Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/hBVf0oSR64lXEURMC_6uWoVydG8.roa
File: hBVf0oSR64lXEURMC_6uWoVydG8.roa (raw, json)
Hash identifier: PmOQkDBponpodSJxyDx+cYvEIwxcLnkIXOwcqmg5y5c=
Subject key identifier: 84:15:5F:D2:84:91:EB:89:57:11:44:4C:0B:FE:AE:5A:85:72:74:6F
Certificate issuer: /CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Certificate serial: 019F2369460EBD3FA0F7BAAE60E679F89F87
Authority key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/hBVf0oSR64lXEURMC_6uWoVydG8.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207471
IP address blocks: 185.140.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:46:0e:bd:3f:a0:f7:ba:ae:60:e6:79:f8:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84155fd28491eb895711444c0bfeae5a8572746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:6d:1e:b4:ca:9b:05:d8:df:d3:93:be:3f:
e3:82:12:b5:97:6a:f3:b2:46:ce:d2:54:f1:08:53:
2d:51:25:0e:3a:ba:b0:7f:78:cd:ec:32:3a:cd:06:
66:31:46:02:3e:b0:50:ce:fb:47:e2:9a:14:8c:e7:
1c:f2:4d:e7:5b:48:64:63:46:0d:e6:5a:34:6b:83:
e7:94:53:b0:fa:43:aa:85:95:77:ec:81:cf:61:1b:
95:8c:2e:99:a1:cd:65:17:6f:12:04:2b:de:ff:bc:
da:da:09:9f:86:dc:26:f2:dd:4e:2b:31:a5:c6:5c:
52:50:c5:f5:97:82:15:25:e3:2c:66:af:44:52:23:
2e:6f:46:81:66:57:11:d4:fd:cb:a3:af:6f:31:76:
af:04:89:18:b3:30:f9:33:5d:1d:1f:b9:62:e2:0c:
a5:88:45:af:37:96:fd:15:f3:ae:b3:b2:fd:fa:d3:
0d:1d:75:1a:29:a3:ad:4d:53:b0:89:a6:5a:37:43:
b9:70:4e:99:a7:d0:22:cd:57:ae:41:ff:fd:df:34:
c4:24:e3:2a:e8:a7:30:fd:b2:05:f3:c0:5e:a4:fe:
77:de:f2:05:78:02:ff:d1:22:7c:f5:ca:94:ba:91:
9b:7a:ea:66:1e:6f:63:65:b2:ab:92:ad:16:8c:c8:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:15:5F:D2:84:91:EB:89:57:11:44:4C:0B:FE:AE:5A:85:72:74:6F
X509v3 Authority Key Identifier:
keyid:F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/hBVf0oSR64lXEURMC_6uWoVydG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.55.0/24
Signature Algorithm: sha256WithRSAEncryption
78:93:96:3c:7a:7c:fa:3f:c8:63:2e:14:36:2b:56:99:a1:72:
bc:01:8d:9b:9e:af:ad:52:08:6f:93:33:6d:3e:80:81:81:f5:
26:52:1d:f8:37:1e:ae:d0:76:51:65:88:99:d9:a5:87:10:4c:
10:d3:39:64:d7:55:9e:9d:3b:88:77:14:8a:f7:b7:83:e0:00:
bb:86:52:ed:db:cc:9b:12:fd:4e:9c:cd:48:a4:cc:e6:e0:c0:
c0:c5:b0:0d:ae:42:63:af:f4:6f:73:be:14:f5:ec:d8:fb:5b:
ac:83:9f:12:cc:40:b9:03:ce:00:14:e1:0f:d1:be:99:8c:a0:
90:9f:df:7b:8b:87:b4:57:26:0f:eb:04:64:b1:73:db:de:8e:
6b:be:54:ca:f3:55:94:c0:6f:55:1f:3d:94:f9:5f:05:07:de:
b2:99:95:6b:85:1a:9e:7b:c9:67:a1:e9:5b:43:f2:d0:ca:85:
45:6d:6d:e0:b2:e5:f3:76:9d:62:2c:07:44:7c:dc:ca:6e:90:
89:d9:35:52:e9:f8:cb:61:4d:4b:57:11:a7:b3:3f:22:8a:2d:
26:e9:7e:85:7a:ff:e0:bb:b3:da:6f:dd:d6:2e:24:0a:c7:e3:
19:06:da:b1:73:5d:8c:76:e2:4f:64:65:96:b5:a3:4b:92:4d:
69:67:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:52:59 2026 by rpki-client