Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hwxXau069fUe2cx13WOdSn7xmk0.roa
File: hwxXau069fUe2cx13WOdSn7xmk0.roa (raw, json)
Hash identifier: Z2/9aAKHCxuwFSQMBMoR5JefjTrOCbPfNmzOaRWRimU=
Subject key identifier: 87:0C:57:6A:ED:3A:F5:F5:1E:D9:CC:75:DD:63:9D:4A:7E:F1:9A:4D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A07B4E41BD7398A2B158A180E11F831004
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hwxXau069fUe2cx13WOdSn7xmk0.roa
Signing time: Mon 07 Sep 2026 09:58:41 +0000
ROA not before: Mon 07 Sep 2026 09:58:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218887
IP address blocks: 81.5.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:4e:41:bd:73:98:a2:b1:58:a1:80:e1:1f:83:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 7 09:58:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=870c576aed3af5f51ed9cc75dd639d4a7ef19a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:38:44:dc:19:df:56:e6:c5:c4:a4:83:5a:
43:5b:4f:38:a3:80:6f:25:e5:94:41:6d:a4:ae:d2:
f9:32:2a:11:00:7e:49:64:13:48:3d:1b:6e:04:e9:
60:8d:4f:e0:51:f4:9a:0c:90:b5:ab:4f:2d:18:81:
6a:e8:21:51:ca:84:8e:eb:08:50:f5:44:30:72:6f:
74:12:bd:15:a3:7b:b2:5b:3d:e8:41:57:29:5a:ad:
11:dd:23:f3:56:c1:b3:ff:85:51:f2:48:90:a0:81:
b2:d4:88:95:a2:3f:f4:57:dd:b7:81:0b:19:69:66:
c6:d0:ac:48:67:56:24:d5:26:9e:8a:3b:e4:c2:22:
7a:ce:b0:00:9a:60:eb:db:c6:2b:3b:6e:49:db:30:
80:2f:2f:18:78:85:4d:60:37:a2:43:41:84:0a:e0:
89:50:bd:ac:d4:f6:f2:7f:54:80:17:42:a5:54:70:
98:cc:a0:ad:fe:9b:cb:c4:33:73:15:73:a8:37:01:
39:99:e0:cd:8c:cb:b7:0c:1c:97:f3:0e:b9:86:3d:
6a:d4:b1:24:e9:e6:85:f3:90:99:e4:e9:5a:7a:64:
4f:58:0a:92:ed:53:cc:26:9c:99:30:ad:f8:40:fe:
7f:be:6c:48:9d:75:20:1b:14:e9:5e:a2:9f:20:70:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0C:57:6A:ED:3A:F5:F5:1E:D9:CC:75:DD:63:9D:4A:7E:F1:9A:4D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hwxXau069fUe2cx13WOdSn7xmk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.161.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1e:2d:51:6f:72:ae:b5:40:b0:a4:fe:81:d7:d9:0d:d6:00:
e2:74:06:4a:93:4b:8c:35:05:bf:85:21:9c:fa:e1:47:87:73:
39:38:bc:94:97:96:4c:53:03:90:b5:20:14:86:a6:1a:6d:ab:
14:b5:74:0b:30:49:65:ad:25:95:c7:90:fb:ed:e1:de:e4:86:
8a:8d:31:b2:a8:a4:3f:17:d3:27:ed:01:f4:ee:12:83:38:21:
bf:0d:e0:49:14:06:dd:f1:d4:9a:20:e2:58:96:ea:aa:43:43:
31:9f:c5:50:50:2f:26:5e:a9:65:3e:74:98:02:8a:29:b8:04:
09:a3:7f:8b:5c:8e:7f:ff:8b:b5:02:54:a0:be:4c:03:cd:d7:
e5:a4:a4:66:46:84:e5:35:b1:4b:7a:d4:50:22:08:cb:53:c2:
40:be:38:31:22:e2:2a:0d:82:b1:ff:d4:58:e1:5f:e6:17:f3:
0d:76:a4:87:08:05:96:5a:06:4d:d1:21:5b:69:6a:54:22:0e:
20:1e:96:1d:46:c0:1f:24:f4:e0:12:89:3c:c8:bc:2d:b7:b1:
29:ef:d8:eb:41:5e:bb:07:18:d5:6d:60:ae:ba:e3:5a:8f:54:
2c:b6:8b:10:0d:2d:36:0b:a2:7b:df:6b:24:9e:c0:67:74:0f:
7f:be:5b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:32:25 2026 by rpki-client