Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/5f3Xl8FDf6Q5twHpBdywBs_xLj4.roa
File: 5f3Xl8FDf6Q5twHpBdywBs_xLj4.roa (raw, json)
Hash identifier: +Uv9uFKbDZR84p5KdUOEDt/daH6pg4lfrqKdR8QwARk=
Subject key identifier: E5:FD:D7:97:C1:43:7F:A4:39:B7:01:E9:05:DC:B0:06:CF:F1:2E:3E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 019F97FB5634F80D106B0726419CE16CC673
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/5f3Xl8FDf6Q5twHpBdywBs_xLj4.roa
Signing time: Sat 25 Jul 2026 06:34:18 +0000
ROA not before: Sat 25 Jul 2026 06:34:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212216
IP address blocks: 80.249.115.0/24 maxlen: 24
89.42.44.0/24 maxlen: 24
185.73.226.0/24 maxlen: 32
185.106.200.0/24 maxlen: 24
185.106.201.0/24 maxlen: 24
185.106.202.0/24 maxlen: 24
185.223.160.0/24 maxlen: 24
195.28.10.0/24 maxlen: 24
195.28.168.0/24 maxlen: 24
195.28.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:fb:56:34:f8:0d:10:6b:07:26:41:9c:e1:6c:c6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Jul 25 06:34:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5fdd797c1437fa439b701e905dcb006cff12e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:fd:fa:88:c7:bd:5b:93:ac:6e:c2:52:b6:
cb:58:b4:9b:26:4c:7a:f2:e3:18:49:de:ad:93:d3:
ef:17:0e:b8:8e:11:98:70:33:95:1e:5b:4f:97:56:
33:0d:20:88:ce:4d:35:c1:6f:9e:28:ab:3c:d2:a9:
1f:bc:17:59:c6:7d:02:fa:9f:c3:da:a1:59:98:19:
54:0e:14:6d:2d:e1:34:d7:3e:3c:fb:ad:32:5f:ab:
fc:91:e2:a3:04:92:8d:83:04:34:a3:0a:db:b0:9a:
9b:9d:90:9f:cf:5b:17:e5:71:f0:4b:6a:31:cb:23:
25:53:02:7f:4f:39:e3:d6:b4:3d:21:03:b0:f0:7d:
4a:7d:31:b0:46:4e:33:61:48:2b:cc:e5:e3:b4:93:
79:e3:8d:8a:d0:4b:dc:0e:20:00:73:3b:62:20:4d:
cb:81:ad:ef:6f:80:dc:71:85:6d:59:59:c9:3c:7f:
f4:36:aa:b8:ee:52:c5:dd:6d:e2:e8:83:bb:36:98:
18:28:62:74:f4:3a:80:3c:2e:4f:88:f9:54:4c:5e:
49:81:c3:6f:fe:c1:6a:e8:78:50:63:8c:ff:1b:ef:
10:b2:0c:b6:5b:27:4e:47:19:80:0a:a1:74:5f:38:
10:70:b0:47:5b:48:38:ec:f9:62:b0:8d:26:9b:12:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:D7:97:C1:43:7F:A4:39:B7:01:E9:05:DC:B0:06:CF:F1:2E:3E
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/5f3Xl8FDf6Q5twHpBdywBs_xLj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.115.0/24
89.42.44.0/24
185.73.226.0/24
185.106.200.0-185.106.202.255
185.223.160.0/24
195.28.10.0/24
195.28.168.0/23
Signature Algorithm: sha256WithRSAEncryption
26:d7:f7:92:da:36:73:af:ee:4d:74:a5:46:b9:a8:35:c7:23:
b7:35:c2:64:be:c7:66:99:3c:41:2d:e9:94:7a:32:aa:96:dc:
d4:32:77:f5:02:68:06:36:32:7f:f6:98:85:d5:e0:21:c3:10:
38:17:00:a4:f8:f1:6b:27:8d:99:28:33:d9:71:e4:df:43:c5:
bb:ef:9e:f6:a7:2d:ec:92:a4:d7:9d:d8:22:f5:ac:17:98:2b:
b0:1a:f8:b4:65:88:ab:93:89:3a:7e:32:17:fd:42:d6:5d:9d:
b1:58:b9:00:8b:db:4a:a8:98:16:3a:68:eb:75:5d:d4:33:06:
02:f4:02:c8:ed:5a:dd:37:01:0a:63:bb:00:39:93:93:2a:6c:
80:81:5c:5d:37:5d:88:0e:8c:77:49:8c:89:13:50:aa:8e:71:
23:73:51:a7:6e:36:3d:52:c3:f9:59:36:fb:49:b7:89:f4:58:
4c:30:64:d8:53:d4:3e:76:54:e9:5c:63:3d:c3:78:89:13:7d:
12:0f:87:2a:fa:70:ab:a0:8c:be:3b:3e:ee:f3:dc:1d:63:e1:
61:23:a7:4a:c2:ad:c4:f6:3d:e4:4c:3b:71:7d:4b:23:fe:1c:
7a:b4:b6:5d:d7:64:8a:52:44:1e:eb:1e:72:80:c9:46:7f:18:
fb:a7:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:27:55 2026 by rpki-client