Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/hoyQuOHMgCRKjusTo81pyeqim3s.roa
File: hoyQuOHMgCRKjusTo81pyeqim3s.roa (raw, json)
Hash identifier: hqd8/fjGmCpH8TxwYvqw9pZzXIZPGSvJxX81K1zKMOk=
Subject key identifier: 86:8C:90:B8:E1:CC:80:24:4A:8E:EB:13:A3:CD:69:C9:EA:A2:9B:7B
Certificate issuer: /CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Certificate serial: 019F23687C83E2461F534526815D6EE840DD
Authority key identifier: EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/hoyQuOHMgCRKjusTo81pyeqim3s.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43477
IP address blocks: 91.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.mft
rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:83:e2:46:1f:53:45:26:81:5d:6e:e8:40:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcc683b26fc55113389599eccb1afccd4384ed7
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=868c90b8e1cc80244a8eeb13a3cd69c9eaa29b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:70:e6:e6:07:b5:3b:49:d6:0d:a4:19:17:
c3:1c:9c:b1:a9:ed:22:b5:af:51:86:c4:bd:5c:8d:
07:a2:a8:c3:48:48:71:70:87:65:25:77:a4:27:d9:
3d:95:d8:9f:f8:c5:87:c3:e7:dc:ac:88:0e:bd:11:
56:40:6d:9e:37:0a:2e:46:22:f4:89:30:9d:e5:ed:
31:83:9f:3d:3f:95:94:da:75:f7:68:4b:0a:68:59:
cd:76:eb:c9:84:04:88:cd:5e:f8:7f:69:fe:dc:ad:
3f:36:af:4a:00:b7:28:19:7d:a8:43:8f:b5:a4:bf:
7b:32:56:74:f7:84:d1:93:e6:36:36:32:6c:57:ef:
ad:1b:dd:97:a0:62:70:3c:8c:16:9a:fa:79:de:8e:
08:5e:56:c1:cd:cc:87:4f:c8:39:e6:a8:c3:87:b3:
0b:b7:f3:98:d8:c0:42:3d:63:78:dd:17:b2:ce:be:
38:96:2f:7e:62:6e:1c:9c:cc:bf:dc:06:5c:81:1a:
51:26:7f:2e:e1:ce:a4:e5:b1:27:f9:72:14:7c:cf:
8f:04:a7:ab:d1:cf:a7:8c:3b:8d:01:3a:20:94:c9:
93:f0:17:8f:b0:c2:94:d4:e3:55:5b:de:dd:42:69:
3d:3c:f4:99:ed:03:de:20:06:85:70:0d:54:da:96:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:90:B8:E1:CC:80:24:4A:8E:EB:13:A3:CD:69:C9:EA:A2:9B:7B
X509v3 Authority Key Identifier:
keyid:EB:CC:68:3B:26:FC:55:11:33:89:59:9E:CC:B1:AF:CC:D4:38:4E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68xoOyb8VREziVmezLGvzNQ4Ttc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/hoyQuOHMgCRKjusTo81pyeqim3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/68xoOyb8VREziVmezLGvzNQ4Ttc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4b:8b:47:4b:dc:af:30:95:aa:88:5e:28:83:0b:5c:a7:27:
e2:bc:7b:d6:b4:2a:bc:5d:e0:3a:5c:1b:85:dd:49:4f:36:75:
03:2c:e7:3a:d2:e3:80:bf:2e:94:3c:e5:a5:b5:36:e8:45:1a:
42:59:87:94:36:89:2b:80:8b:a8:48:6d:ed:59:15:63:ef:96:
85:94:28:e1:07:de:80:b1:49:74:f9:57:a9:42:2d:b0:92:19:
3a:e6:5d:53:fe:f7:2e:f1:a6:9b:4f:61:21:1d:ef:8c:e0:fb:
2e:04:22:f6:c3:dd:67:7c:a4:7c:b9:e2:4a:e7:b5:9f:61:ed:
67:b5:46:48:1f:2d:d6:6a:ab:a1:0d:7b:a2:79:70:65:2d:15:
31:b8:58:8c:17:f2:84:a5:d2:c2:22:e9:e0:70:4f:eb:59:e8:
a4:58:aa:77:c9:22:06:9e:7a:26:39:63:69:a5:32:23:16:bd:
61:52:af:c1:c0:00:70:e7:0a:67:2f:3d:86:ee:34:f2:67:ba:
f2:22:ae:15:ea:59:58:06:1c:1b:a1:17:98:f4:17:19:f0:93:
29:43:d2:ed:bf:11:36:f8:c0:67:72:4f:7e:92:d4:8a:f4:49:
fd:fa:6f:1f:6b:1e:44:25:3f:84:78:58:e1:5e:64:b1:40:cd:
62:2c:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:57 2026 by rpki-client