:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAaEvzrer8PocteDp1vmND5McMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNWY2YTUwZTZhNDg4N2UxN2M1M2IwZmMxMGU0YjdlMTQ5
M2VlYjUwHhcNMjYxMDEyMTExMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTVlZDlkMDk4NDk3MWFmZWI1YWUwZGQwZDQwM2NkZGMzMzM4NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2rlirA1jGG6Qs5Xf/GCliJuWWgZ
JDKxsNpoGwlKday6HPdsgqsIusElcBm8JbdyPJjBeSr2LPF+0qCuT/g+X8zZbHy2
7oID+z0qDuwSL+TfCDsQTkQLZ4Qj6zYSB6rmMCSXj4L2PYmsLY7T0+0rzuVcv5N/
3a2jNwc5hoMsYa6QEv1ony+RVnchFro9Pj3IUY4JfNjz76PQVftTIFfiT/XFHpAc
aNWAo9SY+9riqa0Y05AX5HzDwlP/dDc61CPGLGu+VaGYozho6tdg5Zn769Aq9S0v
270vT2j6FsEExmFJWg/CJKF72bpDw+4DhXfky5/BIzcSdGF5IPGJIk031wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFIVe2dCYSXGv61rg3Q1APN3DM4dOMB8GA1UdIwQY
MBaAFLFfalDmpIh+F8U7D8EOS34Uk+61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2Ut
Mjk4NDJiYzI3MTQ1LzEvaFY3WjBKaEpjYV9yV3VEZERVQTgzY016aDA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2UtMjk4NDJiYzI3MTQ1
LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDXCt4AwQD
shfwAwQCuRAQAwQCuVdQAwQAwcknAwQCw0ogAwQBw1pkAwQF1a5AAwQE1bNQMA0E
AgACMAcDBQAqAB5YMA0GCSqGSIb3DQEBCwUAA4IBAQBTT0GGy8WS7SNCSOtTqHdp
GXDlvJMiO/VBJ7ttIZc0KFg+M7k0lmaWGioFqh+BBHQ2/q4PKerqPnYnldYNEysN
+vyOq8aTx0+TDnIaM/FgqHG9+6wEQ5nCMCXL7X3wDX44f80qgxku4/JJM6UCYza/
S+6hQH3baD36B1uoBC/quCeGzJTNCz19N/Ahy3P+F/tvPVo1YHqxnxj64WMLZyRa
pXPQ5LuCkWY8jBjKKNvLdENgkPo87T6mVrD2D88oI31zkwvBkVoBRDxT11lv6iZH
p0oQS6+KSvWDjiPJT0JW6w12sb5ZJudZjfbfDO1pV+lLsSQ3m6gnoNy/GSa+fuDq
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:30:43 2026 by rpki-client