Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/HY8mhm7cAwVxwn1sa30Z2I8_ets.roa
File: HY8mhm7cAwVxwn1sa30Z2I8_ets.roa (raw, json)
Hash identifier: MePkLF8n0SZirWzMo78YzmFOf644N/xtApic5JezPBE=
Subject key identifier: 1D:8F:26:86:6E:DC:03:05:71:C2:7D:6C:6B:7D:19:D8:8F:3F:7A:DB
Certificate issuer: /CN=274232efb2062dd5347037cac80884bc822cdcea
Certificate serial: 01A158AC6097402EB81F10A65277EB657688
Authority key identifier: 27:42:32:EF:B2:06:2D:D5:34:70:37:CA:C8:08:84:BC:82:2C:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/HY8mhm7cAwVxwn1sa30Z2I8_ets.roa
Signing time: Tue 20 Oct 2026 09:37:34 +0000
ROA not before: Tue 20 Oct 2026 09:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3269
IP address blocks: 193.104.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:ac:60:97:40:2e:b8:1f:10:a6:52:77:eb:65:76:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274232efb2062dd5347037cac80884bc822cdcea
Validity
Not Before: Oct 20 09:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d8f26866edc030571c27d6c6b7d19d88f3f7adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:70:71:8b:d0:07:cc:1c:81:cb:8e:7f:9e:
70:3a:3d:9e:78:35:5d:18:fd:b8:85:12:95:8c:3b:
71:f9:45:f3:21:c9:d6:43:88:b5:4b:d3:25:74:bf:
5e:7b:a0:bf:ed:dc:66:94:33:8e:11:9c:0e:3a:49:
96:2d:65:55:fb:70:e7:3a:87:43:e5:b7:39:6f:4b:
b7:2a:40:14:61:c8:b8:8a:bc:76:4e:49:31:1f:91:
ad:05:ac:da:46:1c:55:ab:3f:ff:99:24:8b:c2:5a:
bc:3d:e5:4d:76:d7:76:de:73:03:40:b0:89:bb:50:
e1:43:6f:e2:9e:37:2e:ce:65:5d:e3:3b:72:4a:9c:
5d:39:27:27:5c:65:30:87:f8:5e:2f:c2:38:cd:c7:
2f:60:74:a6:c3:fc:c3:0d:63:cc:14:55:db:aa:0e:
73:f0:2f:01:41:e6:19:8f:e8:61:d4:a5:62:ba:71:
01:15:5c:2c:c5:98:f6:e0:33:9e:a2:4b:f8:b2:33:
0e:0d:54:a3:87:6c:ca:14:c4:30:64:d8:81:29:ac:
e9:0d:8e:0c:7a:d7:ee:52:64:79:1c:f2:c2:8e:50:
99:6d:21:02:0d:12:1a:4f:7c:84:6f:d6:c5:7f:7a:
cd:f3:31:f2:e5:61:c3:92:d8:e6:28:c3:cf:6b:4e:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8F:26:86:6E:DC:03:05:71:C2:7D:6C:6B:7D:19:D8:8F:3F:7A:DB
X509v3 Authority Key Identifier:
keyid:27:42:32:EF:B2:06:2D:D5:34:70:37:CA:C8:08:84:BC:82:2C:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/HY8mhm7cAwVxwn1sa30Z2I8_ets.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:63:94:37:d9:ad:0f:33:af:39:98:11:58:58:f2:ed:22:38:
0d:17:b8:21:9f:e5:52:77:6b:a4:b0:2b:0e:c8:b1:63:45:54:
11:85:6a:b6:de:57:db:28:3d:eb:2e:a9:a0:78:6c:1e:67:ff:
6a:d0:87:57:3d:7f:a6:05:9d:34:db:65:13:bf:7d:ab:3f:b3:
3d:dd:d1:2d:32:25:a6:93:b2:4a:d6:ca:72:22:35:cd:08:0a:
d3:d8:73:df:a4:0a:d4:b0:da:63:08:d8:1f:a1:d1:97:2f:c1:
e2:c5:4f:28:17:9c:1c:eb:87:13:3a:6c:d6:72:73:6d:80:d6:
ab:0a:e2:44:fb:db:20:34:5b:35:4d:01:56:90:c2:ea:9a:67:
7c:1c:bf:1a:e0:ec:de:d5:61:90:aa:40:79:08:b8:f8:5c:a3:
83:db:97:88:b7:a0:27:10:a8:94:04:78:7b:e7:da:80:b1:35:
19:11:cd:90:8a:d5:dc:8a:c1:99:c3:4b:22:50:70:f2:e5:a7:
39:84:f2:bf:10:83:42:09:f1:5b:88:22:45:c3:43:82:42:5e:
b1:72:c6:95:ee:54:1f:92:5d:1e:e0:5e:08:d2:a3:0c:cb:d4:
9e:70:72:4a:87:93:b6:c8:d8:06:2f:61:a2:f9:20:83:e0:3e:
92:79:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:37 2026 by rpki-client