Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HohKkepCJsQjUZqHsFZHdNLmwPU.roa
File: HohKkepCJsQjUZqHsFZHdNLmwPU.roa (raw, json)
Hash identifier: tRqIaF3Ycf+YcrteNaLfPjs9irrD9fPvMiUb7gi2mD0=
Subject key identifier: 1E:88:4A:91:EA:42:26:C4:23:51:9A:87:B0:56:47:74:D2:E6:C0:F5
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FD609359AAFEFE8EA81B281FD19085AD8
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HohKkepCJsQjUZqHsFZHdNLmwPU.roa
Signing time: Thu 06 Aug 2026 07:45:55 +0000
ROA not before: Thu 06 Aug 2026 07:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213929
IP address blocks: 82.163.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:35:9a:af:ef:e8:ea:81:b2:81:fd:19:08:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 6 07:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e884a91ea4226c423519a87b0564774d2e6c0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:72:cd:dc:82:cb:85:64:a6:81:c1:62:f1:
4c:c5:67:95:93:ff:41:ee:ed:c9:d6:ad:c6:e5:48:
f1:ae:33:83:e2:f0:fc:29:20:18:7f:9b:3c:f0:96:
1f:e4:7f:97:d8:bc:44:eb:27:aa:ff:e5:ef:81:7b:
ac:9e:7e:2a:9a:63:e3:4d:83:f9:1a:22:b6:22:f2:
17:d4:c4:92:ac:55:ec:8f:29:e8:fb:c8:10:83:72:
05:8f:33:65:69:10:32:f4:f5:1f:53:12:7f:af:23:
3c:de:9a:72:ef:f3:ea:9c:1f:ae:a5:a6:42:22:f1:
cc:fc:2c:5c:88:81:b4:3d:aa:10:7d:2b:ee:96:39:
da:6f:31:2b:2d:13:56:4d:68:01:ab:6b:31:27:16:
8d:9d:9d:2c:26:a2:aa:d7:f8:fb:ad:b9:f8:90:d2:
64:1f:cc:b8:04:0b:62:c4:00:9d:9b:08:d0:1e:c1:
aa:74:4f:d0:43:58:48:13:74:03:8e:ad:2a:ee:34:
5f:1c:c0:fb:dc:83:67:49:0e:6c:57:f4:b1:2e:36:
ed:06:c2:99:7b:04:f0:42:9a:1f:08:0a:c5:9d:f3:
e4:d9:68:d9:42:f9:e3:7e:3d:43:00:1f:65:d6:2b:
0e:a3:52:40:0b:ed:10:6f:dd:b3:31:99:c5:03:47:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:4A:91:EA:42:26:C4:23:51:9A:87:B0:56:47:74:D2:E6:C0:F5
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HohKkepCJsQjUZqHsFZHdNLmwPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.7.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d2:08:fa:d4:00:e9:e3:cb:75:d0:76:56:1f:3e:c4:29:5b:
3a:5e:14:5f:cd:34:f5:90:80:fe:36:37:5a:77:a6:1a:99:0e:
a4:62:ad:1f:94:aa:1c:d9:53:7b:11:63:5c:83:72:f2:a9:22:
09:7d:48:38:36:16:21:5c:31:63:c5:d2:7b:05:a5:42:1b:de:
1e:9a:a3:46:14:68:c6:4f:35:0d:6d:2b:c6:53:a5:f8:bb:8a:
0a:fe:91:37:42:a6:65:cf:2e:db:36:52:c6:5c:9a:aa:64:dd:
74:b3:aa:14:5f:9e:81:81:4d:96:3f:32:f1:72:d6:f4:44:95:
39:5c:2c:c6:b5:dc:fc:5a:33:12:4c:d9:c7:e5:20:6e:c6:90:
05:e4:0c:a3:60:40:10:33:4a:66:13:90:fd:66:87:82:c8:2a:
8b:6e:a7:23:23:bb:a2:3f:44:70:bd:aa:0f:35:6e:a8:7b:78:
f3:2f:46:cb:75:6f:0e:21:fa:33:63:10:64:cc:56:8b:d6:60:
35:cd:c3:c7:1b:fd:c2:d6:2d:37:1c:b7:64:74:44:09:9a:8f:
dc:03:3d:36:29:97:90:39:3d:50:44:2c:a9:4e:41:56:25:2b:
9b:68:4b:e6:25:fa:26:47:b0:17:1e:8c:ca:af:cd:33:68:33:
ca:04:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:27 2026 by rpki-client