Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HqS18mhngQSoY-q7Jb1L32ZbVVc.roa
File: HqS18mhngQSoY-q7Jb1L32ZbVVc.roa (raw, json)
Hash identifier: WdDt/ij8hxSOOcmtfRUwHZWVEsgXebwvAD9p/TI1D8U=
Subject key identifier: 1E:A4:B5:F2:68:67:81:04:A8:63:EA:BB:25:BD:4B:DF:66:5B:55:57
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F1B7A8FA34F4D066E5C1A71D12EBAF1E3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HqS18mhngQSoY-q7Jb1L32ZbVVc.roa
Signing time: Wed 01 Jul 2026 02:20:44 +0000
ROA not before: Wed 01 Jul 2026 02:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139576
IP address blocks: 87.85.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:7a:8f:a3:4f:4d:06:6e:5c:1a:71:d1:2e:ba:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 1 02:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ea4b5f268678104a863eabb25bd4bdf665b5557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:4f:9c:d2:5f:05:83:ee:90:10:c3:62:12:
8f:f7:10:cc:f1:d8:f0:fc:a5:15:c1:50:26:80:e3:
1b:fb:09:83:95:7b:f2:b2:7c:13:22:92:70:3e:f7:
01:3e:1e:1c:89:a3:29:da:41:79:88:d0:b5:72:11:
fd:6b:65:0f:96:40:78:f9:01:77:fa:9b:d1:89:ed:
c1:44:d2:71:6f:5b:b7:59:91:2d:71:bd:9d:7a:d1:
23:9c:a3:29:60:b4:03:40:5c:9f:3a:6e:ac:5f:98:
6e:99:94:fc:d3:40:7f:25:76:18:c3:a7:32:11:65:
23:f7:30:7c:8a:03:a3:42:16:86:5b:59:7b:67:3c:
e6:c8:e8:df:08:a6:cc:11:04:db:cf:af:92:46:29:
b0:6b:64:c5:df:48:c3:ac:fd:5d:89:e9:90:9e:a3:
74:64:b3:0b:cc:9b:13:cf:1d:33:74:29:b4:51:b8:
25:cd:3c:9c:01:71:54:d7:d3:73:6c:e5:ec:f1:b6:
24:ef:26:99:12:2a:88:f2:64:09:99:0e:99:4d:cb:
47:37:b7:a0:95:38:c7:4d:93:74:f0:60:ad:56:d9:
ec:d9:f9:04:9b:cb:1d:16:d7:fe:c4:dd:a6:f6:4d:
45:42:b3:e3:41:62:b7:8a:74:9a:9f:3e:b3:bc:da:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:B5:F2:68:67:81:04:A8:63:EA:BB:25:BD:4B:DF:66:5B:55:57
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HqS18mhngQSoY-q7Jb1L32ZbVVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.140.0/24
Signature Algorithm: sha256WithRSAEncryption
27:aa:76:60:2c:60:f7:2a:9d:bf:b7:55:4d:1f:cd:06:ec:9d:
d0:89:48:74:ea:2b:cf:e6:73:d0:6a:f9:13:c6:eb:9a:c1:c3:
95:aa:d0:81:c7:c9:67:eb:8b:92:f9:0c:86:e0:27:78:da:0f:
81:0c:33:39:8a:e0:cb:ae:ba:2f:d8:54:75:4e:4d:63:eb:d1:
8a:57:74:d3:e7:eb:00:b0:28:08:07:1e:1d:6f:d9:41:45:db:
bf:b9:64:ac:ea:dd:b8:81:e1:29:c0:bd:db:27:76:bb:71:35:
71:70:b5:7c:52:33:ac:de:8d:06:c4:8f:81:e7:af:e8:4b:86:
e1:36:60:20:90:e9:84:e0:1e:61:d6:4c:1e:9d:39:82:d2:91:
26:3c:3e:1f:8b:44:bf:fc:c2:ef:64:91:6f:72:78:79:f2:76:
ce:19:1b:21:e2:8f:cd:7c:cb:6a:fe:53:57:96:5a:1c:a4:46:
1f:3b:35:22:df:79:fd:81:92:62:39:95:5e:bf:0a:f6:41:15:
66:ff:84:a5:9d:fb:62:33:33:83:82:cc:cc:2b:61:b6:7b:72:
b5:2e:f5:0b:af:60:e8:c7:40:59:9e:8f:e1:df:e9:9e:0b:33:
cb:93:47:11:61:75:c6:d0:69:9d:76:a2:b0:a9:ca:48:7e:56:
53:85:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:40 2026 by rpki-client